Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer
File: UHQRWPPtZb7hveEvNPiVr7DdUNU.cer (raw, json)
Hash identifier: +0zD/AnfI2ZgS5AEm6O3QuMoyAP5mKzCrRQZlamoVyQ=
Subject key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECF40E4D8486A41B057993DE507AD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6810
IP: 147.235.0.0/16
IP: 149.106.128.0/19
IP: 149.106.224.0/19
IP: 185.130.84.0/22
IP: 2a06:c700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:f4:0e:4d:84:86:a4:1b:05:79:93:de:50:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:c1:9d:02:bf:c3:3a:a2:ca:36:fc:ba:04:
1b:03:18:e7:82:d9:bd:72:2d:36:1d:e6:9b:36:10:
73:b0:cd:4e:13:de:71:e4:02:88:08:d2:eb:36:86:
6a:b7:90:ab:36:58:65:53:18:e0:ce:7b:cc:d7:f8:
26:6e:b0:35:4d:16:c3:1f:27:ef:2d:29:0e:2e:d0:
99:b8:c4:4b:d3:1d:84:26:3c:3d:5e:02:61:e3:eb:
97:53:c3:f8:e3:ab:d8:a6:ea:5d:95:a9:17:13:f3:
3c:db:76:34:cc:dd:7b:df:e5:b0:6e:7f:8a:9b:d4:
48:d6:c8:90:10:01:aa:8c:4b:2b:8b:b2:d2:fe:23:
2f:69:c6:c6:0b:58:21:51:d2:f4:f8:e5:b9:11:fe:
19:10:da:66:75:03:7d:50:67:5b:86:6d:20:08:28:
ed:2f:d1:50:e6:9d:6e:54:ff:3b:14:b0:a4:1a:b2:
33:5c:08:1c:9f:38:2d:af:90:67:93:85:3a:dc:e7:
5e:f7:7d:a1:0f:1f:39:70:8d:9a:11:bf:37:82:e8:
03:04:25:75:c3:f5:32:93:a6:4f:fe:15:35:11:86:
ae:3c:f8:c9:e2:02:e0:c6:33:ec:ab:11:44:04:d3:
c4:e1:14:a5:ed:0d:7c:99:06:c9:c7:38:4d:2a:9c:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/16
149.106.128.0/19
149.106.224.0/19
185.130.84.0/22
IPv6:
2a06:c700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6810
Signature Algorithm: sha256WithRSAEncryption
76:b4:ce:f7:1c:2a:ef:a7:7f:9c:b5:ff:4f:0d:a1:83:d8:1a:
11:5a:f1:49:87:3b:fa:24:21:13:f1:02:ea:2d:96:4f:f5:54:
e9:0f:c2:59:c0:48:e1:77:a8:be:81:5b:dc:c5:ed:48:b5:2c:
1f:e0:24:9f:01:b1:6e:7b:bb:35:51:e7:76:7f:55:db:c7:75:
f8:e3:86:42:a0:38:67:b1:7a:16:ba:58:70:c3:e2:1d:70:5e:
b5:a4:34:83:bc:d8:44:e7:e1:a0:8a:8f:71:3b:25:f3:b6:f2:
59:49:57:12:f4:3e:41:ae:09:d9:ae:85:e5:bb:b2:df:46:e1:
4e:57:ca:c5:0a:30:98:c5:91:6c:b7:4d:e4:36:68:c8:9b:ac:
60:3e:ae:90:d3:1b:4f:7c:8f:61:ec:b3:f0:f6:2a:65:ab:53:
bb:47:c0:e9:2e:82:9a:4e:3f:9c:82:95:71:3f:d3:a2:ec:89:
ed:39:a8:96:6c:09:98:72:aa:4e:f3:48:5d:7f:f5:c7:a2:37:
30:f0:67:af:ae:49:da:80:9f:55:2c:cd:4e:be:0b:0f:02:b3:
55:b4:19:16:7b:3c:d6:25:5d:ed:e5:cd:3a:b2:45:6b:2e:92:
43:a4:34:8d:26:58:d3:ea:ca:6c:fe:a4:e4:56:31:2c:27:4a:
68:b1:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:20 2026 by rpki-client