Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
File: ugpNIpkX1GVzikghtu7FvrJObuQ.cer (raw, json)
Hash identifier: Lp3xn7rFl2PRuESVUsfmsIPVtd+PktrW3EZE5jMGK8A=
Subject key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F157D11ECB46ABE904CFF4DA350F856
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 14:21:13 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213521
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:7d:11:ec:b4:6a:be:90:4c:ff:4d:a3:50:f8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:37:42:45:56:eb:9d:f7:4e:58:72:13:6b:
7b:86:2b:cd:52:36:ee:c9:5f:36:0e:6f:68:75:0b:
ed:b7:d4:3e:99:a5:b6:15:b9:02:6a:6e:2c:62:57:
be:f4:a8:a7:c5:1b:d9:c6:b7:84:07:7f:cf:e8:65:
eb:23:f8:29:71:4f:c6:c0:24:73:39:99:f9:30:da:
8b:e6:fc:ce:e7:da:84:30:fd:e8:b1:7f:48:0d:05:
6e:53:64:e7:25:06:51:bf:c7:b8:71:e6:48:56:e9:
29:88:f6:82:7b:dd:f3:9b:78:c5:03:7c:8d:ec:88:
19:ec:9b:61:8e:c6:9a:d9:39:a9:a1:3f:ac:d0:6f:
44:7e:95:92:02:6e:c5:f9:92:4c:86:5f:9a:bc:46:
d7:26:a4:31:a9:81:8e:88:c5:04:f9:28:66:45:e2:
4f:7f:c1:0c:16:43:a7:9e:8d:83:66:52:52:2f:7c:
3e:d4:30:ce:05:97:65:d0:d2:98:65:ef:19:c5:78:
89:76:73:3b:d4:4c:9f:55:c7:35:66:40:72:41:b6:
5f:ca:0f:de:fc:28:84:b7:20:2b:3d:4c:5b:f9:d2:
32:1d:ee:4f:a5:e6:0d:28:a3:c4:c4:23:36:9b:80:
70:7d:b4:7d:7e:df:42:49:42:b9:cc:fe:67:16:a3:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213521
Signature Algorithm: sha256WithRSAEncryption
71:d6:9b:70:62:96:8c:e2:d5:d4:62:26:b4:0a:b2:36:cd:fb:
d8:71:6a:60:1a:7e:64:06:74:8c:1c:4d:2f:aa:f4:7f:b1:6b:
a5:c0:b8:77:6b:f2:cc:8e:c7:4b:fc:54:ee:c1:51:9d:9b:b9:
b1:1c:32:07:b7:18:1c:9d:3b:5f:a7:3b:1e:30:c8:2f:22:86:
e3:c6:49:1c:66:1a:02:01:95:59:b7:0d:6a:97:46:16:8a:ab:
34:4f:79:a1:00:72:e6:92:66:5b:06:dd:ec:46:43:ef:d1:82:
b1:0e:a6:86:ea:89:3d:54:a6:0a:bd:bb:db:a0:89:86:ab:8b:
28:06:46:60:c3:a9:43:1f:2d:0a:db:23:81:6a:9e:54:8d:68:
cc:e9:40:d2:b0:b7:40:61:14:64:bb:63:d1:0d:3a:50:7a:64:
29:76:0c:66:d7:fa:af:8f:3a:62:05:64:9e:87:10:d7:f6:1d:
d4:79:4a:17:79:13:8c:ae:a9:95:f3:cd:df:85:f9:10:77:95:
ea:d7:5e:2f:e2:50:19:81:2d:5d:3d:31:d0:87:50:f5:b0:51:
6f:4a:dd:5d:cb:13:49:9d:ac:f8:86:aa:93:67:77:85:46:d3:
eb:58:6e:aa:c9:5e:95:f2:94:c2:0c:2f:f2:b1:ff:a2:00:7d:
3b:d9:21:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:10:24 2026 by rpki-client