Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer (raw, json)
Hash identifier: D0DqieEfhB9x//lZ3fq45olcpJicHPxRXO+l8IjwP6o=
Subject key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DD380A2DC069CD4D8AB3B1EA5E148DC01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 Apr 2026 09:51:56 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43605
IP: 193.46.77.0/24
IP: 2001:678:b34::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:80:a2:dc:06:9c:d4:d8:ab:3b:1e:a5:e1:48:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 09:51:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b81525ae1a5afcef193f5a40177bf27388831078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:45:f3:7f:6b:d8:57:2b:e7:ba:24:bf:ee:
33:8d:02:a1:13:59:50:eb:52:46:19:23:1e:25:d5:
61:27:a0:3d:77:7c:b3:81:e7:c1:65:39:09:91:b5:
90:eb:3d:79:be:7c:20:16:b6:95:9c:11:79:40:13:
21:4c:fc:3d:f8:73:ac:68:1e:d0:91:74:7f:03:ab:
f3:29:54:76:b2:a1:46:78:a0:5e:b6:33:4e:0d:c8:
57:84:fd:00:e9:46:bb:4b:9b:8d:dd:eb:d2:3b:69:
9c:4a:3b:6c:3e:dc:e4:7f:14:6a:a7:27:7e:31:d3:
d3:a9:cc:81:24:48:e4:65:6f:81:79:59:6d:56:ad:
09:b6:35:30:eb:9e:10:af:5d:84:45:19:43:24:73:
4d:c9:d3:a9:96:31:c4:c3:bb:aa:73:22:47:34:b6:
9b:f6:59:6d:0d:61:20:3c:40:99:da:36:75:9a:a5:
28:6b:f4:31:81:58:b1:48:87:9b:63:7c:52:7b:8e:
38:4f:fb:c4:c1:c5:78:cd:e8:b8:eb:f4:90:da:94:
35:9d:bc:4a:02:a2:e0:29:b6:01:ab:64:47:d2:7b:
25:0a:af:b1:c4:37:3f:9a:1a:95:b3:f1:0c:bf:e9:
74:98:c1:ea:c6:68:c6:8c:0a:71:5c:e8:9e:73:d2:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.77.0/24
IPv6:
2001:678:b34::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43605
Signature Algorithm: sha256WithRSAEncryption
62:7d:4a:7b:20:45:58:bf:3e:c3:2c:37:84:a0:04:bb:df:0b:
a5:2e:74:8b:df:14:6b:09:df:22:e9:74:84:91:ac:92:2e:3f:
9d:af:da:73:2f:c9:a1:67:37:19:2a:80:db:46:15:67:82:c3:
5a:2b:4b:14:86:70:dd:15:15:91:44:33:a7:23:79:b0:ea:b9:
01:c5:91:ce:10:82:37:62:2b:e1:d9:40:1a:fa:b7:94:f3:c3:
31:8c:4a:f6:96:52:44:e0:86:bd:e6:95:c6:dd:cc:c6:f7:66:
dd:10:b6:77:9c:70:de:14:53:57:78:f2:a8:70:bb:60:70:a1:
3f:6c:9e:f3:c6:db:e6:cc:d9:4a:04:2d:84:08:fc:75:56:8d:
4d:44:65:28:9c:21:bd:10:c3:a4:af:a7:84:be:05:31:42:9a:
24:d2:ed:85:8e:d0:1b:8e:7d:7b:20:6a:e3:de:eb:4d:3b:a3:
51:20:8e:0c:8f:1a:e2:b7:8e:b9:47:1b:af:ab:c8:23:2b:29:
93:ff:e0:d5:a5:44:9b:c1:9a:32:13:08:47:9c:34:68:41:2a:
22:a3:4c:c2:da:f5:45:b7:37:8d:77:35:f0:6d:d3:f6:eb:ba:
6e:e8:a4:5d:a6:1e:79:b0:29:9b:04:35:76:fe:34:9f:f6:b5:
e0:4d:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:20:55 2026 by rpki-client