Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer (raw, json)
Hash identifier: 3g21qTCIXmyu5NLyRtYzYszJR7cyfaVNcUhZ7Jh5QDg=
Subject key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A086B5DD6ED0BF26B637F00839ADF504B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 09 Sep 2026 15:07:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43647
IP: 62.122.216.0/22
IP: 82.148.0.0/21
IP: 89.232.184.0/22
IP: 94.154.128.0/22
IP: 130.49.168.0/22
IP: 157.22.128.0 -- 157.22.151.255
IP: 157.22.208.0/21
IP: 185.76.12.0/22
IP: 185.228.88.0/22
IP: 193.149.16.0/22
IP: 194.242.60.0/24
IP: 213.148.16.0/21
IP: 213.148.28.0/22
IP: 213.232.225.0/24
IP: 213.232.245.0/24
IP: 2a07:4b80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b5:dd:6e:d0:bf:26:b6:37:f0:08:39:ad:f5:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 15:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:41:e4:6e:74:26:d4:8b:ed:34:24:ee:47:
ad:33:ed:9c:78:24:32:ef:ea:32:f1:35:3d:f0:79:
7a:ff:52:d5:55:79:42:ec:dc:7d:17:7b:80:48:e2:
8f:17:a7:db:b2:de:30:46:d4:47:4b:da:f1:56:0b:
47:f2:d2:73:b5:82:37:c8:80:cd:4d:66:77:07:83:
44:f4:1a:94:11:0d:c7:8c:f8:8e:0e:c9:db:9f:1c:
4e:01:c3:3c:fb:69:f6:c2:3c:b9:9a:e4:16:72:8f:
c1:32:da:01:90:32:b3:7b:fa:37:fa:73:a8:6f:ff:
25:b8:09:61:54:bb:77:fb:3e:9d:3d:e2:05:56:46:
80:7f:2e:09:ff:d7:70:3c:bf:36:be:0a:ad:2e:89:
ee:d6:2f:67:9d:36:78:3e:1c:01:75:95:64:f6:b9:
e8:8b:7c:1c:e8:75:76:cb:a4:89:1e:07:b8:05:a1:
03:08:0a:cd:7f:f4:bd:ee:a4:9a:28:54:f2:cf:5b:
50:e9:aa:c8:6a:ab:37:39:ca:45:d4:09:a3:a8:e3:
ab:55:40:cb:8c:c7:a0:ab:8b:f7:79:d1:c4:41:27:
aa:15:f2:33:76:74:4d:81:a9:ef:32:d7:b4:17:22:
e4:6f:55:56:09:15:72:f6:67:91:dc:e8:80:67:59:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.216.0/22
82.148.0.0/21
89.232.184.0/22
94.154.128.0/22
130.49.168.0/22
157.22.128.0-157.22.151.255
157.22.208.0/21
185.76.12.0/22
185.228.88.0/22
193.149.16.0/22
194.242.60.0/24
213.148.16.0/21
213.148.28.0/22
213.232.225.0/24
213.232.245.0/24
IPv6:
2a07:4b80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43647
Signature Algorithm: sha256WithRSAEncryption
11:fd:37:0a:00:87:63:6a:e5:d4:ff:f2:3e:66:27:9c:c5:06:
4e:31:5d:12:21:2e:99:cc:28:33:e3:80:d9:fa:d0:87:3a:27:
a2:4f:92:34:9b:be:44:48:5b:3e:db:a3:e8:59:9d:57:ac:73:
a5:04:a7:f5:2e:38:22:15:f1:07:2c:cb:26:35:0a:1b:4f:20:
c0:f3:a2:04:74:c5:f8:73:95:f8:0e:20:54:b8:7d:d3:78:4e:
9d:98:a7:3a:ce:52:90:5d:a4:e9:3a:97:95:72:bc:80:b4:5f:
40:23:17:f5:cd:e8:8b:8d:b0:b6:2b:9f:15:93:75:4d:2f:3c:
c3:b2:96:a2:ce:22:6e:f1:c7:5d:e1:52:b2:f4:47:8f:cd:79:
4f:9a:27:c0:f3:e7:6b:a3:13:a9:b3:d3:ee:6e:26:24:dc:41:
f6:c3:bc:df:fb:45:51:60:55:c6:d9:0a:f5:f6:ce:bf:7c:26:
b7:06:cc:fc:22:56:88:e0:58:5c:23:e4:ad:4e:41:40:37:14:
69:3a:ee:55:0d:ce:22:b7:22:58:ab:8b:a9:1f:0a:74:16:18:
34:22:c5:0c:15:56:db:cc:e3:b4:12:9e:b6:20:85:99:52:86:
f5:cd:61:ee:34:cb:6d:d2:ff:e8:66:88:c3:ad:d3:3a:fb:18:
d1:bd:db:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:48:41 2026 by rpki-client