Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
File: Uw4xZLFq4JEmhPqpDkORTeH91aU.cer (raw, json)
Hash identifier: 2XI8Fnjjq8pkjR5WCWR8OLCm+k9dkJO+in/0iD7IXAw=
Subject key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80583430A5CC2EAA615A1A3A850E7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208232
IP: 2001:67c:1334::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:58:34:30:a5:cc:2e:aa:61:5a:1a:3a:85:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:a3:f6:76:2d:b2:4c:00:38:20:50:d7:df:
30:62:44:6e:76:a3:1d:ee:4b:ca:87:68:ea:46:ce:
e7:98:c3:66:e2:b0:e2:97:7d:06:e4:f7:62:04:53:
70:2f:7a:df:39:69:1d:ea:25:87:fb:f0:9e:80:30:
db:fc:7c:2c:41:84:84:86:f3:26:bb:eb:48:6a:5b:
89:70:1c:4d:90:27:d4:8b:9e:eb:3c:8c:dd:64:c4:
b6:8a:b3:82:51:a1:af:b9:7b:66:ad:1c:f6:01:9b:
3f:10:c0:cf:11:72:95:8b:39:69:53:cc:4c:e1:54:
4e:5e:7a:8a:8e:d1:ad:d6:b3:83:f4:f9:bc:cb:c9:
21:8d:b8:a0:ef:b3:c9:c5:17:72:fc:fe:f6:5a:a5:
d1:87:98:b0:e9:4f:53:41:10:6c:58:57:6e:17:ce:
18:e4:2f:51:22:45:a7:5c:a4:7c:51:c4:5a:ca:7d:
dd:52:a9:9c:9d:1c:ac:d7:7a:7e:0d:1f:7c:f3:b4:
53:3b:5d:7e:09:38:86:dc:3b:9d:fd:5f:89:b3:6c:
8f:7c:6c:93:b3:48:b7:77:97:49:52:06:23:4f:4e:
0b:ae:2f:15:15:4d:ba:98:bf:59:d9:98:66:ca:76:
f4:7e:35:7a:62:ad:e0:cb:11:5f:88:c5:ba:d8:c9:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1334::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208232
Signature Algorithm: sha256WithRSAEncryption
95:84:ea:58:22:b9:77:93:8d:6f:41:d7:33:27:b3:07:e9:54:
14:ba:86:5a:49:ee:c0:20:7c:62:a7:9e:2a:f4:76:c1:2f:d1:
5b:ff:7d:0e:62:00:a9:49:f1:74:0b:3f:31:f1:45:b7:04:df:
9c:19:60:58:c7:85:62:eb:1f:b8:61:99:36:02:78:f2:47:9b:
02:7f:ac:91:cf:99:8f:fc:8f:c7:8e:b8:6a:3c:a0:03:6e:03:
09:55:c4:e8:61:f0:31:de:c2:a6:09:7d:59:ee:d2:bc:23:79:
11:5d:55:05:b8:37:e6:b8:d5:cb:d5:f9:cc:10:87:28:36:c5:
b1:03:2e:e1:a6:f3:69:48:4f:3b:32:04:4b:0f:7e:00:21:2f:
cc:b6:46:c6:b8:8c:d8:00:af:b9:90:3d:eb:8a:2c:76:72:09:
ca:47:ed:73:1e:c8:14:7d:0a:d0:a6:3e:a5:44:21:19:1c:ed:
58:ab:23:93:2b:bb:1d:ca:63:83:58:cc:52:37:48:65:83:44:
65:d9:84:1d:13:e8:f6:15:3f:5f:a1:b2:56:66:ff:bf:39:a0:
87:08:28:ad:da:51:f3:21:fc:17:10:b3:01:5c:09:16:22:67:
0a:d1:82:73:47:6f:5f:d0:f9:e1:49:09:aa:7e:c2:c5:0a:fa:
7a:d4:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:19:48 2026 by rpki-client