Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
File: UIqaCKvvdNzFEAT0-uAmbWIDleM.cer (raw, json)
Hash identifier: uwKNGIDNBbiLfOrTdGYeWbHDIyp9xrLaE5s9Fbqn+NU=
Subject key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77593185DBF6C469FEE1FAB54718D65C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:18:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211197
IP: 185.7.213.0/24
IP: 193.223.109.0/24
IP: 2a03:b680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:31:85:db:f6:c4:69:fe:e1:fa:b5:47:18:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:10:87:f9:d5:5a:a2:73:02:a4:85:67:64:
87:ba:32:eb:45:23:89:af:62:07:07:f1:42:21:4d:
49:74:16:53:fd:4e:5e:3d:77:d8:fc:fd:8c:20:75:
38:cb:40:ae:dc:d7:58:0d:e5:2b:02:46:3e:ee:60:
dd:c8:be:c6:b2:fe:59:03:59:a9:8c:d0:db:72:08:
a6:dd:89:0c:38:f3:5e:56:65:21:c0:e5:51:d9:54:
66:a4:66:21:d5:ee:cb:5d:84:ec:f9:6f:ca:ec:47:
2d:96:57:f1:47:2a:cd:c8:51:1d:1c:fe:aa:5b:d9:
d4:be:35:d5:36:6f:c2:4a:f4:17:11:ec:0c:a0:01:
13:b5:43:a6:58:1c:94:b5:de:a8:fe:2e:d7:1d:05:
be:6a:2b:0c:1f:1e:6d:8b:9c:b4:b2:6b:ae:07:b0:
50:a3:7e:ef:c8:6c:78:66:aa:24:b3:96:a6:08:28:
35:bd:36:74:17:23:61:6c:d4:22:2a:f4:25:ae:2b:
00:26:58:5c:ec:6a:06:cb:0f:9a:db:30:be:4f:a4:
3a:6c:c3:ae:87:02:68:7f:ae:3d:be:7e:5c:41:1b:
54:20:c2:02:e1:6c:7d:75:5b:3d:f4:98:08:87:e9:
f2:32:cf:e6:d1:c4:30:ee:b5:1b:72:d4:95:f3:fb:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.213.0/24
193.223.109.0/24
IPv6:
2a03:b680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211197
Signature Algorithm: sha256WithRSAEncryption
07:2a:e0:db:b6:f8:71:9a:b5:80:12:56:9b:40:d0:6e:82:9c:
ab:b1:b7:a2:2f:ae:36:51:f3:c3:4a:d5:41:57:70:3c:b6:21:
cb:4e:0b:df:9c:41:c0:6f:38:11:68:05:dc:ca:da:b4:d9:cf:
b5:2d:3f:a6:93:5a:35:17:74:54:86:4e:59:79:34:22:66:10:
1a:a8:e3:b5:66:81:c6:1c:8a:d0:db:9c:af:d4:df:7f:fb:5a:
a7:67:dc:b8:29:c9:17:91:d9:e7:95:ec:b5:32:17:0e:48:ef:
43:fd:7e:79:f3:55:f6:3b:2c:11:b4:46:09:c7:21:e0:92:af:
29:2c:ae:3e:1b:18:ae:e6:14:7f:0f:37:e5:66:f0:bf:01:bb:
83:35:87:22:ee:cc:3a:fb:e9:c8:50:4d:ad:ef:e9:d0:2e:a6:
a3:d3:bd:8a:b4:75:19:87:7a:67:77:5a:77:c4:2c:c7:81:b4:
19:b8:5a:74:b6:2b:b5:7b:a4:a4:6d:cb:e5:13:88:e4:e5:24:
bc:a4:1d:4c:86:fe:85:83:62:ee:39:7b:a2:d4:79:5b:83:07:
d5:cd:21:6a:f0:ee:e2:a4:10:a5:ca:d6:f8:e1:d1:4d:ae:c7:
9b:1c:44:40:73:d5:54:b3:35:f9:60:df:5c:38:21:fd:85:4a:
56:12:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:21:59 2026 by rpki-client