Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uQs3yxdghhgU8CzzVJfuVlMwZEw.cer
File: uQs3yxdghhgU8CzzVJfuVlMwZEw.cer (raw, json)
Hash identifier: uablS0BXPTzyVJsPhYMfTNX0Tf7UyGFXPR7n4LcE8Qo=
Subject key identifier: B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C1131C9A529069881AB39A56499901C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 00:17:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212623
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:31:c9:a5:29:06:98:81:ab:39:a5:64:99:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b90b37cb1760861814f02cf35497ee565330644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:f2:08:b6:ab:15:a3:dc:d8:39:83:1e:73:
f0:ac:f4:c5:a2:ae:98:8e:e2:64:bb:9f:6c:ba:90:
3d:26:4d:33:5e:6b:f5:1e:df:d2:f0:cc:8b:a4:dc:
f4:41:7c:5e:d7:62:b9:9e:d9:92:a9:82:95:8b:ef:
db:d9:3b:9f:09:96:da:77:32:7f:df:25:05:f7:c6:
90:66:e1:7e:6f:49:76:9b:41:e4:c5:15:71:7d:47:
35:a6:09:3c:28:42:6f:e2:24:a6:1f:d3:de:12:e0:
d6:60:e0:cf:9d:96:27:4a:bb:9a:af:c0:de:80:ce:
b8:6c:f7:10:a6:21:20:d8:de:0a:bf:fc:c7:8e:ff:
6a:bc:5e:69:23:15:04:aa:ff:ae:ab:ae:92:c5:76:
23:e0:37:e9:80:ca:53:42:23:73:57:a7:c3:8c:fe:
f5:bc:4c:23:15:a6:21:4a:04:33:34:97:9e:bd:37:
60:4f:3c:38:50:02:d9:f4:d9:6b:6c:8a:5a:28:43:
51:67:a2:8f:23:35:8e:34:df:e9:10:00:41:f4:29:
a9:80:2e:c3:02:8c:b5:3e:e8:d1:8c:46:38:95:49:
b4:3e:58:3e:cc:a1:53:33:0f:ee:3a:01:59:29:ff:
a7:d0:22:23:91:7a:8e:95:28:7e:62:88:a5:dd:40:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:37:CB:17:60:86:18:14:F0:2C:F3:54:97:EE:56:53:30:64:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a08afc-fa18-4038-b072-0b1cdb35bf90/1/uQs3yxdghhgU8CzzVJfuVlMwZEw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212623
Signature Algorithm: sha256WithRSAEncryption
92:fe:b0:d4:28:f5:a7:17:a3:0b:a3:5d:e6:70:d0:2d:54:1b:
a6:f5:0f:b7:4c:01:c7:78:46:6e:2f:1a:75:29:32:df:3a:4a:
36:98:ee:e3:a5:29:95:a7:14:fb:19:c3:fa:80:b7:c4:6f:3b:
76:81:47:04:43:1f:ef:44:93:2e:7a:3a:ab:88:e8:00:9e:40:
34:67:ea:00:8d:ca:63:12:0e:8f:1e:da:f2:3e:d8:c0:65:23:
21:82:1e:ef:98:f6:b6:cc:a3:55:5d:05:6b:74:8a:5c:fa:77:
11:75:7e:ea:de:2f:b7:dc:23:7f:9a:3b:f4:36:ce:8b:44:75:
04:fc:ce:53:e2:91:6c:d4:9c:da:ec:d2:46:96:42:9c:f9:0d:
24:f0:c0:39:8c:ed:d3:0a:3a:91:fd:e7:fe:f2:18:6c:c3:32:
8d:75:18:7c:52:9f:a7:d5:f7:5c:a7:9e:46:3e:dd:cc:26:7a:
dc:52:b4:fa:32:c3:0b:ab:93:9b:d8:3b:55:84:4a:23:3c:f1:
9f:5b:70:d8:16:3f:88:4f:4a:29:0d:47:77:63:90:e2:64:73:
1c:87:f2:84:c9:d9:eb:23:95:ce:70:e1:32:91:ec:b6:56:15:
3b:33:fb:f7:76:77:9c:4a:fe:94:52:45:4d:5b:b5:96:5c:ac:
72:c3:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:36 2026 by rpki-client