Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vsyDDX6awiJWrnzvd8WB2Eolsu0.cer
File: vsyDDX6awiJWrnzvd8WB2Eolsu0.cer (raw, json)
Hash identifier: FYOgebiOKprvMK2GL86SiAVSlfPvjCo000cO0djRKbs=
Subject key identifier: BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D69CFF597FC4546B81F6D4F4BDA69FC70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 07 Apr 2026 21:18:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 11967
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:cf:f5:97:fc:45:46:b8:1f:6d:4f:4b:da:69:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 21:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=becc830d7e9ac22256ae7cef77c581d84a25b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:f2:8d:61:75:c4:a7:04:4b:52:cd:c9:ce:
6c:33:35:66:3f:bc:b3:c0:87:1c:32:8c:9b:c1:a9:
d3:8f:50:c9:b6:f9:c3:35:43:3b:11:8b:c1:1e:b7:
39:d5:73:95:bf:74:b6:c4:61:7f:49:f7:c6:bc:d5:
24:a5:56:31:97:58:d9:45:7f:31:d9:64:7b:b0:37:
7e:02:18:d2:3c:ae:6a:69:ee:47:cc:22:a8:d8:0e:
8b:d0:d6:5e:dd:6c:42:38:f1:bf:18:13:1f:70:be:
9f:dc:94:38:91:10:81:0c:fe:75:a4:97:f4:53:72:
63:25:70:fe:1f:68:4f:e6:cf:6b:aa:66:9d:53:3c:
0c:bc:e5:d7:2b:2f:c6:75:c1:7e:c2:12:1c:87:ca:
6c:13:3e:1b:73:cb:d4:a1:b3:ca:10:10:cf:f2:0e:
8f:bb:40:8f:aa:e9:56:51:d6:62:05:77:42:08:c9:
0b:e1:3b:8c:6e:e9:d3:8f:11:ed:46:a5:3c:f1:25:
e7:5b:82:ee:06:9f:a9:de:1e:b0:fd:f7:d2:b8:62:
8b:37:be:bc:05:f7:8a:40:8c:0e:08:81:33:9c:3b:
1f:77:67:5c:8f:61:c8:28:e8:d3:4e:3f:8a:17:e8:
d6:6b:c1:aa:21:a7:ea:0e:12:6f:16:75:5d:54:fd:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:83:0D:7E:9A:C2:22:56:AE:7C:EF:77:C5:81:D8:4A:25:B2:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d0b0ee9c-9c63-481f-b682-e91469dd6592/0/BECC830D7E9AC22256AE7CEF77C581D84A25B2ED.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11967
Signature Algorithm: sha256WithRSAEncryption
22:98:5e:e0:44:a1:ac:0d:16:92:bb:ae:3b:f5:bb:2a:00:e6:
5d:cf:52:c0:58:d2:e4:a8:f2:4a:94:99:f8:28:23:e4:cf:94:
84:55:a6:3a:7d:4e:ba:66:d0:c4:97:e2:b5:10:64:49:1c:ca:
5a:7c:8a:84:5a:6c:f9:89:05:f7:4b:f1:a0:c5:cc:72:1c:12:
55:e5:19:47:d3:4c:3d:94:14:19:5f:73:1e:88:ba:b3:82:92:
98:0f:71:43:06:95:d7:bc:76:c7:ad:fa:c9:d8:29:3b:7d:b7:
61:ab:77:aa:6e:8e:05:c7:a0:1f:b4:1f:91:8d:e9:58:89:dd:
43:3b:54:3d:d7:2b:91:a4:b1:d0:ea:09:47:a3:c0:2b:df:df:
1d:24:aa:f1:e6:be:86:cf:97:ed:8f:20:20:07:86:e5:e3:e2:
0d:b7:fc:41:32:8e:94:41:9e:65:00:35:9c:79:50:2b:61:16:
28:0b:94:05:6e:11:70:6d:e5:73:8b:d5:82:ae:74:61:29:a6:
02:bc:5b:e3:9e:45:bf:7b:a1:f7:26:d8:b9:ec:b9:bf:a7:61:
3e:f8:ae:9b:53:d3:ba:80:5c:50:13:1b:a8:42:e4:13:87:f4:
f1:f9:24:b0:57:4e:52:13:89:fb:43:dc:68:dc:9f:63:ef:dd:
28:a5:a8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:56 2026 by rpki-client