Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UvbBEDFTJEhSvLPiO23ioWuqen8.cer
File: UvbBEDFTJEhSvLPiO23ioWuqen8.cer (raw, json)
Hash identifier: Sn+nBQC/ZJYmd3XJsKXbe9jB48iZ3YjIoNwQRcEB31I=
Subject key identifier: 52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7BD3693982F6E2B8FD532AF5078D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:17:49 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 201292
IP: 2001:678:790::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:bd:36:93:98:2f:6e:2b:8f:d5:32:af:50:78:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52f6c1103153244852bcb3e23b6de2a16baa7a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:26:1c:14:f7:88:0e:7c:bc:23:f9:19:a2:
79:4f:66:42:52:f3:32:11:3a:62:60:19:38:9e:5a:
99:5d:50:63:78:0c:0f:67:62:bf:89:16:fe:16:5d:
b9:4e:03:61:2c:42:b7:89:fe:db:37:23:59:01:47:
47:f8:4a:eb:06:2c:0e:24:ee:eb:45:ce:75:84:97:
98:40:69:9d:3d:7e:c4:24:40:f8:1f:f1:73:e2:05:
8d:f1:92:2c:74:3d:ed:2f:ac:ca:85:0c:64:96:f7:
72:1a:3b:8f:18:b5:13:3d:ad:20:fd:86:80:60:74:
83:ca:60:be:94:9c:3f:a3:96:30:48:26:b6:bd:96:
c3:9d:f4:ef:5c:d0:3d:94:92:d1:90:34:cc:fd:aa:
d1:3d:7f:44:9a:c3:ae:ac:2c:26:0a:e4:d2:72:a4:
2b:1f:73:4b:80:c1:1e:aa:2b:1d:8b:ae:04:41:24:
67:6a:1c:26:d8:01:02:e4:72:fa:ea:11:2d:b7:57:
e8:02:24:9d:87:0b:5a:80:c8:07:1a:d5:66:32:ba:
4f:f5:49:34:13:e5:13:5b:0c:79:7e:6c:fc:06:b0:
e5:0d:80:22:59:82:f4:c6:7d:b0:6b:96:c5:71:24:
3b:c9:61:b2:13:ee:b2:95:4e:38:c2:18:91:71:13:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F6:C1:10:31:53:24:48:52:BC:B3:E2:3B:6D:E2:A1:6B:AA:7A:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eb78a3-6276-410a-a3e1-0dbcfeac98a5/1/UvbBEDFTJEhSvLPiO23ioWuqen8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:790::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201292
Signature Algorithm: sha256WithRSAEncryption
10:7c:35:5a:98:0c:73:e9:19:9c:be:75:c5:0a:25:0f:23:a7:
49:5e:f3:6a:a9:a1:d0:a7:85:41:7f:e2:e6:39:10:83:90:2b:
2d:d6:24:2b:3b:90:21:fa:71:b5:6a:fb:ca:47:ac:95:78:a4:
b7:4e:ed:28:aa:fc:97:15:d1:6d:26:f3:a4:b5:c3:0b:a8:7f:
7e:28:9d:c9:ca:39:e6:38:79:38:74:30:2b:81:53:5f:0b:d0:
d4:d6:c5:36:a2:df:50:f1:93:55:70:ff:69:f3:1c:8b:8f:3f:
b8:0e:f9:d2:07:30:7d:f6:ce:22:7e:96:d8:a9:96:89:9e:66:
21:70:cc:84:d8:97:85:89:8c:32:8f:50:b5:27:98:e7:28:6d:
ff:b6:0a:78:29:3b:d0:cd:29:d5:62:3b:dc:c1:93:ae:4c:e2:
4c:03:ea:a1:27:5c:30:58:fa:1c:39:5c:99:27:f5:4f:8c:af:
3f:e3:67:a5:f2:e3:ab:2a:3a:02:7d:8a:df:ea:a5:65:3f:f1:
c3:91:88:36:8e:f8:bb:22:fb:86:71:c4:c6:eb:ec:63:d9:3c:
a3:b7:85:a4:34:ad:59:6f:4b:2e:18:0d:0e:6c:1a:c4:2b:eb:
45:58:34:a8:9f:5a:ef:cd:5a:07:07:ab:31:f7:99:b5:33:bd:
1d:d4:d5:6e
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZt6x702k5gvbiuP1TKvUHjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmY2YzExMDMxNTMyNDQ4NTJiY2IzZTIzYjZkZTJhMTZiYWE3YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppkmHBT3iA58vCP5GaJ5T2ZCUvMy
ETpiYBk4nlqZXVBjeAwPZ2K/iRb+Fl25TgNhLEK3if7bNyNZAUdH+ErrBiwOJO7r
Rc51hJeYQGmdPX7EJED4H/Fz4gWN8ZIsdD3tL6zKhQxklvdyGjuPGLUTPa0g/YaA
YHSDymC+lJw/o5YwSCa2vZbDnfTvXNA9lJLRkDTM/arRPX9EmsOurCwmCuTScqQr
H3NLgMEeqisdi64EQSRnahwm2AEC5HL66hEtt1foAiSdhwtagMgHGtVmMrpP9Uk0
E+UTWwx5fmz8BrDlDYAiWYL0xn2wa5bFcSQ7yWGyE+6ylU44whiRcRMTbwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFFL2wRAxUyRIUryz4jtt4qFrqnp/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2ViNzhh
My02Mjc2LTQxMGEtYTNlMS0wZGJjZmVhYzk4YTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvZWI3OGEz
LTYyNzYtNDEwYS1hM2UxLTBkYmNmZWFjOThhNS8xL1V2YkJFREZUSkVoU3ZMUGlP
MjNpb1d1cWVuOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAeQMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMSTDANBgkqhkiG9w0BAQsFAAOCAQEAEHw1WpgMc+kZnL51xQolDyOnSV7z
aqmh0KeFQX/i5jkQg5ArLdYkKzuQIfpxtWr7ykeslXikt07tKKr8lxXRbSbzpLXD
C6h/fiidyco55jh5OHQwK4FTXwvQ1NbFNqLfUPGTVXD/afMci48/uA750gcwffbO
In6W2KmWiZ5mIXDMhNiXhYmMMo9QtSeY5yht/7YKeCk70M0p1WI73MGTrkziTAPq
oSdcMFj6HDlcmSf1T4yvP+NnpfLjqyo6An2K3+qlZT/xw5GINo74uyL7hnHExuvs
Y9k8o7eFpDStWW9LLhgNDmwaxCvrRVg0qJ9a781aBwerMfeZtTO9HdTVbg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:35:42 2026 by rpki-client