Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
File: UHx3C7awjctNbqmwyWJyrzpvnHE.cer (raw, json)
Hash identifier: 7BiQmIokGd94uZNdf4vft9xW+s7+mQ7JomyPNBxXNnM=
Subject key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F046C34E0AAB0CD266E123775EE3CA64F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 14:53:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213031
AS: 215957
IP: 85.8.220.0/24
IP: 152.114.248.0/21
IP: 2a14:c680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:6c:34:e0:aa:b0:cd:26:6e:12:37:75:ee:3c:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 14:53:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:cc:31:e2:06:88:cb:81:38:e1:aa:21:76:
4a:32:f5:57:34:c2:98:f8:eb:7d:fd:b1:93:79:8e:
ae:2c:c5:70:28:cf:e1:10:88:c4:3f:6a:9e:ab:6a:
fb:74:78:98:77:b7:09:cc:09:64:fd:af:d6:6c:ae:
96:b7:9d:a8:99:b5:61:1c:e1:61:64:2d:f1:d5:c1:
02:38:2b:1b:30:1e:60:c0:2e:04:02:a7:53:95:a1:
e1:fa:88:fb:7b:d0:c0:0d:0d:b6:33:a3:b2:29:60:
15:93:62:b0:bd:8f:fd:b5:e9:8a:dc:ae:88:f2:60:
b4:3e:a2:de:47:93:28:73:71:74:28:1b:df:07:93:
71:2c:23:e4:97:9a:dc:ee:b6:87:a8:4e:d9:a4:2b:
5c:76:36:dd:11:b0:26:82:96:03:76:c8:d9:72:6e:
06:cd:05:42:98:9c:61:44:b6:18:1c:f8:aa:92:71:
23:33:ea:7e:24:fc:3d:4a:46:6c:7f:8d:ae:67:af:
1e:48:59:9e:d5:db:19:b6:7b:bb:5c:6b:2d:b6:fb:
58:9b:7d:75:ea:25:90:50:4b:51:00:e5:b2:47:5f:
64:0c:7b:8a:76:cd:e9:9a:c5:ff:37:e4:9a:e2:b5:
6a:d0:ce:7a:6c:8f:c6:07:57:fa:78:7e:dd:6b:65:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.220.0/24
152.114.248.0/21
IPv6:
2a14:c680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213031
215957
Signature Algorithm: sha256WithRSAEncryption
5a:76:34:f0:a3:18:b9:c7:99:5f:b1:33:c8:99:51:d4:ff:bf:
3f:b4:3c:65:2e:3c:b5:84:f0:b3:37:92:f0:c3:b6:1b:53:41:
d1:4d:2e:ff:47:12:26:6f:89:84:47:5e:6e:2c:51:20:62:f3:
04:6d:aa:e3:f1:bb:3f:2d:32:a8:73:02:12:a9:f6:cd:9a:cf:
60:55:e9:d3:a5:92:b2:4a:77:93:8b:b1:1d:83:90:53:00:f8:
d4:f4:13:c1:ae:8b:23:0d:39:79:31:47:72:0a:68:1a:ab:d5:
ba:95:88:7e:8d:cf:c7:97:0d:78:56:04:7b:f4:c0:ec:8b:31:
47:53:f3:e3:18:f9:3d:bc:b3:4a:fd:c8:4f:0e:90:9c:da:a5:
49:26:7d:3d:32:ac:f9:78:f1:61:b0:03:9e:c5:97:d7:66:87:
b4:45:5f:84:3f:f2:90:d7:f1:b4:51:7f:8a:26:2c:7c:93:e1:
8f:e4:f6:14:28:15:c3:44:a0:3a:77:f5:90:83:fc:35:34:a8:
d9:d3:48:3b:27:99:fb:91:de:58:b4:06:a5:63:db:ec:e7:90:
40:ce:36:62:dd:2f:cc:62:a5:94:b7:40:a4:34:55:37:4e:0e:
06:de:d9:66:58:8a:88:3b:79:63:52:aa:be:6e:75:3c:aa:65:
2f:88:21:e4
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZ8EbDTgqrDNJm4SN3XuPKZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjI2MTQ1MzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDdjNzcwYmI2YjA4ZGNiNGQ2ZWE5YjBjOTYyNzJhZjNhNmY5YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPfMMeIGiMuBOOGqIXZKMvVXNMKY
+Ot9/bGTeY6uLMVwKM/hEIjEP2qeq2r7dHiYd7cJzAlk/a/WbK6Wt52ombVhHOFh
ZC3x1cECOCsbMB5gwC4EAqdTlaHh+oj7e9DADQ22M6OyKWAVk2KwvY/9temK3K6I
8mC0PqLeR5Moc3F0KBvfB5NxLCPkl5rc7raHqE7ZpCtcdjbdEbAmgpYDdsjZcm4G
zQVCmJxhRLYYHPiqknEjM+p+JPw9SkZsf42uZ68eSFme1dsZtnu7XGsttvtYm311
6iWQUEtRAOWyR19kDHuKds3pmsX/N+Sa4rVq0M56bI/GB1f6eH7da2U8eQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFFB8dwu2sI3LTW6psMlicq86b5xxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzVmMTUx
MS0xMGZjLTQzZTctYThlMC01OGI3OWJjOWJjYzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNWYxNTEx
LTEwZmMtNDNlNy1hOGUwLTU4Yjc5YmM5YmNjNy8xL1VIeDNDN2F3amN0TmJxbXd5
V0p5cnpwdm5IRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQAVQjcAwQDmHL4MA0EAgACMAcDBQMqFMaAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwNAJwIDA0uVMA0GCSqGSIb3DQEBCwUAA4IB
AQBadjTwoxi5x5lfsTPImVHU/78/tDxlLjy1hPCzN5Lww7YbU0HRTS7/RxImb4mE
R15uLFEgYvMEbarj8bs/LTKocwISqfbNms9gVenTpZKySneTi7Edg5BTAPjU9BPB
rosjDTl5MUdyCmgaq9W6lYh+jc/Hlw14VgR79MDsizFHU/PjGPk9vLNK/chPDpCc
2qVJJn09Mqz5ePFhsAOexZfXZoe0RV+EP/KQ1/G0UX+KJix8k+GP5PYUKBXDRKA6
d/WQg/w1NKjZ00g7J5n7kd5YtAalY9vs55BAzjZi3S/MYqWUt0CkNFU3Tg4G3tlm
WIqIO3ljUqq+bnU8qmUviCHk
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:08 2026 by rpki-client