Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/UtIFkjNg-Ly7PG8regneiX4hEuk.cer
File: UtIFkjNg-Ly7PG8regneiX4hEuk.cer (raw, json)
Hash identifier: YS6tNgIxi8vp7KGVyVzz6RO7auTLrYWOwsJdko8Ldv0=
Subject key identifier: 52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A048024875C120E3243F4CF535C24CDC27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 28 Aug 2026 10:55:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 43888
IP: 195.210.24.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:02:48:75:c1:20:e3:24:3f:4c:f5:35:c2:4c:dc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 28 10:55:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52d205923360f8bcbb3c6f2b7a09de897e2112e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:ae:88:a6:7b:ef:bc:fa:5f:9f:a9:1c:26:
ed:48:57:3f:e7:8e:e0:01:2c:3e:5a:0b:3f:e1:aa:
f3:c5:6a:61:81:52:21:e4:f6:ee:e8:cd:51:df:47:
9f:41:a7:84:27:1a:b9:58:aa:be:11:52:9b:8d:81:
ba:10:30:2c:93:ee:e8:03:0d:41:74:2d:5a:04:9f:
1c:eb:af:6c:00:c7:46:42:4e:b1:5d:43:68:08:f1:
db:c1:d7:b4:f9:c3:dc:5f:37:d9:e1:79:6c:61:2e:
f5:24:d1:ce:ef:0e:0c:3e:33:f5:44:6d:1c:46:b1:
f8:8f:ae:4c:2b:07:03:86:6a:ab:71:1c:34:e4:23:
24:f3:b2:c2:ce:b3:78:9b:cd:27:43:60:ad:03:8f:
27:23:16:f3:4a:e0:51:45:47:d8:ea:43:6c:78:88:
56:63:19:32:c6:d4:3d:ed:31:5f:9e:1d:51:18:85:
b2:9e:43:0e:33:f3:28:75:51:4c:48:f4:d0:d2:c0:
4f:9e:03:96:d7:f1:51:f1:53:8e:35:26:8f:fa:90:
41:07:3d:61:fe:a5:8f:13:0c:89:3d:62:58:f0:d5:
21:8e:d1:90:a6:d0:9e:a7:1c:72:7f:24:fa:b0:2d:
56:3f:f0:4b:a9:b3:bd:22:d8:a2:a9:92:1a:4a:85:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:05:92:33:60:F8:BC:BB:3C:6F:2B:7A:09:DE:89:7E:21:12:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4d707e-8f0e-4514-9d48-3a0b91a0bee5/1/UtIFkjNg-Ly7PG8regneiX4hEuk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.24.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43888
Signature Algorithm: sha256WithRSAEncryption
85:a4:2e:92:5c:f9:e5:24:55:20:9d:c8:4f:1c:5a:f6:c2:00:
36:86:fa:f8:12:32:c2:d7:51:ac:a7:9c:7a:3f:0c:c5:e8:68:
96:4a:8f:11:91:00:cb:9b:51:d8:d7:a9:42:29:58:5f:82:e6:
b3:83:d5:07:70:c6:6a:55:07:1a:6b:a5:35:1b:29:5b:a8:da:
94:2d:a0:14:b9:7d:22:3f:2f:3c:67:bc:80:66:47:32:16:48:
31:36:f3:3b:6f:bb:47:f2:c3:41:7f:7c:c1:fc:45:95:26:f6:
c9:db:56:64:26:a8:6e:3a:65:be:31:53:d7:46:5f:ac:16:c6:
25:68:12:46:56:6b:08:ab:5a:cb:ae:bc:2a:35:75:96:33:f6:
93:2e:d5:6f:fc:14:0c:49:bb:e2:25:4d:36:16:7b:ea:11:47:
71:c5:9b:96:ba:22:94:e8:a7:64:dc:bb:d6:e9:4f:82:76:57:
a1:b1:7d:de:ae:61:7c:4c:02:75:30:e9:79:16:c1:53:1c:a2:
ab:dd:9b:3d:ca:8c:e2:94:09:35:b0:42:10:55:dd:14:07:a4:
2a:7b:19:ac:43:c4:f0:b6:8a:00:a9:1f:39:7c:b6:e0:94:a7:
4e:b1:c5:97:6b:be:fc:3d:b2:30:6d:e6:d9:75:d1:b7:d8:15:
35:55:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:19 2026 by rpki-client