Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer
File: uwdfqgqHRVxcAiqQrUXyxfPPkhI.cer (raw, json)
Hash identifier: cfewwNcALW8ZLmeVUIl9O5fpPCIdFPNTs1wDHX/bqhY=
Subject key identifier: BB:07:5F:AA:0A:87:45:5C:5C:02:2A:90:AD:45:F2:C5:F3:CF:92:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA015772CD17A02C7AC2FF7F9E9E46
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 44945
IP: 78.108.16.0/20
IP: 185.43.172.0/22
IP: 2a04:2380::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:01:57:72:cd:17:a0:2c:7a:c2:ff:7f:9e:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb075faa0a87455c5c022a90ad45f2c5f3cf9212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:ab:76:58:18:f5:f4:ef:20:5a:82:22:4c:
d9:c4:28:13:4a:e2:70:15:94:8d:6a:dd:4f:14:68:
91:22:4a:82:47:4d:8c:43:72:6b:67:9c:83:a7:e9:
36:6a:8e:c5:eb:d2:31:3a:b1:92:e9:9a:68:aa:f7:
ba:18:19:4a:c4:54:c7:4f:a3:56:48:60:aa:1f:6a:
6a:87:78:c8:2c:1a:39:d3:c5:bb:03:6a:84:76:1a:
30:e1:a7:82:d7:52:25:2f:e1:cf:79:af:08:48:87:
ed:a6:ab:92:47:97:02:7b:68:2b:79:32:f8:19:b9:
1c:25:5a:29:24:2e:9a:99:02:65:3a:66:c0:ad:1c:
f3:88:fb:03:16:d9:ed:12:2a:d8:25:e2:02:08:7b:
7c:ad:5c:e9:4d:cb:b3:f2:21:8d:a1:90:cd:80:50:
e6:ad:fa:43:53:46:d6:16:42:0d:cd:91:a4:d4:d4:
dc:e4:b7:9f:12:a1:72:70:60:d3:db:48:f5:37:30:
5c:9e:91:84:fb:f6:5e:83:71:e6:7b:de:5f:78:5c:
1b:d5:62:ae:34:c3:62:b3:30:15:51:66:36:0e:41:
49:0e:fd:56:cb:cb:b1:06:f0:15:d7:c3:e5:81:b4:
ba:98:ea:8d:d5:51:c5:8f:2d:6f:21:87:6c:e7:8b:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:07:5F:AA:0A:87:45:5C:5C:02:2A:90:AD:45:F2:C5:F3:CF:92:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/uwdfqgqHRVxcAiqQrUXyxfPPkhI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.16.0/20
185.43.172.0/22
IPv6:
2a04:2380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44945
Signature Algorithm: sha256WithRSAEncryption
8b:e9:d1:ab:d2:9f:e9:44:83:06:b3:93:42:07:6f:0b:ef:c6:
8e:51:9f:10:5f:0a:25:b2:76:89:d5:07:6d:eb:40:63:b5:78:
1f:a3:2b:32:05:93:fe:07:f4:55:6c:ec:b9:f2:de:5f:5b:9a:
55:eb:92:35:9e:d1:26:79:72:ff:a5:42:67:ea:1f:92:96:a4:
83:ad:dd:e0:38:4d:5a:79:b1:3b:24:be:d7:2f:98:c3:a4:00:
24:08:1b:36:0e:39:1a:a3:aa:09:9c:1d:38:27:0d:68:76:c4:
11:13:47:f4:c6:e6:c4:9e:71:7e:50:61:f2:a2:8b:1a:aa:3c:
cd:d2:5d:b5:ac:32:df:f1:7a:93:be:43:d1:a5:10:b1:42:c7:
75:34:00:4e:d8:2a:95:16:5d:85:24:47:dc:4b:8e:c3:e7:3e:
74:fc:00:7b:02:6c:40:8e:a5:10:12:ad:e4:db:d1:ee:8f:1d:
98:6a:86:29:cf:9a:a4:05:66:81:43:68:8c:0d:61:58:cc:5a:
30:f4:ba:61:2d:a0:cf:72:1c:19:1b:af:72:40:0b:9a:45:8e:
6b:3a:75:e6:a1:37:32:76:b7:eb:7e:2e:db:0c:78:62:b8:f6:
62:ea:70:36:d4:35:01:d0:4c:75:7f:7d:12:dc:2b:78:56:ec:
e6:13:f5:b8
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZ8Y+gFXcs0XoCx6wv9/np5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjA3NWZhYTBhODc0NTVjNWMwMjJhOTBhZDQ1ZjJjNWYzY2Y5MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOurdlgY9fTvIFqCIkzZxCgTSuJw
FZSNat1PFGiRIkqCR02MQ3JrZ5yDp+k2ao7F69IxOrGS6Zpoqve6GBlKxFTHT6NW
SGCqH2pqh3jILBo508W7A2qEdhow4aeC11IlL+HPea8ISIftpquSR5cCe2greTL4
GbkcJVopJC6amQJlOmbArRzziPsDFtntEirYJeICCHt8rVzpTcuz8iGNoZDNgFDm
rfpDU0bWFkINzZGk1NTc5LefEqFycGDT20j1NzBcnpGE+/Zeg3Hme95feFwb1WKu
NMNiszAVUWY2DkFJDv1Wy8uxBvAV18PlgbS6mOqN1VHFjy1vIYds54s04QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFLsHX6oKh0VcXAIqkK1F8sXzz5ISMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2Q2ZDYy
NS1kZGEyLTRmMmYtYjhjZi05MmM3ZDQ2ZGRiODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvZDZkNjI1
LWRkYTItNGYyZi1iOGNmLTkyYzdkNDZkZGI4OS8xL3V3ZGZxZ3FIUlZ4Y0FpcVFy
VVh5eGZQUGtoSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQETmwQAwQCuSusMA0EAgACMAcDBQMqBCOAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvkTANBgkqhkiG9w0BAQsFAAOCAQEAi+nR
q9Kf6USDBrOTQgdvC+/GjlGfEF8KJbJ2idUHbetAY7V4H6MrMgWT/gf0VWzsufLe
X1uaVeuSNZ7RJnly/6VCZ+ofkpakg63d4DhNWnmxOyS+1y+Yw6QAJAgbNg45GqOq
CZwdOCcNaHbEERNH9MbmxJ5xflBh8qKLGqo8zdJdtawy3/F6k75D0aUQsULHdTQA
TtgqlRZdhSRH3EuOw+c+dPwAewJsQI6lEBKt5NvR7o8dmGqGKc+apAVmgUNojA1h
WMxaMPS6YS2gz3IcGRuvckALmkWOazp15qE3Mna3634u2wx4Yrj2YupwNtQ1AdBM
dX99EtwreFbs5hP1uA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:45 2026 by rpki-client