Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.cer (raw, json)
Hash identifier: 3alwYG3SpqZLPyj3q7XjmC8GkeQyeZQSgeNa99Br9fk=
Subject key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A13A38CF06C2873B1E19CF876F37CB07F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Oct 2026 11:42:43 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56701
IP: 45.157.212.0/22
IP: 77.73.234.0/24
IP: 91.214.122.0/23
IP: 129.101.85.0 -- 129.101.87.255
IP: 161.104.24.0/22
IP: 168.222.196.0/22
IP: 178.236.29.0/24
IP: 2a0f:f280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:38:cf:06:c2:87:3b:1e:19:cf:87:6f:37:cb:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 14 11:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:a3:7b:00:8b:ae:0e:1c:2c:c7:59:a4:04:
f4:4c:2f:50:ac:65:e3:be:26:20:86:05:e2:e9:52:
62:6b:73:0b:a6:e6:2a:5e:e0:88:27:f2:1d:45:8c:
6d:f6:f4:47:ae:25:58:9d:dc:55:e3:0a:33:05:65:
43:62:27:70:88:38:25:60:b1:4b:ef:8e:30:cc:86:
a9:5f:4e:98:e7:2e:44:d5:d2:71:8a:35:ae:d2:f4:
d7:1c:e1:02:81:3d:ea:e8:de:4a:fd:5b:e8:ba:6c:
18:63:1b:a7:a3:0a:49:cd:44:db:ef:36:a5:4d:36:
cf:10:be:e8:76:73:20:b2:a8:67:ac:cb:52:ac:43:
51:7c:f4:03:9d:22:4f:e1:67:3f:88:65:cc:41:69:
64:cc:a1:98:df:60:d6:47:b0:7b:41:c8:78:44:ad:
0f:78:18:ee:ec:bf:2f:23:3d:11:92:67:ec:2b:27:
a9:07:51:e4:75:ce:3f:a4:62:63:4d:7c:a1:58:2c:
8d:9e:f4:dc:0b:8f:36:7e:f1:6b:40:40:dc:34:93:
f5:34:fb:e8:2e:43:ea:09:e1:47:07:d6:fa:b3:b1:
a2:5b:fc:73:86:4b:54:28:d8:4b:a7:ce:13:73:57:
bb:e6:6d:5a:90:d5:54:0b:98:4c:c0:8a:9a:c5:56:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.212.0/22
77.73.234.0/24
91.214.122.0/23
129.101.85.0-129.101.87.255
161.104.24.0/22
168.222.196.0/22
178.236.29.0/24
IPv6:
2a0f:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56701
Signature Algorithm: sha256WithRSAEncryption
4f:b8:2c:87:bd:a2:8a:d9:87:3d:02:b8:6f:24:a1:69:8b:d0:
6a:27:14:54:43:61:24:dd:a0:94:52:42:84:55:70:be:4d:ed:
ae:df:a3:c3:6c:40:e2:41:e1:ed:67:b7:83:5e:b9:b1:ab:a2:
8e:9b:5d:fc:be:3f:90:e2:97:69:80:51:a2:13:d5:19:da:51:
56:ab:8b:d9:a6:66:68:ee:4f:5f:e2:d1:f0:f8:59:35:e6:20:
15:9b:ac:e9:0b:a0:0b:6b:10:85:2e:a9:a2:84:ca:63:21:9f:
39:a2:79:4c:e2:17:d9:59:c0:f2:c1:9b:c9:fc:50:20:45:a3:
1f:8c:b7:56:9d:e3:7b:ab:24:3a:21:01:bd:24:62:80:59:cf:
b5:08:cc:5c:3f:fa:4f:8b:22:31:ff:37:ab:c8:b5:67:d5:51:
f2:2d:d0:4c:30:1c:f6:e5:fc:30:d3:1a:10:22:05:a6:ca:99:
3c:c1:97:c0:2f:ed:c2:66:02:32:a8:88:16:01:59:23:9e:01:
ff:16:a6:d1:78:fa:b6:36:40:c9:63:eb:63:06:11:90:75:0a:
bd:92:78:f4:45:ed:97:ff:f7:84:99:54:97:d3:44:d9:ad:09:
88:d2:c4:2b:b6:bd:6c:22:29:e5:53:f3:d8:69:04:0c:4c:f5:
7f:61:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:47:22 2026 by rpki-client