Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
File: Uz39bMFAxoo9O7qGulfPO4umqbc.cer (raw, json)
Hash identifier: ICrXur7GnoF1t9oC8/SdYk9e8RaZRS+fnamVpag+c6A=
Subject key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79101C345B6FD52C277D36CE7D4F63C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 10:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 198701
IP: 91.238.22.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:1c:34:5b:6f:d5:2c:27:7d:36:ce:7d:4f:63:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:3e:de:dc:22:6b:b3:64:bd:a3:9f:68:b9:
a6:64:37:8a:7e:13:c5:2f:15:e7:38:ca:a4:6a:da:
56:cd:03:d6:1e:ab:79:5c:aa:ee:44:4e:10:4a:aa:
28:a0:23:f3:41:a0:44:b1:0c:19:4d:1d:78:1e:1b:
28:f1:b6:ef:c0:df:9c:9c:43:10:40:af:3a:4c:b0:
fe:a3:80:c4:57:0a:c6:49:4e:67:22:4d:c6:00:d5:
38:aa:bc:2f:8b:46:dc:37:88:11:3d:99:32:35:8e:
cd:df:4a:d4:d2:07:a2:a1:71:1c:28:5a:be:1b:cc:
6c:d7:c1:cc:e3:c9:ce:5b:4f:c4:6a:d9:81:6b:a9:
9e:2b:b3:0f:bc:0f:12:71:59:8a:ca:e7:be:25:ef:
e4:29:50:a0:bd:ea:d2:50:e6:88:58:4f:2c:2b:45:
23:a1:7c:ba:fd:2e:bb:ab:08:2f:b4:dc:07:7c:e1:
1c:e2:fb:ae:f2:ea:14:1d:98:6a:f0:ce:f2:42:5c:
6d:f8:bc:39:5c:98:d9:9e:75:6b:b3:63:94:02:de:
db:b4:6a:6e:bf:f8:67:43:0d:af:5b:95:90:73:d7:
35:f5:9d:ca:a8:e9:3f:b5:d6:b0:7a:91:b3:ae:a4:
da:b6:80:5d:f0:7a:65:af:9e:8e:19:51:8b:40:f6:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.22.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198701
Signature Algorithm: sha256WithRSAEncryption
26:38:39:6b:09:c8:39:14:cd:e1:4e:ac:fa:a0:1a:1e:dc:b8:
e1:fb:c5:70:15:60:19:01:29:ad:b4:e9:b1:11:e3:02:98:70:
94:af:88:c2:e1:5b:98:5e:91:ca:dd:35:68:7e:05:58:57:29:
20:ee:39:6d:55:8c:cd:77:cb:a3:6b:3e:cb:40:31:af:98:46:
86:21:4f:82:19:15:e0:68:52:9b:77:20:2a:6f:d9:ec:54:d6:
3b:1c:18:fd:d5:95:a2:31:5c:c1:4d:1a:dd:c5:2d:e0:6d:ac:
83:52:e7:44:91:e8:54:44:6f:52:d4:a2:3a:2f:13:a5:85:77:
af:2f:68:1a:c6:a2:68:3b:b4:26:86:9b:0a:01:2f:76:bc:90:
f8:19:b1:c8:f7:fb:27:a8:59:45:78:26:9e:b4:f6:10:35:51:
9f:f8:6a:f1:1b:41:36:ca:38:c4:58:74:46:3a:fa:15:d4:b7:
f3:68:fa:b9:3d:89:3f:7d:a3:b5:04:be:0d:b8:93:cd:27:82:
83:ec:19:80:45:d9:d3:6d:96:26:0a:a8:20:24:7a:5b:e1:33:
e6:22:98:44:f2:9f:d4:68:f8:07:93:c1:24:44:dd:00:8d:8a:
40:cd:c6:07:63:a1:fe:c3:3d:62:4b:40:05:48:b7:92:44:cc:
bc:c6:46:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:02:32 2026 by rpki-client