Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UdspKXLBDGn5fs0k8vtptPZ3beg.cer
File: UdspKXLBDGn5fs0k8vtptPZ3beg.cer (raw, json)
Hash identifier: gi6ZTF00ipFFGcs43r1CfwLxZGshQASqIY4FnKOeRV8=
Subject key identifier: 51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E380B99397E74B770B2A51B6B327B3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 59864
IP: 193.203.6.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:0b:99:39:7e:74:b7:70:b2:a5:1b:6b:32:7b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51db292972c10c69f97ecd24f2fb69b4f6776de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:fb:c2:2f:d4:36:3b:6b:f3:bc:05:b1:f3:
ee:dc:ec:17:f5:5b:40:5f:3f:f5:ef:54:80:a1:cb:
e8:d9:56:78:f9:46:03:ba:8f:5a:a1:55:9d:c5:d6:
14:1f:d3:b3:29:17:4f:5e:5c:13:1f:3a:ed:94:77:
b8:03:ce:12:39:92:9e:a1:e9:d4:4e:04:5f:4b:c6:
fe:17:fe:c7:e6:db:9c:6e:90:ee:ad:d4:8d:04:82:
9b:51:55:cb:21:8a:50:33:71:8e:24:a5:53:b1:ed:
be:e6:c7:15:d7:fb:bd:e3:93:5b:9c:ff:56:88:82:
23:23:90:fe:c4:23:05:33:2d:9c:ab:03:67:80:b5:
08:f0:fe:8e:6c:d9:4a:69:95:4f:97:10:90:47:c0:
b5:8a:68:a9:0b:0d:b8:6c:18:09:e0:6a:0f:db:19:
42:c9:f8:82:3a:b1:a1:fa:17:28:34:a2:fe:2a:93:
25:66:61:b3:2a:7a:8c:9f:5d:7f:45:d1:66:08:9f:
77:25:9d:c2:e3:e6:46:ca:85:5c:92:cf:4c:a1:f4:
00:0b:13:72:3f:a1:f7:47:2a:3e:49:3a:c3:53:bc:
bd:85:00:46:f5:6f:65:bd:cb:fd:c3:d9:90:eb:80:
ed:61:dc:23:5d:57:cf:79:43:a0:29:0f:56:a6:4f:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:29:29:72:C1:0C:69:F9:7E:CD:24:F2:FB:69:B4:F6:77:6D:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/0bc955-25de-4798-b3ce-6eaf9dabae0f/1/UdspKXLBDGn5fs0k8vtptPZ3beg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.6.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59864
Signature Algorithm: sha256WithRSAEncryption
10:dd:ad:30:89:c1:cf:bb:02:7b:7d:ab:07:ae:86:38:52:d2:
12:12:f0:57:05:9d:e9:ce:3b:2a:bb:04:e7:8b:25:de:27:50:
89:ca:fe:d0:6d:1c:92:91:bc:ad:62:06:5c:ac:e8:34:4f:ff:
53:80:52:33:92:78:7a:c1:cf:96:93:84:3e:72:68:36:0d:55:
08:2b:63:7c:ac:1a:4b:e5:e1:7e:f3:99:b1:1b:2c:df:f3:7b:
1a:79:7b:7f:91:3c:3e:d6:4b:3e:fe:5d:4a:27:dd:c5:47:5b:
39:54:0e:32:c9:29:6e:7a:af:a0:51:f1:9d:50:6b:b7:55:e4:
14:af:dd:6a:48:b6:77:4b:ef:1a:16:90:8f:21:11:45:c9:9d:
81:9c:b5:e6:ca:94:a6:9d:9d:23:80:47:6d:99:48:cc:56:75:
e2:86:6d:83:d5:6f:84:4e:57:33:0e:cc:6e:89:4f:9d:dc:fc:
67:25:62:a3:c5:77:be:fa:6c:69:e0:a8:5b:8a:a5:c3:61:1c:
7f:65:11:78:bb:90:e3:55:a2:b2:7d:ed:b5:22:0e:e6:50:d7:
ca:90:a0:59:c5:05:cd:ec:6e:6a:fb:af:ff:d0:58:be:c2:c0:
6e:26:31:11:8f:ec:f1:b5:94:86:b0:b2:65:ef:4e:22:a7:cd:
5f:9a:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:40:43 2026 by rpki-client