Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer
File: uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer (raw, json)
Hash identifier: 7bzNe9sRQpDxoCskk3BMlBz4eMBLdd/qDJSHxCvi9cg=
Subject key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB23FA6C4C052634E357D7081A9F26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:18:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 12468
IP: 212.28.160.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:23:fa:6c:4c:05:26:34:e3:57:d7:08:1a:9f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:c1:7f:8b:ca:ca:80:0f:b5:d7:6b:17:a8:
33:82:95:78:47:11:dc:7f:69:eb:d5:b3:72:e1:fc:
cb:2d:29:1f:85:81:54:86:62:95:15:b7:2f:74:3f:
a4:cb:ff:7c:59:01:f7:2c:00:19:d8:5c:5a:7a:70:
bd:17:31:4c:46:ff:d1:97:ed:32:a8:60:14:a6:10:
ab:1e:90:73:da:6e:45:95:f3:cc:e4:0f:c7:08:d4:
0c:ae:22:4a:c5:19:e6:46:57:ec:e4:f3:e0:fb:78:
48:14:fd:51:89:2e:fe:45:8f:a9:b6:01:8a:90:ad:
c2:90:11:12:3d:c0:39:36:d9:b2:c3:83:8d:39:d9:
e0:d9:78:6a:97:b3:fd:78:e7:83:b8:f0:eb:96:bf:
44:ac:f0:b1:da:4d:30:e3:45:c0:5d:a9:d0:72:0a:
e5:5f:9c:75:43:c3:23:8e:35:9e:38:e8:88:5d:8b:
f7:fd:f8:7d:4f:aa:5f:f7:ac:75:de:b4:49:83:d0:
f4:1a:98:20:a3:e6:2f:49:a0:64:a7:78:ed:7b:c7:
56:2d:c6:6a:87:99:60:fa:37:d4:51:8c:9b:0c:8b:
9c:11:09:f4:e7:00:52:30:22:8e:22:26:30:1c:69:
c0:60:a0:d1:d0:01:a5:03:53:fd:67:20:28:94:86:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.160.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12468
Signature Algorithm: sha256WithRSAEncryption
55:0a:67:ee:40:10:08:6e:e7:bb:46:34:8a:6b:b2:d7:ac:8c:
a3:6d:f7:0c:2c:d4:06:2c:64:f4:c8:90:4d:f0:18:0e:6d:bd:
1e:12:03:6a:fb:a1:89:05:61:91:ab:83:c3:3b:68:ce:ca:96:
2c:a3:c4:6b:b9:c9:14:63:be:c3:70:4a:72:fc:a8:1a:4c:5b:
b1:45:ef:41:c1:44:96:00:01:1f:e9:c1:3d:9d:ea:69:0d:de:
09:5c:9e:8d:a8:6f:94:9e:2b:b7:3c:ea:8e:54:cf:e1:15:f0:
b6:97:88:26:97:94:fc:d5:5f:64:5e:fc:98:62:41:20:4f:ad:
98:2b:ed:35:3c:80:58:b9:f3:5f:a9:2d:0e:c3:83:ae:af:69:
3d:10:eb:6f:6c:0c:93:0c:b7:56:f4:07:78:30:19:ce:9d:05:
47:db:fd:de:f9:4c:44:41:81:61:0f:2a:c9:cf:a4:11:17:ef:
09:b6:96:21:ba:43:f2:8c:b0:b6:a3:07:3b:f1:53:e1:6a:c1:
08:46:13:c5:f2:c8:ba:66:44:79:5a:d2:23:7b:9f:8a:44:ae:
cb:30:2d:d9:51:2f:de:20:fd:64:b8:a3:06:5a:8e:46:cc:99:
58:31:c8:55:41:b8:d4:31:dd:93:84:13:29:2e:06:c8:12:60:
7c:31:27:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:04 2026 by rpki-client