Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
File: rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer (raw, json)
Hash identifier: 98FNDgnAVBjcb1yWIiMlDxt5VlwtIxUZTvYNtlL+xNM=
Subject key identifier: AD:4A:14:95:48:4C:E2:BF:9E:C2:81:99:A8:29:98:AD:02:63:83:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DDF7D38928D47797CA10BE3D9D821221B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Apr 2026 17:43:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203246
IP: 185.11.172.0/22
IP: 2a03:6ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:7d:38:92:8d:47:79:7c:a1:0b:e3:d9:d8:21:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 17:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad4a1495484ce2bf9ec28199a82998ad02638316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:8f:18:38:33:2e:bd:55:cb:18:1f:e5:ca:
fc:9b:13:b0:9e:a0:72:6d:d8:57:a3:2d:74:04:d3:
4b:fc:d5:43:05:f7:b6:b1:b5:6e:d8:19:4a:c6:94:
aa:23:7f:06:8e:0d:9f:51:60:2a:90:db:71:28:29:
e6:e7:ec:2c:9f:da:ee:42:74:2e:f7:7e:01:3c:6c:
07:1d:4d:35:20:de:e5:11:02:dc:7a:24:ac:bc:af:
1d:8b:97:aa:84:f1:24:82:79:00:07:05:40:29:fb:
8d:7e:3d:2f:95:63:3e:23:c4:34:e8:b5:e9:7e:a0:
6a:5d:32:6a:73:ba:5c:84:69:3e:26:dc:c0:29:4f:
19:80:79:03:aa:16:c6:94:d7:64:62:45:7d:5b:ca:
77:c8:4e:fb:44:fb:f2:9c:0f:09:16:e0:16:06:e9:
61:38:46:2c:f4:1c:b6:0c:14:cd:6d:e3:9d:d4:0d:
01:70:16:6c:90:65:11:ae:63:e1:1b:91:63:19:74:
8e:92:a7:39:6b:d5:d5:c0:cc:38:2d:7f:30:a3:03:
ca:64:77:ae:59:2c:4e:59:11:3f:98:b1:a8:5b:af:
b8:c6:1e:ed:6f:a2:c0:b0:a6:81:21:6d:e8:fc:c8:
e4:b7:f8:d6:0a:a3:f9:13:ad:4e:7c:ba:16:15:56:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:14:95:48:4C:E2:BF:9E:C2:81:99:A8:29:98:AD:02:63:83:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.172.0/22
IPv6:
2a03:6ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203246
Signature Algorithm: sha256WithRSAEncryption
46:01:c3:92:02:c9:ba:d2:aa:7e:af:b0:58:90:4b:af:e0:84:
c1:74:44:28:0c:fc:fc:f2:31:89:af:8e:7f:36:dd:37:33:97:
81:8c:38:21:2f:65:b3:74:4c:8c:4f:95:00:ec:c1:53:90:70:
a0:a1:d2:2c:65:68:38:5a:35:55:77:c8:5b:3a:a8:fa:67:a7:
07:df:c9:82:8b:2d:a0:d9:e0:d8:aa:54:a6:28:47:cf:f1:a5:
62:fc:d2:e3:3d:8f:10:d9:1d:72:13:c4:a0:50:41:c5:b7:43:
f6:48:2a:26:38:b1:c3:db:bf:bb:d9:f3:cf:19:eb:48:d1:91:
8d:3d:9c:35:82:51:0b:74:a5:88:82:95:df:f6:1d:8c:5b:ba:
30:7d:a6:84:1e:9e:02:c9:30:85:ab:de:04:53:a1:f9:17:28:
91:a8:ae:cf:6d:32:60:54:06:76:54:ef:64:09:32:1b:97:cb:
a5:67:ee:66:58:c9:dc:9c:b1:fd:68:e7:cd:74:cc:e9:98:7b:
42:fd:f1:b6:d1:ab:e4:b0:be:9f:48:ca:2b:50:1a:6a:e5:4e:
7c:33:78:dc:aa:af:06:c8:0e:d1:e7:64:0e:f8:50:b7:58:fa:
8f:5d:c2:b1:6a:3c:17:c2:02:89:5a:ac:dc:36:8c:3b:06:04:
cb:58:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:22 2026 by rpki-client