Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
File: uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer (raw, json)
Hash identifier: 8e2ri2azPI7oRy+8oLik2uDrhioO5okHNzPFFoM6+zQ=
Subject key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80937690311187F44BDB799CD54793
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43862
AS: 57921
IP: 91.234.142.0 -- 91.234.144.255
IP: 194.1.254.0/24
IP: 195.234.16.0/23
IP: 2001:67c:2890::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:93:76:90:31:11:87:f4:4b:db:79:9c:d5:47:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:8f:88:df:c2:6c:11:ff:f4:e3:39:ab:d9:
39:f1:b4:6e:14:bc:99:b7:69:06:f0:4b:9c:13:82:
c8:ef:90:24:21:c0:9b:e9:f2:1c:be:c5:0a:9f:de:
02:d8:4b:b4:3c:43:fd:09:f7:24:aa:09:2c:f9:57:
25:4f:dd:6a:66:12:12:34:1c:c3:6e:2d:7c:86:61:
d8:db:94:4e:7b:4d:42:cc:4f:9d:33:55:1b:88:2b:
9a:0d:4d:65:4a:df:82:04:c0:58:b5:8a:8c:2d:41:
20:6c:f4:97:0c:93:3b:63:34:0c:7a:de:04:4f:fd:
76:2f:38:f0:75:7e:a1:14:a2:10:d8:71:8d:ca:13:
78:43:c7:2b:09:e2:eb:48:48:76:b3:82:09:8a:71:
92:03:a2:08:56:cb:b0:cd:28:5d:32:dc:ac:47:7b:
e5:f3:5a:67:fa:fe:cd:3f:2a:19:21:39:7c:13:5f:
37:c0:dc:45:59:d4:08:7e:cd:2f:45:3f:dd:6f:d3:
eb:48:52:0f:ca:1e:dd:99:f7:73:4f:46:91:72:d2:
56:48:e9:fc:9e:37:62:5a:d8:66:40:d1:c3:6b:2e:
fe:63:71:cf:39:3b:cd:78:16:95:c6:11:ca:fd:ce:
5d:31:5d:77:e0:28:85:30:11:24:50:42:2b:e6:10:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.142.0-91.234.144.255
194.1.254.0/24
195.234.16.0/23
IPv6:
2001:67c:2890::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43862
57921
Signature Algorithm: sha256WithRSAEncryption
19:8b:69:93:16:74:d6:e4:5a:66:a2:e8:5d:00:c4:83:62:0d:
21:c4:9c:11:94:3e:ce:cf:d4:7e:ce:af:b4:c5:89:70:cb:52:
e7:6b:bd:dd:5a:f8:a1:36:0f:40:c0:d7:09:43:21:d0:dd:34:
a2:9c:71:72:9c:c4:4c:47:b0:bd:4d:5e:ce:fe:c6:00:c2:c1:
b6:c1:b5:8f:09:ed:81:21:1f:f6:1f:85:5d:79:d4:db:f6:dd:
08:53:d2:b1:00:0b:e3:62:f3:ac:50:5a:a9:c7:52:25:c4:14:
4d:d2:af:19:69:f6:26:e0:07:dd:5c:99:6f:85:a5:60:de:f2:
da:08:77:fb:94:80:41:c5:34:15:f7:a5:97:ec:80:ae:32:27:
af:cd:3d:2c:f4:df:b3:5f:0c:ed:2d:e7:05:f8:e8:cc:59:84:
66:67:f0:b2:13:82:23:6e:e3:de:38:3c:33:77:68:d1:db:ca:
09:56:b6:27:9f:b8:44:a9:43:9d:45:a9:5d:9c:44:73:7c:6c:
24:1f:57:c7:45:3a:0d:a1:3f:03:3e:89:b1:d2:72:3c:35:f5:
fc:69:3d:b5:51:d9:e1:79:17:a8:07:d4:a9:b1:8b:21:3a:0c:
d0:35:9a:37:f1:ef:67:cc:9d:e8:01:a5:ae:d2:05:24:39:4e:
f8:c2:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:57:39 2026 by rpki-client