Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json)
Hash identifier: VAnEdRIzVhdwvcxHrV4+mJdzQR+a8UtghZfOoJC7kkk=
Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C6C1919B2ECE9D3B8B34CB88A1FCED367
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Feb 2026 14:55:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6206
AS: 62349
IP: 31.171.128.0/21
IP: 37.46.192.0/21
IP: 45.154.4.0/22
IP: 69.161.192.0/21
IP: 91.199.50.0/24
IP: 91.230.225.0/24
IP: 94.185.80.0/21
IP: 94.228.208.0/20
IP: 109.235.48.0/21
IP: 185.68.196.0/22
IP: 185.153.188.0/22
IP: 185.196.92.0/22
IP: 194.110.67.0/24
IP: 195.191.144.0/23
IP: 2a00:dd0::/32
IP: 2a07:6580::/29
IP: 2a07:8840::/29
IP: 2a0a:6b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:19:19:b2:ec:e9:d3:b8:b3:4c:b8:8a:1f:ce:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 14:55:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a:
59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36:
22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0:
93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a:
67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43:
8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d:
8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8:
e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68:
38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2:
e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40:
cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a:
64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4:
53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84:
40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46:
a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7:
79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f:
b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.128.0/21
37.46.192.0/21
45.154.4.0/22
69.161.192.0/21
91.199.50.0/24
91.230.225.0/24
94.185.80.0/21
94.228.208.0/20
109.235.48.0/21
185.68.196.0/22
185.153.188.0/22
185.196.92.0/22
194.110.67.0/24
195.191.144.0/23
IPv6:
2a00:dd0::/32
2a07:6580::/29
2a07:8840::/29
2a0a:6b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6206
62349
Signature Algorithm: sha256WithRSAEncryption
47:d3:fc:7e:5f:13:f0:7c:2d:d3:28:d0:cf:ff:06:d6:3b:25:
ab:09:1c:2a:4e:05:fb:74:eb:f8:7c:2d:07:34:4a:6d:e3:54:
62:b3:2e:ee:21:e0:ed:23:5d:dc:28:a9:8c:df:14:86:aa:82:
fe:15:4c:73:95:d0:91:f2:8c:1f:02:88:4a:86:36:a4:e2:3b:
8b:b9:85:58:03:96:27:6f:af:c7:93:f6:ae:89:09:05:e0:03:
9b:99:a3:52:62:c3:e4:94:4a:33:7a:a5:ac:1a:9f:b3:b2:82:
e6:e4:52:f6:2b:5d:99:fb:0a:8a:b1:4a:6b:ea:51:5b:c2:7d:
3d:6b:bb:50:5b:c5:c4:7b:3f:16:03:37:68:b3:f9:1a:10:e0:
04:ec:8c:dd:9b:42:aa:05:7f:ee:d2:8a:99:42:06:6d:8b:6d:
f3:bf:e1:45:02:4c:ec:22:a1:d3:4a:b7:f2:cb:4f:93:10:b4:
d0:52:df:50:84:cf:9d:70:f2:fd:cd:3f:84:97:a6:59:f4:92:
34:6d:5d:8b:77:51:09:59:fa:7f:a7:ca:df:f2:ae:a8:a2:90:
88:cd:74:b0:c9:ef:08:31:d0:4d:ed:be:00:b2:f5:d4:be:67:
25:7d:9a:63:00:3c:dc:3d:c1:db:59:4d:33:cd:58:86:04:90:
1b:8e:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:49 2026 by rpki-client