Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UoPLS4EObFkudHmvpCEY91XH-H4.cer
File: UoPLS4EObFkudHmvpCEY91XH-H4.cer (raw, json)
Hash identifier: JyJ0urAslJ5VaRZhxgXNAAEXZ+fT1YHzIbFx2Ut+jto=
Subject key identifier: 52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C13112BA1A5CA0FA6CA5EFB7CE2E2FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:19:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198443
AS: 202426
IP: 91.234.204.0/23
IP: 194.48.220.0/22
IP: 2001:67c:10a4::/48
IP: 2a0c:c6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:13:11:2b:a1:a5:ca:0f:a6:ca:5e:fb:7c:e2:e2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5283cb4b810e6c592e7479afa42118f755c7f87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:b1:43:06:c7:1d:c4:fc:c2:f0:87:96:cb:
69:1f:e3:a8:f1:7e:c5:f4:ab:22:eb:51:5d:41:44:
80:cf:dd:57:f2:f5:18:b4:1c:b4:32:34:c3:39:fe:
d6:23:8c:08:87:e3:ff:8c:4a:6a:27:b7:2b:ba:b0:
21:75:14:7a:76:a6:76:93:b6:02:b9:34:22:ec:8b:
a2:6f:bf:86:78:c2:9e:d8:25:a0:a1:5e:7c:7c:6c:
3f:5e:d7:9e:64:7f:7c:d4:7b:8e:dd:4f:a7:f4:6b:
a2:4d:81:d7:24:47:8b:9e:5d:cc:bf:1b:95:7c:3b:
1e:f4:a3:9d:5f:4f:57:d7:a8:74:a0:d3:10:0d:43:
67:88:19:07:dc:4c:a2:5d:20:02:34:f8:26:95:c0:
ca:a4:60:90:b4:6a:ce:89:05:c7:47:9f:e7:d7:7e:
2c:2a:bf:a8:78:8f:66:48:86:3c:d6:94:bc:09:2d:
a8:7e:6f:10:86:3a:87:f2:8b:f0:78:31:37:e7:52:
1b:5b:99:f3:30:6a:30:3c:1f:86:8a:08:00:84:09:
4e:7f:0a:69:4b:1f:94:02:1b:5b:9d:53:46:47:07:
85:75:8d:8c:8b:20:8c:0e:fa:79:0f:50:d5:ad:06:
fe:d0:43:94:16:f2:5a:db:67:08:9d:f1:b5:ac:7a:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:CB:4B:81:0E:6C:59:2E:74:79:AF:A4:21:18:F7:55:C7:F8:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/65aaf4-a005-451b-9026-dff3519b2a06/1/UoPLS4EObFkudHmvpCEY91XH-H4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.204.0/23
194.48.220.0/22
IPv6:
2001:67c:10a4::/48
2a0c:c6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198443
202426
Signature Algorithm: sha256WithRSAEncryption
5c:5b:04:2d:70:ac:e5:04:f1:de:15:6f:d0:55:ec:5a:f4:4a:
84:68:1c:80:b6:68:c8:8e:60:b8:17:a6:a0:e5:ff:5d:c3:a5:
4e:1f:70:5a:d3:cb:43:92:cd:57:69:4e:63:55:1d:27:31:fd:
7d:bd:a2:8b:3c:f6:c5:ab:f9:d4:30:28:bc:0f:12:b8:06:95:
b4:08:10:51:5d:9c:bc:e6:39:76:2a:34:22:e7:ec:9b:06:5e:
85:7e:2a:96:45:e6:d1:c7:e7:5a:ee:74:70:4f:41:83:09:50:
0e:5f:63:77:59:aa:3e:e7:ea:c1:b7:5f:d4:33:e3:9c:a9:92:
54:99:bb:53:0d:d0:15:df:55:56:bd:f3:9a:8d:9a:54:c9:79:
2b:59:17:fb:c9:cf:59:05:fd:50:00:7d:35:63:e3:ce:62:10:
79:36:1a:a8:7d:6a:11:16:8c:3d:7c:1c:53:79:d0:6d:e3:5b:
4a:0b:cc:e6:6a:52:93:03:ee:ef:e0:4c:c9:65:96:84:ef:9d:
78:e8:8c:e6:4a:3c:e7:e7:45:19:f4:1a:51:62:4c:3a:dd:0e:
20:ca:71:89:45:7e:74:77:6d:5c:cb:3b:a8:a2:7d:39:93:04:
16:01:e6:15:83:8a:9a:ac:36:47:b4:0c:f1:7b:f5:7b:16:5c:
e1:a3:d5:08
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAZt8ExEroaXKD6bKXvt84uL7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjgzY2I0YjgxMGU2YzU5MmU3NDc5YWZhNDIxMThmNzU1YzdmODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLixQwbHHcT8wvCHlstpH+Oo8X7F
9Ksi61FdQUSAz91X8vUYtBy0MjTDOf7WI4wIh+P/jEpqJ7crurAhdRR6dqZ2k7YC
uTQi7Iuib7+GeMKe2CWgoV58fGw/XteeZH981HuO3U+n9GuiTYHXJEeLnl3MvxuV
fDse9KOdX09X16h0oNMQDUNniBkH3EyiXSACNPgmlcDKpGCQtGrOiQXHR5/n134s
Kr+oeI9mSIY81pS8CS2ofm8QhjqH8ovweDE351IbW5nzMGowPB+GiggAhAlOfwpp
Sx+UAhtbnVNGRweFdY2MiyCMDvp5D1DVrQb+0EOUFvJa22cInfG1rHrFywIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFFKDy0uBDmxZLnR5r6QhGPdVx/h+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzY1YWFm
NC1hMDA1LTQ1MWItOTAyNi1kZmYzNTE5YjJhMDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvNjVhYWY0
LWEwMDUtNDUxYi05MDI2LWRmZjM1MTliMmEwNi8xL1VvUExTNEVPYkZrdWRIbXZw
Q0VZOTFYSC1INC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF
BwEHAQH/BC4wLDASBAIAATAMAwQBW+rMAwQCwjDcMBYEAgACMBADBwAgAQZ8EKQD
BQMqDMbAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMHKwIDAxa6MA0GCSqGSIb3
DQEBCwUAA4IBAQBcWwQtcKzlBPHeFW/QVexa9EqEaByAtmjIjmC4F6ag5f9dw6VO
H3Ba08tDks1XaU5jVR0nMf19vaKLPPbFq/nUMCi8DxK4BpW0CBBRXZy85jl2KjQi
5+ybBl6FfiqWRebRx+da7nRwT0GDCVAOX2N3Wao+5+rBt1/UM+OcqZJUmbtTDdAV
31VWvfOajZpUyXkrWRf7yc9ZBf1QAH01Y+POYhB5NhqofWoRFow9fBxTedBt41tK
C8zmalKTA+7v4EzJZZaE75146IzmSjzn50UZ9BpRYkw63Q4gynGJRX50d21cyzuo
on05kwQWAeYVg4qarDZHtAzxe/V7Flzho9UI
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:45:04 2026 by rpki-client