Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.cer (raw, json)
Hash identifier: xHqv2ENAb6Z10Dnaz39vSryb5w/As9A9T2rOQLtecxI=
Subject key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019BFF9EF8E8B7F2B7F4C7150A42F5D0957D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 Jan 2026 13:22:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 202658
AS: 213942
IP: 45.14.248.0/22
IP: 185.157.184.0/22
IP: 185.228.249.0/24
IP: 2a01:ff40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:9e:f8:e8:b7:f2:b7:f4:c7:15:0a:42:f5:d0:95:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 13:22:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:ba:4e:22:e3:dc:6d:c7:f2:0b:4c:ed:ad:
10:77:a4:be:c2:37:2d:e3:ca:d7:2f:ad:29:a2:ab:
47:09:c1:dd:1e:60:83:49:f5:d4:74:6e:7d:81:91:
2b:9a:c3:ce:a4:ba:e7:b2:6d:57:18:d7:e8:3f:d3:
af:91:a0:e4:00:cf:28:c8:7c:92:52:2a:11:57:82:
e8:64:c2:b4:d4:0d:79:28:44:4c:93:2e:f8:20:8d:
f5:89:cb:7b:b9:84:cd:a1:6a:a8:09:b2:ce:8c:d5:
9b:cf:10:b5:dc:7d:35:28:bb:4d:11:8e:00:c2:20:
0e:80:b3:7d:e5:59:2e:26:f4:29:5d:29:b3:24:9c:
f3:3d:dd:97:1f:9f:72:3b:98:7e:f3:59:9f:cd:38:
e6:f8:49:8c:7d:93:0a:ff:9c:0c:0b:43:5c:9b:2b:
4d:2e:60:bb:d0:1c:59:ef:d3:49:fa:d7:12:f9:12:
39:86:8b:e8:0f:bd:8e:28:38:b8:4a:34:76:25:d2:
02:0f:2a:33:a5:3f:84:93:c7:0b:68:9e:89:20:8c:
ac:15:07:63:bc:fa:78:a7:16:32:8f:0b:57:7b:50:
70:ca:5f:5f:14:1e:3b:af:19:6a:88:a3:f6:8d:d4:
44:76:77:4f:1e:86:a1:de:8d:65:f8:4c:33:8a:2c:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.248.0/22
185.157.184.0/22
185.228.249.0/24
IPv6:
2a01:ff40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202658
213942
Signature Algorithm: sha256WithRSAEncryption
7e:72:3a:c9:69:24:f6:a6:06:97:b7:23:fa:8d:ae:70:d3:da:
ff:a0:17:b8:74:f0:8a:5e:ce:c1:81:19:0d:7d:88:b7:0f:13:
3e:dc:c8:92:63:cc:a3:1a:6a:53:fb:cd:3b:e2:2b:e9:de:26:
b2:47:01:e0:77:be:5e:62:7b:0d:3e:66:16:91:94:29:a6:92:
87:f3:aa:e1:0b:91:05:33:be:b6:e4:af:8c:c5:c0:db:7b:e2:
81:21:7e:41:1b:40:9c:7e:b7:6b:55:74:c8:de:97:09:78:bd:
c7:ea:ce:d5:4a:18:1a:18:4f:d7:68:d6:90:1c:6e:28:4b:e3:
cf:0a:d9:26:e1:90:ed:85:8b:7c:39:ac:f3:34:a1:87:cd:2a:
17:bb:92:95:77:66:52:5e:06:62:fc:30:cd:16:60:2e:21:fe:
b7:c2:b3:bb:a2:e6:1c:65:ef:b8:75:2d:24:cd:34:e3:fd:0c:
63:f1:ac:a8:af:5d:2c:72:ed:41:6c:0a:0b:c9:ad:67:33:ef:
a3:23:52:83:d0:4f:19:3a:9e:a7:69:a4:36:ef:be:7b:cc:39:
88:a7:b4:b2:b4:e6:b6:67:eb:17:be:8c:db:16:05:cc:fd:b5:
2d:88:65:a5:a5:f4:74:55:e8:32:9d:e2:24:d5:66:64:e2:d9:
2a:65:05:50
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZv/nvjot/K39McVCkL10JV9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTI3MTMyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjY0ZjJkZDBiOTg3YWI3NWUzNzlmODE3N2E0MTc2YTMwODYwMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzC6TiLj3G3H8gtM7a0Qd6S+wjct
48rXL60poqtHCcHdHmCDSfXUdG59gZErmsPOpLrnsm1XGNfoP9OvkaDkAM8oyHyS
UioRV4LoZMK01A15KERMky74II31ict7uYTNoWqoCbLOjNWbzxC13H01KLtNEY4A
wiAOgLN95VkuJvQpXSmzJJzzPd2XH59yO5h+81mfzTjm+EmMfZMK/5wMC0NcmytN
LmC70BxZ79NJ+tcS+RI5hovoD72OKDi4SjR2JdICDyozpT+Ek8cLaJ6JIIysFQdj
vPp4pxYyjwtXe1Bwyl9fFB47rxlqiKP2jdREdndPHoah3o1l+EwziiySEQIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFFJk8t0LmHq3XjefgXekF2owhgBoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxLzVjMTBl
Zi02ZDNjLTQ1ZTQtOGVmOS05ZDc5NGVlMTRkZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvNWMxMGVm
LTZkM2MtNDVlNC04ZWY5LTlkNzk0ZWUxNGRkMC8xL1VtVHkzUXVZZXJkZU41LUJk
NlFYYWpDR0FHZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCLQ74AwQCuZ24AwQAueT5MA0EAgACMAcDBQMq
Af9AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMXogIDA0O2MA0GCSqGSIb3DQEB
CwUAA4IBAQB+cjrJaST2pgaXtyP6ja5w09r/oBe4dPCKXs7BgRkNfYi3DxM+3MiS
Y8yjGmpT+8074ivp3iayRwHgd75eYnsNPmYWkZQpppKH86rhC5EFM7625K+MxcDb
e+KBIX5BG0CcfrdrVXTI3pcJeL3H6s7VShgaGE/XaNaQHG4oS+PPCtkm4ZDthYt8
OazzNKGHzSoXu5KVd2ZSXgZi/DDNFmAuIf63wrO7ouYcZe+4dS0kzTTj/Qxj8ayo
r10scu1BbAoLya1nM++jI1KD0E8ZOp6naaQ27757zDmIp7SytOa2Z+sXvozbFgXM
/bUtiGWlpfR0VegyneIk1WZk4tkqZQVQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:35 2026 by rpki-client