Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/uLmiaW_RMnaEomOHvSfMR95V81w.cer
File: uLmiaW_RMnaEomOHvSfMR95V81w.cer (raw, json)
Hash identifier: JKf2dB8nbfLd7MoSKQlC+9Le1gNh5N9nxWp0342XJ7w=
Subject key identifier: B8:B9:A2:69:6F:D1:32:76:84:A2:63:87:BD:27:CC:47:DE:55:F3:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0904552428903EF5C09746D22C78A34D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Sep 2026 11:40:57 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.232.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:45:52:42:89:03:ef:5c:09:74:6d:22:c7:8a:34:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 11:40:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8b9a2696fd1327684a26387bd27cc47de55f35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:b9:b9:a6:6e:30:4c:43:81:c4:28:ff:41:
95:d8:8f:47:ef:0e:af:59:b7:01:42:1c:4e:f5:15:
b4:66:98:3c:27:57:ba:7f:16:bb:14:98:f9:36:14:
9c:1e:48:db:ab:7c:3c:a3:11:e4:07:9a:f8:bd:27:
9f:ee:8e:45:ce:a7:07:ee:a7:dd:12:b6:83:77:53:
5e:60:0b:f2:64:ef:1b:9a:8c:76:c8:95:f7:bd:56:
75:18:cd:95:d8:40:fa:13:9b:13:7b:e6:85:06:71:
b7:56:b5:02:d4:53:c4:24:e6:aa:7c:0a:48:2a:dd:
68:5f:92:22:ba:31:b1:3c:38:72:e8:e1:e5:7a:99:
d8:b2:5b:0d:1b:c9:9c:40:25:de:04:dc:ae:d6:c9:
ab:96:ac:99:d2:84:c4:e9:48:bc:81:88:ba:fb:af:
d5:64:de:ce:44:6f:0f:54:5f:61:26:48:79:ec:03:
f7:dd:32:9e:e6:b7:b4:30:60:61:79:bb:90:0b:7c:
2c:33:86:ac:67:a8:44:2b:f9:89:eb:38:7e:3f:95:
a6:77:8b:48:7c:ff:13:1c:43:ac:de:4c:3b:ce:2c:
09:bc:51:86:15:d0:4e:06:bb:3d:3b:f8:d9:be:30:
aa:e8:87:bd:82:5b:37:10:29:43:81:76:10:fb:ce:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:A2:69:6F:D1:32:76:84:A2:63:87:BD:27:CC:47:DE:55:F3:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2531c9-aaff-449d-9195-9bbcf6dab043/1/uLmiaW_RMnaEomOHvSfMR95V81w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:65:80:c5:35:41:14:6f:c2:e7:96:41:f7:1c:61:5e:85:75:
14:46:c1:d0:5b:71:f5:3d:a2:64:2e:64:f7:e4:51:63:40:39:
67:94:e6:c0:95:f9:71:b4:8b:f5:89:97:91:31:2e:db:9b:76:
2c:64:bc:25:6c:0a:21:d5:c8:13:3b:36:60:9b:8e:43:d8:37:
6c:50:68:3e:e2:3e:95:df:62:31:00:db:85:eb:bc:50:c7:e1:
3d:8b:fb:c3:aa:dd:d4:ed:60:fb:20:29:b9:23:b0:35:00:45:
02:19:d9:47:1e:4f:40:bf:2b:42:d2:b3:e8:1d:32:15:a9:11:
4f:c8:ea:92:ff:be:2e:90:81:44:2a:38:ae:9e:a6:a1:b6:0e:
5f:b1:3e:19:6c:99:93:d3:9a:93:6c:22:f5:aa:07:ae:fb:b1:
ba:d0:93:be:30:54:01:73:30:56:85:59:18:a7:e2:b3:32:5a:
54:40:27:2d:d3:4a:7d:76:b6:77:12:d9:15:84:f7:a9:f0:f6:
0f:bb:af:ec:4d:7e:e6:5f:bf:5e:18:94:d7:12:24:de:a1:5f:
43:e3:56:0e:40:92:ff:b9:5d:cd:4c:d1:1d:70:42:18:10:fc:
6f:a8:42:1d:7b:52:c3:c0:f4:3e:ee:3f:81:34:dc:a6:af:5a:
3b:35:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:02:53 2026 by rpki-client