Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.cer (raw, json)
Hash identifier: SSFIhIrAbT+epX70x/s/YNEFZYUW6gFt8KNvlOqUUrY=
Subject key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7758F49DFAEE4A520A7B360E5DD70DA2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 13244
IP: 194.9.170.0/24
IP: 194.153.171.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:f4:9d:fa:ee:4a:52:0a:7b:36:0e:5d:d7:0d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53550b2382e00fa7df194e6485fe1425836213ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:b5:5f:c3:31:32:ac:dc:44:96:7f:b4:00:
9f:24:1e:da:b5:98:5c:34:20:f7:73:a6:5a:a7:81:
25:59:c1:91:9a:ab:02:2c:9d:7d:3e:f5:73:5a:2b:
4b:24:7b:8b:35:e8:9e:01:91:cf:e7:ca:10:5d:41:
88:40:c2:15:01:6c:c5:67:bf:49:0d:ef:07:59:eb:
1b:a3:02:5e:a0:0b:f3:76:b3:89:db:b8:27:52:87:
0b:df:f6:dc:92:9b:13:09:4c:7e:d2:a1:93:1b:7a:
e8:70:ea:7b:57:5a:85:72:43:20:26:99:f7:76:ce:
4e:72:ce:64:18:62:00:29:7b:72:83:3d:a9:86:29:
b4:14:c2:f5:0a:28:93:31:9d:63:a1:f1:db:bb:48:
cd:54:39:ae:25:e7:a5:f7:49:bc:73:bb:56:98:4c:
ae:ba:7b:ab:80:3a:08:a5:4c:7c:c7:6e:81:ad:3b:
cd:aa:a0:3c:c9:59:e2:85:d4:4a:d4:93:c3:e3:a5:
ab:69:5b:d3:06:1b:f7:df:56:63:e5:3e:25:3b:95:
eb:31:4e:c8:6f:5c:46:66:df:10:af:b3:9b:7b:d0:
98:9b:cf:fe:8c:55:ef:dc:86:f6:e6:5d:43:27:8c:
8d:e3:74:e9:95:96:99:7c:94:19:4f:3b:4a:3c:3e:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.170.0/24
194.153.171.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13244
Signature Algorithm: sha256WithRSAEncryption
a3:16:bc:fd:ad:a4:3a:42:92:68:20:fe:5f:af:7e:ea:13:d3:
96:b1:5e:0b:84:08:3a:b3:cf:e3:07:81:2b:27:81:c3:97:f0:
f6:4f:0e:6d:75:3b:18:72:98:82:d6:9d:74:0c:e1:21:13:56:
42:d5:bb:d4:1d:c0:0b:bd:95:6d:2b:f4:1a:0b:e1:93:56:10:
6f:01:59:83:a4:ac:5d:78:e8:b9:1e:79:e8:1e:90:e1:b1:a1:
b7:dd:41:2a:ed:b4:8c:b1:07:51:7d:9c:16:5c:c1:62:f0:22:
72:4f:35:58:7f:a3:1a:0e:ce:cd:bd:8b:6e:6b:45:d0:12:bc:
fc:f7:d0:e7:72:f1:3b:53:b2:15:f9:ce:f9:09:37:34:41:73:
04:ed:9d:7a:7d:9a:4c:fb:77:ce:bc:59:17:6b:1b:2f:09:bb:
94:27:6a:17:d6:f8:24:94:22:fb:b4:14:87:0c:96:25:f5:f2:
17:4e:89:1d:31:8d:77:96:97:e1:9e:84:bd:74:8c:f2:09:af:
3c:5c:a4:1e:ac:0e:b7:94:97:69:36:c4:96:77:f1:bc:30:8f:
c6:7e:22:17:a1:36:a9:32:08:f0:46:04:21:a3:39:d9:bf:19:
7c:5e:b9:89:15:e2:4b:2f:c5:4d:8b:34:cf:2d:2d:c1:7c:a7:
0c:75:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:32 2026 by rpki-client