Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json)
Hash identifier: nUHI3C15uiye8l94H0hUZPb2SJKe+VvdbjBYUwzAW84=
Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D683EBC8FD1BE66062F744203B7608BC8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Apr 2026 14:00:35 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 6206
AS: 62349
IP: 31.171.128.0/21
IP: 37.46.192.0/21
IP: 45.154.4.0/22
IP: 69.161.192.0/21
IP: 91.199.50.0/24
IP: 91.230.225.0/24
IP: 94.185.80.0/21
IP: 94.228.208.0/20
IP: 107.182.112.0/20
IP: 109.235.48.0/21
IP: 185.68.196.0/22
IP: 185.153.188.0/22
IP: 185.196.92.0/22
IP: 194.110.67.0/24
IP: 195.191.144.0/23
IP: 2a00:dd0::/32
IP: 2a07:6580::/29
IP: 2a07:8840::/29
IP: 2a0a:6b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:3e:bc:8f:d1:be:66:06:2f:74:42:03:b7:60:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 7 14:00:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a:
59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36:
22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0:
93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a:
67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43:
8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d:
8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8:
e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68:
38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2:
e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40:
cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a:
64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4:
53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84:
40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46:
a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7:
79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f:
b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.128.0/21
37.46.192.0/21
45.154.4.0/22
69.161.192.0/21
91.199.50.0/24
91.230.225.0/24
94.185.80.0/21
94.228.208.0/20
107.182.112.0/20
109.235.48.0/21
185.68.196.0/22
185.153.188.0/22
185.196.92.0/22
194.110.67.0/24
195.191.144.0/23
IPv6:
2a00:dd0::/32
2a07:6580::/29
2a07:8840::/29
2a0a:6b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6206
62349
Signature Algorithm: sha256WithRSAEncryption
1f:d1:72:a7:23:43:02:09:75:99:34:38:82:f9:1a:27:a3:d8:
e8:d6:28:0e:ec:69:45:25:3e:1b:22:2e:de:1b:a5:e6:9e:85:
e2:08:25:2d:96:b5:ae:0f:cc:4c:7f:62:f8:b2:84:60:73:31:
b7:8e:6a:53:a8:d5:40:00:17:b1:1e:a8:bc:e7:f8:1b:82:14:
10:c8:95:2b:1c:b6:0a:a5:1d:08:a7:95:28:8c:0e:cd:cc:7c:
fb:15:39:a6:52:9f:2f:89:3c:e9:27:ac:ea:bb:af:20:35:1b:
90:9a:59:70:14:5c:66:69:fa:32:22:2e:7f:f6:39:33:50:b8:
44:66:b9:6b:dd:30:44:dd:d5:51:39:76:db:bd:a0:8a:b5:5a:
0c:2e:3f:32:3f:fc:7e:81:36:ed:78:ec:48:c3:0a:84:9b:f8:
ea:19:48:43:f2:b4:f9:7e:0a:45:dc:38:da:60:8d:43:5a:a4:
fa:a8:91:2a:c4:e5:ef:74:9f:d7:2f:e8:d5:ea:cd:91:90:b9:
cf:15:2f:ed:73:2a:01:42:40:39:8c:75:2e:84:d8:b9:c3:1a:
4e:fb:65:62:5b:68:db:09:27:3b:75:d3:74:8b:0c:4d:00:71:
c9:ac:ce:56:e8:11:0f:4c:3e:ef:1b:e1:0f:7b:7c:0f:e0:4d:
b3:62:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:19:11 2026 by rpki-client