Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer (raw, json)
Hash identifier: zGKFE3DmWNjVD2nGf95zGPcuxlp6pn1TMHoOvFAu54M=
Subject key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D3EBB35EDA50B57594DB0107319FDF46E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 30 Mar 2026 12:32:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13274
AS: 16167
IP: 176.102.190.0/23
IP: 185.210.158.0/24
IP: 185.243.0.0/24
IP: 193.41.230.0/24
IP: 195.42.249.0/24
IP: 2001:67c:138c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:bb:35:ed:a5:0b:57:59:4d:b0:10:73:19:fd:f4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 30 12:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5541609cd947bedfc99125840030108a3f141c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c1:cc:8c:33:82:76:27:52:57:f0:dc:f1:
11:c9:ea:06:ae:22:ad:21:e7:86:21:ff:a5:2f:a1:
c4:41:30:36:87:57:d9:0b:6a:b7:c8:fa:c7:2a:a7:
ea:7e:76:a6:80:cd:60:74:72:d8:aa:e0:00:d3:d5:
0f:8b:b3:c8:db:5a:d5:26:78:5b:f0:89:82:cb:6c:
f7:ce:d8:bf:30:db:0a:0b:29:b2:a0:8b:fb:61:d4:
95:d2:3c:45:03:1c:a3:59:63:a0:f3:74:d1:a0:c8:
31:be:f8:5c:29:a5:27:c9:21:4e:bb:b8:6a:df:03:
6a:e4:e9:4e:5d:0b:4e:1a:99:9e:3d:b7:0b:f7:fc:
84:8c:8e:9b:00:f1:6b:b2:98:a5:8b:aa:2f:b2:02:
cc:8a:ae:43:85:71:e3:87:46:e8:73:a1:1d:88:f5:
64:2a:d5:2f:18:f4:44:0c:54:70:2d:af:81:93:67:
aa:89:2a:b4:96:4f:ca:33:55:f4:48:fa:47:ef:23:
07:13:c6:01:db:99:a0:09:09:be:b9:18:a4:cc:09:
79:51:ed:da:5d:a5:84:6b:b6:51:c9:11:08:e5:ea:
53:3f:3f:7a:03:bf:da:1f:b7:e1:2c:c8:7a:7b:17:
37:96:3d:31:49:20:c2:f7:2e:fb:fb:7a:23:bf:51:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.190.0/23
185.210.158.0/24
185.243.0.0/24
193.41.230.0/24
195.42.249.0/24
IPv6:
2001:67c:138c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13274
16167
Signature Algorithm: sha256WithRSAEncryption
35:b0:06:7d:81:f8:8f:00:2e:47:2b:39:16:38:0e:1e:57:dc:
16:d1:8d:63:7e:f9:ef:53:eb:fb:77:06:b5:47:4b:82:ed:0f:
ff:dd:71:e9:38:8a:ed:83:bc:9c:ae:ec:6b:bd:35:ba:b8:e3:
11:77:0b:2b:9b:28:9d:db:06:b6:d5:5e:cb:7d:33:5f:70:9d:
9f:e8:b0:f7:34:e9:fb:2a:c4:f7:87:d2:c7:d7:77:46:3a:29:
0b:2f:c1:2b:43:f4:ed:bf:a2:cf:2b:e2:43:4e:ae:00:1b:9a:
7c:95:bb:9e:ad:a7:76:03:3e:3c:1e:2a:1d:1a:9a:43:37:b8:
f5:a0:d4:af:9c:de:3c:71:51:24:04:8a:69:4b:76:1f:70:b1:
74:dd:5a:b2:25:24:57:51:b1:58:8c:68:7a:ca:87:05:ce:7e:
48:cb:26:ad:86:1c:17:53:e0:92:b1:68:ca:34:2d:1c:69:88:
17:0f:b7:be:13:12:6d:c4:a8:37:95:82:33:99:08:ed:1f:69:
be:5a:e2:fc:63:1e:b8:d6:dd:e1:40:6d:31:6c:c4:b3:2b:53:
c9:f9:35:ec:f9:e5:bd:0b:8e:8e:71:ad:4b:ef:9f:ad:40:47:
8d:0b:fb:7b:c8:54:f3:2e:f2:32:a4:88:37:5b:9a:ce:cc:77:
0c:44:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:08 2026 by rpki-client