Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
File: UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer (raw, json)
Hash identifier: jzp0ipLtxFTGG+U7q6Kdb7BzrAYZLdz+6THg6yIGFDU=
Subject key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F7FF2080871460F433E660388D3C05359
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jul 2026 14:33:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205880
IP: 143.246.48.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:f2:08:08:71:46:0f:43:3e:66:03:88:d3:c0:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 20 14:33:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:36:4d:03:b9:24:bb:e5:67:10:e6:7d:55:
2c:22:58:ed:f3:93:d0:52:6b:53:e3:62:39:98:e2:
15:6f:ac:6c:21:58:28:fc:1a:bd:6f:b4:8c:dd:53:
81:17:6f:fe:13:98:63:0c:6e:51:98:66:61:1a:68:
a5:e4:83:b7:63:3e:e3:84:65:57:e1:c1:e6:31:10:
10:00:f5:20:ce:93:5a:28:f4:83:35:1e:92:c4:ce:
a7:61:e8:5f:3c:89:34:0b:6b:f1:18:a4:dc:84:45:
8e:f7:7e:d5:dc:7c:10:24:43:54:73:4f:b4:7f:3c:
d4:0e:1d:d3:28:0d:48:52:70:30:50:e0:17:e5:ed:
4b:27:8e:72:9d:75:cf:37:f4:dd:6c:2d:80:6e:aa:
fa:33:85:19:1e:9c:ca:75:c3:09:a8:47:fd:ea:ca:
ad:1c:7c:9b:0e:86:c2:68:3c:3b:6a:91:ff:51:04:
21:e1:e8:f7:7b:b2:73:78:d0:45:9a:48:6f:72:82:
37:18:51:46:9c:ac:c4:14:66:bf:57:15:be:e1:69:
46:a3:32:41:13:ac:fd:12:34:42:0e:e2:41:05:87:
92:77:cb:a3:2c:5b:c2:d7:e0:29:c9:8d:3f:bd:72:
93:bd:d3:24:2c:3e:59:42:e2:01:60:e9:8d:a8:7c:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.48.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205880
Signature Algorithm: sha256WithRSAEncryption
a9:d8:dd:66:c3:f1:d0:ae:99:19:f9:6f:79:a0:e1:64:8c:d3:
b9:d0:ba:50:82:16:80:ec:bb:a3:ed:30:d8:db:3a:9e:89:32:
c3:01:a7:52:67:b3:08:23:4f:f9:28:44:af:ed:59:18:6e:c1:
28:56:18:7a:09:44:09:d8:1b:05:3a:8f:66:d2:7a:b3:f1:59:
76:e3:55:a9:21:4c:6c:c1:e5:ef:fc:75:d8:cb:9b:8a:63:b4:
dd:d2:e6:5d:92:3e:68:c0:84:66:c1:62:50:53:95:4f:ce:3b:
b0:2b:d2:98:af:5c:9a:a3:2d:1f:89:10:28:10:41:54:d2:8b:
8f:c9:96:2d:58:f5:b7:61:64:b6:02:ad:82:92:b1:21:85:d2:
b8:e9:8a:2d:18:d2:2e:1f:a6:ca:f1:74:e2:81:04:c0:ac:ae:
e3:24:4c:22:9b:91:8a:d3:66:85:6d:2b:61:b2:02:28:ef:ae:
19:8b:e5:12:9a:3a:d0:ea:7a:44:c9:7b:1f:c6:d6:34:55:7b:
a9:5a:bf:3b:d0:ea:6f:13:b6:e2:e1:96:1f:47:14:6e:db:8e:
2d:89:33:37:15:50:e2:3a:a9:e1:64:2f:ac:7d:8f:b5:54:55:
b0:92:4c:6c:e4:c4:6e:80:39:fa:81:08:04:80:04:44:bd:dc:
2a:0d:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:13 2026 by rpki-client