Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer
File: UEReUkREIxk_SV-8xFd05Mjke9s.cer (raw, json)
Hash identifier: 0pTzx10lqnU8M1VqEpcgRy0JPOSIiZKfxUN49Bl8taw=
Subject key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED57738460BD525C78BFEA29CEA9EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:19:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35734
IP: 195.10.204.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:57:73:84:60:bd:52:5c:78:bf:ea:29:ce:a9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50445e52444423193f495fbcc45774e4c8e47bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:2b:eb:ac:2b:b4:d7:f9:85:b0:45:27:80:
61:b2:61:47:01:2a:00:51:95:9f:a9:23:89:0b:35:
6a:54:f3:d0:e2:36:5c:1e:cb:5d:ab:58:26:f4:38:
e4:7b:b8:12:63:9a:88:8c:f0:4e:f9:19:e3:25:ed:
d6:b2:b5:da:c9:bc:11:41:06:db:5d:e0:9c:9a:86:
a0:4b:56:e9:25:64:6e:07:0a:06:c4:73:c6:6b:5e:
6b:1c:1c:07:29:1f:33:3e:d2:d8:a8:0d:26:88:e0:
fb:8b:f7:d4:7b:a5:4e:ac:c6:be:5b:27:f0:06:3d:
ff:ff:48:6d:bd:1e:bb:c3:be:0a:c8:01:e3:4b:8e:
5d:b5:12:0f:c0:1c:6a:0a:0b:b5:b2:e9:3d:17:f8:
46:64:d2:d4:86:ea:0e:7b:92:90:74:55:2d:1a:28:
45:17:19:f9:2d:1c:7e:f4:b2:24:d0:0d:47:b9:1b:
b5:8d:f0:6d:fe:b4:d3:cb:5c:a4:a4:c0:45:ad:ea:
c6:6e:a1:dc:3d:3b:51:2c:99:e1:dc:b1:a3:7a:28:
9a:a4:5b:80:c0:7f:58:de:00:33:47:31:07:7b:b9:
fb:1a:42:ee:46:45:b2:8a:8f:92:8f:c9:8e:53:de:
a3:24:12:4c:d0:f3:74:79:a4:9e:04:93:31:67:ac:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.204.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35734
Signature Algorithm: sha256WithRSAEncryption
8c:de:62:6e:c6:12:3d:0a:06:e5:32:e8:70:8f:39:45:d6:8a:
44:ed:c2:40:e3:94:cf:85:ff:a0:c9:8b:64:58:e8:27:e3:e6:
f1:ea:2c:4f:42:e4:22:6d:66:d4:b2:37:95:1e:ef:a6:2b:39:
cd:64:ec:a1:bf:34:f9:26:70:dd:63:14:05:1f:db:53:a2:27:
af:95:d8:a1:00:5a:19:21:07:b0:f9:e7:4b:25:06:21:92:ba:
75:02:b6:3c:cc:6a:de:0e:08:48:00:9f:0b:75:3b:01:e8:f7:
ba:5a:ec:aa:90:23:bb:7e:0f:4e:5b:41:05:f3:3d:e2:67:02:
ed:37:b9:5c:64:03:e9:10:7c:c1:36:12:0e:49:89:e1:ff:08:
ec:30:ef:0f:ae:61:43:90:18:36:85:ad:41:c2:c1:6a:77:36:
2c:ff:fa:82:bb:de:82:47:00:6c:ab:53:4c:67:e4:e6:23:b7:
93:9b:6e:13:97:d8:0e:37:d1:c0:ed:2b:3f:62:35:95:26:5b:
ca:aa:e0:6c:e6:1b:ee:50:2c:84:d1:96:18:2c:f9:d2:09:e0:
11:a7:0c:60:d0:76:1e:d3:a2:c5:7a:c3:c1:8c:99:a1:74:fe:
29:2b:d9:5c:df:34:2a:2e:b4:66:e2:a9:2a:32:0e:24:f8:06:
47:15:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:25 2026 by rpki-client