Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer (raw, json)
Hash identifier: 6Rxj5Lt4UUyrz72hBKfHaJMS+uiiszoayxTHkyqpICM=
Subject key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78A34A0642654FE53A233789F0A6BD70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 08:18:45 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213363
IP: 77.83.120.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:4a:06:42:65:4f:e5:3a:23:37:89:f0:a6:bd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:f0:dc:02:5f:bd:cd:ee:38:6b:8c:ad:45:
57:7c:8f:ca:15:b2:6a:1f:d1:93:47:7a:2a:83:a4:
36:35:23:41:54:5e:33:e6:4c:2c:2b:cd:fc:da:36:
47:f7:05:42:6a:cd:ff:57:61:be:25:2e:21:e0:13:
17:63:bb:26:68:9b:b6:07:42:da:16:fc:22:61:20:
90:87:82:07:ce:d6:10:f0:4d:3e:09:07:1f:a0:74:
c3:9b:0b:74:ab:ec:b6:65:7f:4e:07:9d:b3:a1:d6:
04:d5:22:00:ea:fe:4f:d1:e7:68:87:c0:cb:c8:3a:
91:77:6b:02:29:9e:be:61:1a:f1:8f:df:8b:a1:46:
d4:46:cf:ee:5b:04:4d:fd:93:a6:86:97:b0:71:08:
58:95:13:06:ed:ae:9c:30:09:0c:53:41:1e:83:8c:
09:95:f7:14:41:a9:4b:dc:01:6e:52:c0:9f:3f:c1:
be:9e:f1:0f:5e:dd:d0:df:82:ad:15:7c:05:01:c4:
15:bc:cb:5d:9e:f1:91:17:6d:c0:16:87:cd:34:6c:
3f:e1:9c:19:66:8a:3f:2a:4b:5b:bd:c5:cf:59:8f:
e1:45:32:67:7a:9f:5d:04:f3:8e:38:25:64:4f:b2:
75:5f:db:94:b5:76:d1:86:c9:27:40:89:53:85:76:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.120.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213363
Signature Algorithm: sha256WithRSAEncryption
35:68:0c:ed:1a:fa:4c:e0:2d:26:a1:c4:36:3b:24:f0:85:a7:
51:18:ee:c2:11:cf:3e:c1:52:f9:0e:a1:cf:bc:89:95:e6:a3:
57:f2:66:9f:ef:84:60:3f:dc:7d:c2:ff:7e:19:06:ac:d4:c4:
b5:b6:93:c6:49:c2:c2:93:b8:36:8a:25:44:f0:dc:49:ea:a4:
8f:67:5a:97:5a:cf:53:6f:d6:38:0c:68:be:23:a5:79:a0:9c:
74:5d:42:4f:51:7e:84:aa:02:5f:2d:bf:3b:17:c4:20:b6:38:
35:a6:6b:61:f2:be:e9:f7:ac:12:28:4b:36:c7:85:63:ca:9a:
49:e8:09:90:11:5e:37:c1:05:35:96:35:05:05:74:bb:3f:e5:
95:7c:4a:ba:9b:e0:6d:16:5a:6b:65:1b:47:10:cf:df:dd:3d:
33:65:7d:a2:26:04:8a:5a:12:7d:50:f7:2b:aa:31:c3:5d:e8:
87:b3:4b:73:64:1b:22:ba:c2:09:60:60:f5:d6:64:ad:51:e2:
c0:f6:b5:02:d7:f8:46:b2:2f:45:6b:3c:3a:b8:aa:40:79:58:
df:3d:20:ea:02:26:ef:6d:6b:78:22:44:f6:fe:77:48:5e:0f:
f2:b8:05:d0:64:40:59:6a:dd:7f:c1:4a:87:19:c4:a4:63:8f:
24:8d:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:21:56 2026 by rpki-client