Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer (raw, json)
Hash identifier: TMXy784SMXK+PZjbF04+PuVjVguESOJJXqPHm9TmI/w=
Subject key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B791072F2F12BB128223C51D9BA2ED2A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:59 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 200615
AS: 204035
AS: 208204
IP: 37.228.132.0/24
IP: 37.228.134.0/24
IP: 37.228.148.0/22
IP: 146.19.118.0/24
IP: 185.101.92.0/22
IP: 185.107.192.0/22
IP: 185.116.156.0/22
IP: 185.245.168.0/22
IP: 193.46.24.0/22
IP: 193.56.126.0/24
IP: 193.56.129.0/24
IP: 193.56.156.0/24
IP: 193.56.173.0/24
IP: 194.125.248.0/22
IP: 2a06:1c40::/29
IP: 2a06:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:72:f2:f1:2b:b1:28:22:3c:51:d9:ba:2e:d2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:0a:f4:83:35:d4:09:9f:a4:8d:aa:9a:aa:
36:0a:23:7d:ad:89:1e:8a:74:90:1e:29:b3:06:88:
d6:3f:ab:58:3f:f1:36:40:cf:af:46:60:47:43:73:
35:bd:8b:fa:1b:28:ed:31:f7:94:6f:3c:94:b1:10:
55:ca:e4:a3:06:a6:35:2e:f4:6e:c7:d9:5d:14:28:
ab:93:c4:0e:cc:95:f4:40:8e:47:b1:4e:74:38:e3:
db:43:e1:10:78:90:d3:b0:34:f2:ff:56:90:30:e1:
29:ae:ff:34:9f:83:ad:6b:76:76:f3:0f:b6:8d:9d:
81:46:a2:05:cf:61:fc:79:02:41:e4:00:3f:6f:3b:
6b:d3:36:d0:62:ce:27:3a:db:2a:b2:ac:d3:88:fa:
91:94:b0:3b:6b:4c:06:34:e2:48:22:cb:a3:94:54:
f5:d3:0a:ee:d1:39:8f:00:b7:24:fb:92:2e:35:10:
e2:98:f3:8e:eb:ee:52:a7:2f:6d:b2:5a:d6:c6:af:
f1:d4:c7:d8:bb:b0:68:0d:f7:3e:8a:cb:01:c2:1a:
62:48:2e:e2:09:86:c9:b8:d3:05:ec:2c:bd:98:db:
1b:3a:4a:0f:f3:3d:cd:dc:c9:e7:d8:5c:5b:0e:41:
5b:ae:a8:7c:01:b7:32:28:17:eb:56:52:dd:86:28:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.132.0/24
37.228.134.0/24
37.228.148.0/22
146.19.118.0/24
185.101.92.0/22
185.107.192.0/22
185.116.156.0/22
185.245.168.0/22
193.46.24.0/22
193.56.126.0/24
193.56.129.0/24
193.56.156.0/24
193.56.173.0/24
194.125.248.0/22
IPv6:
2a06:1c40::/29
2a06:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200615
204035
208204
Signature Algorithm: sha256WithRSAEncryption
05:9b:f4:25:47:ec:c8:cf:0a:17:97:9b:e7:d1:24:0c:b9:b7:
90:9e:c2:8d:01:f9:c6:d9:0b:c8:29:a9:fe:c1:01:f9:f8:b0:
22:c4:4a:a2:73:df:ff:91:be:75:60:6e:cf:8d:32:d4:2e:2c:
18:f3:d7:c6:2b:15:30:ce:a3:ef:4c:19:54:02:b4:b9:a3:c2:
0c:e6:16:c5:38:66:6b:fb:17:7c:73:0c:8a:a1:ed:14:87:08:
5a:1b:25:ec:28:8f:b7:ea:1d:da:cb:3e:5c:2a:58:71:57:2c:
f2:91:66:e5:5a:db:05:0e:0d:df:e5:f2:aa:23:00:7a:b9:53:
55:21:10:c3:03:8b:01:70:f6:55:f4:d1:10:ac:7b:fa:69:0e:
7b:d9:67:70:aa:45:c7:08:07:0c:5a:b6:cb:9b:eb:8c:18:0e:
6e:4b:86:31:a7:3b:6d:a1:87:f3:17:63:ed:81:7c:eb:aa:37:
15:1c:c9:e3:6e:c3:bb:f9:21:6f:00:0c:9d:c3:6a:8c:72:7e:
a8:f4:82:cf:0b:ba:3d:c9:35:46:26:64:33:e2:99:95:e4:b0:
5a:bc:17:e7:13:b2:1d:64:ea:e4:7b:8a:21:c4:b4:44:74:14:
52:72:57:05:68:09:22:cd:68:4a:58:27:21:b9:cf:f8:1b:71:
10:e9:65:e0
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZt5EHLy8SuxKCI8Udm6LtKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGQxODE5NmIyOWY2MGU4NWQ4NzEyZGU0MDM5YTUzMWNmYzFhYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn0K9IM11AmfpI2qmqo2CiN9rYke
inSQHimzBojWP6tYP/E2QM+vRmBHQ3M1vYv6GyjtMfeUbzyUsRBVyuSjBqY1LvRu
x9ldFCirk8QOzJX0QI5HsU50OOPbQ+EQeJDTsDTy/1aQMOEprv80n4Ota3Z28w+2
jZ2BRqIFz2H8eQJB5AA/bztr0zbQYs4nOtsqsqzTiPqRlLA7a0wGNOJIIsujlFT1
0wru0TmPALck+5IuNRDimPOO6+5Spy9tslrWxq/x1MfYu7BoDfc+issBwhpiSC7i
CYbJuNMF7Cy9mNsbOkoP8z3N3Mnn2FxbDkFbrqh8AbcyKBfrVlLdhiiyLwIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFFDRgZayn2DoXYcS3kA5pTHPwasxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2NiZWNm
NC1iY2VkLTRkODMtYmZjYS1iNGExODFjZDQwZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvY2JlY2Y0
LWJjZWQtNGQ4My1iZmNhLWI0YTE4MWNkNDBmNi8xL1VOR0JscktmWU9oZGh4TGVR
RG1sTWNfQnF6RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF
BQcBBwEB/wR0MHIwWgQCAAEwVAMEACXkhAMEACXkhgMEAiXklAMEAJITdgMEArll
XAMEArlrwAMEArl0nAMEArn1qAMEAsEuGAMEAME4fgMEAME4gQMEAME4nAMEAME4
rQMEAsJ9+DAUBAIAAjAOAwUDKgYcQAMFAyoGf4AwJAYIKwYBBQUHAQgBAf8EFTAT
oBEwDwIDAw+nAgMDHQMCAwMtTDANBgkqhkiG9w0BAQsFAAOCAQEABZv0JUfsyM8K
F5eb59EkDLm3kJ7CjQH5xtkLyCmp/sEB+fiwIsRKonPf/5G+dWBuz40y1C4sGPPX
xisVMM6j70wZVAK0uaPCDOYWxThma/sXfHMMiqHtFIcIWhsl7CiPt+od2ss+XCpY
cVcs8pFm5VrbBQ4N3+XyqiMAerlTVSEQwwOLAXD2VfTREKx7+mkOe9lncKpFxwgH
DFq2y5vrjBgObkuGMac7baGH8xdj7YF866o3FRzJ427Du/khbwAMncNqjHJ+qPSC
zwu6Pck1RiZkM+KZleSwWrwX5xOyHWTq5HuKIcS0RHQUUnJXBWgJIs1oSlgnIbnP
+BtxEOll4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:46:00 2026 by rpki-client