Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
File: UYje2s3CQLSy94bxI0LgqD2K6A8.cer (raw, json)
Hash identifier: NyOajP3G+wVjCSzrwsqtU+Q6I7Lw5n4D/d6tj5Z3Xh4=
Subject key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C7F162E9794EF84D891FAC1146B93E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:17:42 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208366
IP: 45.142.220.0/22
IP: 2a0e:dbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:16:2e:97:94:ef:84:d8:91:fa:c1:14:6b:93:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:cd:97:54:50:ac:63:03:22:d9:68:55:f8:
8c:9c:59:f6:c8:3e:83:f5:5c:16:b6:c1:55:c4:e9:
74:95:42:91:c8:01:0e:35:06:3f:8d:89:3a:17:34:
20:03:ac:ce:7c:04:8e:b4:39:3d:86:47:35:cd:a7:
f6:9f:5b:de:6b:e2:f9:a6:e7:b4:b1:c3:e9:61:f6:
4f:5e:e2:9a:8a:ab:69:03:04:98:77:35:93:e2:89:
7b:04:e9:51:a2:31:46:91:e1:36:75:e0:cd:8e:2b:
70:61:33:df:03:ab:96:5b:20:7d:7d:d7:24:fb:0a:
7d:bd:b4:c4:b5:58:0d:c0:16:8e:23:a8:49:c1:fc:
a0:ea:51:55:66:8d:af:3c:98:43:95:a4:b2:8a:5b:
9f:dc:e0:a4:f2:6e:f1:ea:de:a5:03:81:7f:c8:ff:
e2:ea:31:2e:fa:d6:32:61:1c:de:18:c2:b1:03:6c:
fa:09:5c:19:95:be:e5:af:6a:18:d1:6a:8c:02:a9:
57:ae:be:bb:f5:ed:bd:62:a0:5a:8b:45:e5:38:e1:
31:5f:69:dc:67:1b:d0:df:a2:ef:14:55:14:92:08:
3b:d6:ef:25:77:21:54:ac:5a:53:6c:6b:1e:01:89:
57:0f:8e:66:a4:89:25:b8:23:4f:2b:07:3e:93:b2:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.220.0/22
IPv6:
2a0e:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208366
Signature Algorithm: sha256WithRSAEncryption
38:bf:26:ee:cd:31:02:20:37:dc:0e:d7:eb:31:7d:b3:5b:70:
f4:1f:cd:7f:7d:3b:ad:a4:cf:f3:66:b4:89:05:0a:0b:8e:6b:
00:46:b7:35:05:5d:7f:99:61:c0:7d:07:55:a0:14:e7:a3:f2:
80:c1:a8:b1:f9:fc:44:12:d9:b0:33:7d:73:c3:9c:3c:a0:da:
8f:39:e2:cb:7e:df:0a:03:af:3c:52:c5:a1:ce:49:ba:ef:58:
3e:c1:60:7b:9f:f7:3a:72:dd:5e:19:61:a0:40:4f:b2:b2:eb:
fd:92:f5:5d:eb:b2:ec:78:9f:b0:e0:6c:df:54:f4:25:c9:0d:
b6:35:a2:15:10:9d:bd:2c:fb:1c:da:83:89:04:66:59:af:b9:
c0:01:bc:16:51:56:1d:34:97:7b:ce:cc:52:7c:5e:47:d1:17:
aa:b8:89:c5:36:6a:d7:fc:0a:fe:14:d7:b9:f5:9c:1f:d0:fa:
c4:b3:95:4a:58:bb:80:b4:1d:3e:71:18:64:ff:e9:76:0f:78:
87:01:01:26:85:a7:e2:9a:f5:60:5b:91:f5:63:8e:8f:73:83:
8b:35:2d:3e:b8:10:b6:fb:a6:de:8d:f0:d4:dc:3d:1c:c9:de:
3c:61:f8:67:e6:87:cb:76:5f:c8:d8:a0:f9:b1:05:62:70:eb:
7d:12:40:32
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZt8fxYul5TvhNiR+sEUa5PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTg4ZGVkYWNkYzI0MGI0YjJmNzg2ZjEyMzQyZTBhODNkOGFlODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrbNl1RQrGMDItloVfiMnFn2yD6D
9VwWtsFVxOl0lUKRyAEONQY/jYk6FzQgA6zOfASOtDk9hkc1zaf2n1vea+L5pue0
scPpYfZPXuKaiqtpAwSYdzWT4ol7BOlRojFGkeE2deDNjitwYTPfA6uWWyB9fdck
+wp9vbTEtVgNwBaOI6hJwfyg6lFVZo2vPJhDlaSyiluf3OCk8m7x6t6lA4F/yP/i
6jEu+tYyYRzeGMKxA2z6CVwZlb7lr2oY0WqMAqlXrr679e29YqBai0XlOOExX2nc
ZxvQ36LvFFUUkgg71u8ldyFUrFpTbGseAYlXD45mpIkluCNPKwc+k7Lp2wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFGI3trNwkC0sveG8SNC4Kg9iugPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzFmYWEz
ZS04ODRjLTQ0NWYtODQ1ZC03OWIzZGI2NTlkZmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMWZhYTNl
LTg4NGMtNDQ1Zi04NDVkLTc5YjNkYjY1OWRmYy8xL1VZamUyczNDUUxTeTk0YnhJ
MExncUQySzZBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLY7cMA0EAgACMAcDBQMqDtvAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMt7jANBgkqhkiG9w0BAQsFAAOCAQEAOL8m7s0xAiA3
3A7X6zF9s1tw9B/Nf307raTP82a0iQUKC45rAEa3NQVdf5lhwH0HVaAU56PygMGo
sfn8RBLZsDN9c8OcPKDajzniy37fCgOvPFLFoc5Juu9YPsFge5/3OnLdXhlhoEBP
srLr/ZL1Xeuy7HifsOBs31T0JckNtjWiFRCdvSz7HNqDiQRmWa+5wAG8FlFWHTSX
e87MUnxeR9EXqriJxTZq1/wK/hTXufWcH9D6xLOVSli7gLQdPnEYZP/pdg94hwEB
JoWn4pr1YFuR9WOOj3ODizUtPrgQtvum3o3w1Nw9HMnePGH4Z+aHy3ZfyNig+bEF
YnDrfRJAMg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:58 2026 by rpki-client