Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.cer (raw, json)
Hash identifier: +gVLcee7Ikf46boXDnq/TwpYpBmRoU7jPOZNVDGw9zg=
Subject key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB9C16854F83C258C402A799AC0A91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:31 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 58127
IP: 185.185.112.0/22
IP: 2a0b:5280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:9c:16:85:4f:83:c2:58:c4:02:a7:99:ac:0a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:1f:1c:7e:2b:bf:61:d5:35:11:2b:71:48:
e8:69:f2:a1:02:ce:d2:45:b7:12:62:3f:f9:32:6a:
3d:91:cc:7b:cc:26:07:03:e9:fb:0b:7b:92:30:9e:
89:d0:a4:83:26:c0:ac:f5:98:29:8d:9c:0a:3d:3b:
54:07:21:5e:ce:b9:d9:90:b8:ee:01:21:5e:de:50:
da:bd:61:6e:9b:5e:d7:45:ef:c0:76:66:a2:d1:1e:
9b:70:55:30:b8:aa:bd:8a:76:87:2a:7a:98:a3:99:
1b:f1:b5:30:f1:94:41:8e:c8:59:91:1b:69:fc:66:
9d:25:9f:60:ed:66:0e:c7:de:7a:da:16:1f:b2:33:
43:b0:86:1f:f3:99:0e:c1:a5:df:94:55:6e:cb:50:
eb:1b:32:0f:6b:31:1d:01:e7:73:1d:62:4a:29:71:
0f:23:a1:74:7e:dd:cf:0b:39:42:cd:91:54:0a:8c:
6a:50:25:22:26:8f:9c:23:de:73:8b:4c:e4:77:af:
1a:14:24:70:be:57:dd:5c:9b:f9:0b:e8:b5:ee:eb:
e8:7d:30:4c:80:26:14:4c:81:f8:8f:5c:c1:36:a9:
6c:56:ad:81:b1:80:dc:d4:8b:62:ad:3e:47:66:ca:
e6:48:88:20:59:05:f2:86:30:32:fe:8d:e0:c6:26:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.112.0/22
IPv6:
2a0b:5280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58127
Signature Algorithm: sha256WithRSAEncryption
a9:fe:b2:e2:50:c5:e3:3b:cc:43:eb:1b:e2:a4:2d:1d:aa:ae:
30:5b:e6:f0:e0:37:91:5e:51:52:2d:df:52:85:50:9c:6a:13:
c2:6b:6b:86:b3:ac:9e:51:04:9c:a0:cb:8d:48:46:3f:03:67:
46:e4:41:ea:63:dc:1f:25:24:3a:1a:ab:2b:7f:75:e1:6c:c6:
1b:6b:f0:e8:b0:20:cf:c3:d0:b1:69:eb:0c:f6:10:e8:0c:10:
5e:bf:32:0e:a4:a7:76:c1:45:cb:4e:b3:0b:b8:b9:77:ea:69:
cf:53:d0:b9:39:cd:0d:65:a3:ea:e9:a1:5d:eb:9b:b1:48:66:
5e:90:2c:00:5b:08:90:3c:97:91:73:26:a8:cd:56:6b:ad:47:
ab:a4:fd:ea:00:2b:cc:b8:5b:ed:7a:bb:1d:78:d3:3d:49:ef:
a6:ae:75:2c:bc:e0:41:c8:e2:33:78:0f:44:8b:e9:5f:0f:cb:
ce:22:61:d0:f2:54:ea:69:5a:3c:b9:c2:fb:11:c6:44:31:38:
1e:d3:a8:0b:57:52:33:a8:7b:b2:55:b4:49:54:74:e1:be:64:
eb:28:f7:69:2c:04:df:72:fe:25:e5:fc:2f:45:fa:86:34:e5:
23:73:d0:7a:ed:c1:3f:05:70:38:44:1c:55:d8:72:47:eb:58:
d1:77:96:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:40 2026 by rpki-client