Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.cer (raw, json)
Hash identifier: aGtyGwgeFMUSle3DKEJJT7bRlNe0Rk8Y+M997rzoVWs=
Subject key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA7429219CCE35CDFD020FDAD35D189
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50380
IP: 193.0.204.0/22
IP: 193.46.201.0/24
IP: 195.191.58.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:42:92:19:cc:e3:5c:df:d0:20:fd:ad:35:d1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5270786f17c41bd01626f72db239f208b5189bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:d8:16:89:e1:5c:c9:6c:7d:89:d0:05:a4:
ff:17:0c:7b:ee:0c:9b:a1:4d:29:0f:94:f9:14:7f:
4d:74:f8:24:7a:50:cb:45:85:3c:1b:29:00:7d:69:
bd:13:27:26:35:ad:cf:24:31:e7:45:c6:17:7c:43:
af:4f:90:12:89:4c:75:88:9a:d0:c4:45:ae:7e:85:
bc:f0:d8:cb:26:a8:af:b8:be:ec:93:4c:22:55:b8:
26:12:38:f4:67:b1:77:9c:94:c4:c9:cf:ba:49:94:
e9:b4:b9:ff:57:8d:b7:5d:91:2f:c7:10:c4:be:d2:
a5:f1:60:82:ae:4c:a1:be:84:bf:69:f9:bb:35:df:
fd:f6:d2:2f:08:47:2f:7d:82:e6:98:d1:ea:96:a7:
83:85:29:0d:8b:f1:87:89:a8:0d:06:3d:ae:6f:c1:
fe:a6:ad:14:89:fe:a3:d2:34:e2:e0:4f:5d:f6:64:
e1:35:a5:88:79:70:b5:ef:34:85:51:36:19:07:66:
2f:bf:e5:70:8f:72:70:54:54:af:9c:85:8b:f0:fb:
ec:f4:c2:9a:52:d3:5d:8a:31:af:c2:dd:9b:85:96:
e1:fd:31:58:3b:b4:94:9f:d2:41:42:c6:9b:e8:69:
c4:9f:90:1f:04:03:b4:14:1c:54:9f:72:30:cf:9b:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.204.0/22
193.46.201.0/24
195.191.58.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50380
Signature Algorithm: sha256WithRSAEncryption
b1:a2:47:7c:bb:17:c2:06:36:3b:ee:75:56:2a:0c:97:b1:8c:
35:cd:5a:b9:49:45:fa:af:62:2a:3d:c6:de:86:61:c8:de:d8:
f1:fb:22:4e:c7:80:19:39:20:e5:8a:bc:a6:c8:c1:bf:da:37:
33:5f:43:9e:1a:36:dc:16:53:80:51:55:52:da:04:6d:b4:a3:
62:43:ca:2f:b1:be:f3:c6:1e:1b:5e:ab:3c:68:16:23:da:38:
94:96:7a:af:cb:c5:7d:0a:c8:f3:aa:ee:51:06:86:71:ca:dd:
fa:36:a7:df:bf:43:b4:8b:08:52:f5:ab:b5:38:36:f6:cf:f8:
32:7b:cb:d6:93:e0:39:d8:d7:a0:ba:b5:bf:43:0a:04:a8:23:
81:48:98:df:69:a3:35:95:da:be:24:ac:ae:31:a5:a5:3d:4b:
57:b6:d8:ed:ab:90:da:11:83:c1:b1:d0:d4:07:d3:70:94:49:
d4:36:c8:ed:87:a0:f4:28:73:5c:bb:58:a4:3d:41:f4:df:81:
3c:9c:c3:b5:74:52:42:44:49:9b:da:10:ad:c2:1e:4d:23:87:
d3:f9:14:49:1f:67:20:63:36:ab:1a:8e:11:4f:49:83:3c:15:
d9:90:75:b8:19:3e:af:c5:9b:b5:36:95:9a:ad:67:67:eb:15:
e7:b6:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:42 2026 by rpki-client