Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/unmqGjeYycrvsvZ2ozi0Elv62f8.cer
File: unmqGjeYycrvsvZ2ozi0Elv62f8.cer (raw, json)
Hash identifier: H42Ltnpj4HzdHIPu7ym8DfBaPodMoZYhCUqiPquGTxk=
Subject key identifier: BA:79:AA:1A:37:98:C9:CA:EF:B2:F6:76:A3:38:B4:12:5B:FA:D9:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D2E1DF052019C5259696AB85F3C4A1F4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 07:06:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 195.66.130.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:1d:f0:52:01:9c:52:59:69:6a:b8:5f:3c:4a:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 07:06:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba79aa1a3798c9caefb2f676a338b4125bfad9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:a0:4e:94:72:bc:2f:6b:1c:d3:16:91:14:
e9:4c:62:c0:75:d0:58:ee:ba:51:da:56:1b:0b:ae:
ec:5a:0c:6e:85:82:8a:71:27:1b:20:f7:d7:3f:36:
72:12:ca:f6:ee:4a:ff:98:cc:15:ec:2e:ce:0e:f2:
fe:ec:91:f4:5a:cd:ab:ee:dc:a1:31:b6:e3:2c:ce:
75:26:71:b6:7c:04:e4:30:38:c8:e3:d3:3a:f3:ff:
31:ba:dc:07:a4:65:70:75:77:7e:bd:0f:ed:e8:b2:
8d:5f:db:0e:5a:46:2b:72:de:4a:1f:d7:b0:2f:ea:
0d:77:df:8b:e2:74:6f:1c:92:0a:0e:c2:6f:d3:09:
a2:b6:57:b4:e6:f6:9d:9e:c6:89:07:44:f4:f2:0a:
69:51:40:97:d3:53:04:f8:bf:7a:d6:db:70:88:5d:
f6:95:33:f9:12:4d:bf:7b:3b:3d:47:da:05:24:7a:
3a:c0:52:65:6e:4c:d5:b5:f4:fc:a2:cd:da:c5:c7:
8c:8c:1d:3e:fb:11:91:2b:2a:83:8d:67:1e:17:83:
95:7c:1e:ee:fe:13:5e:63:7f:ff:90:68:04:f6:98:
7a:3d:99:00:c1:b7:e5:18:b3:6a:64:ad:f2:5a:d7:
7e:b4:b2:7c:d7:92:fd:a9:82:4e:bd:ef:e1:af:3e:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:79:AA:1A:37:98:C9:CA:EF:B2:F6:76:A3:38:B4:12:5B:FA:D9:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/12f13c-f518-422e-bf61-816c860c2a8f/1/unmqGjeYycrvsvZ2ozi0Elv62f8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.130.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:ea:ed:8c:a6:13:9a:01:ff:65:0c:ed:87:14:09:4b:bc:77:
23:8d:e1:a2:f9:11:85:bc:f9:e2:c6:db:a2:a3:45:fc:8c:de:
a5:b0:ad:00:4e:f7:9b:1c:7a:33:a2:0c:58:82:c0:e7:ae:8a:
e7:c6:df:2a:36:2d:65:8b:97:a0:5e:9a:76:c5:72:5f:19:8e:
64:4e:74:c1:00:94:2c:8a:47:cf:fc:78:13:68:9d:e7:07:b5:
f1:03:7d:aa:16:fe:e5:56:4a:aa:a2:b5:07:cc:02:91:09:24:
a4:91:67:5e:ee:99:5d:38:8c:00:ef:b4:10:5b:06:d7:eb:6d:
a9:68:97:dd:f1:f2:4e:f1:05:df:17:d8:c4:4a:6d:1e:27:78:
89:d5:ab:2a:6c:4f:1e:c5:c5:fa:4e:c4:9d:49:c9:96:81:f5:
f4:c4:da:a0:ae:9e:0f:26:6e:2f:17:ec:37:5c:14:3f:31:67:
c6:c0:2d:c4:95:66:d6:b3:23:ea:1a:f2:19:21:39:69:53:ab:
08:1c:88:e8:ee:06:1b:98:58:97:94:19:bb:56:5a:b1:b2:11:
ba:89:b1:7b:4e:60:19:13:33:e9:00:7f:41:33:fc:23:09:98:
2f:20:05:3d:f9:ff:00:22:be:31:ea:fd:cb:d0:db:98:80:27:
82:01:42:07
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZ0uHfBSAZxSWWlquF88Sh9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMzI3MDcwNjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTc5YWExYTM3OThjOWNhZWZiMmY2NzZhMzM4YjQxMjViZmFkOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUKgTpRyvC9rHNMWkRTpTGLAddBY
7rpR2lYbC67sWgxuhYKKcScbIPfXPzZyEsr27kr/mMwV7C7ODvL+7JH0Ws2r7tyh
MbbjLM51JnG2fATkMDjI49M68/8xutwHpGVwdXd+vQ/t6LKNX9sOWkYrct5KH9ew
L+oNd9+L4nRvHJIKDsJv0wmitle05vadnsaJB0T08gppUUCX01ME+L961ttwiF32
lTP5Ek2/ezs9R9oFJHo6wFJlbkzVtfT8os3axceMjB0++xGRKyqDjWceF4OVfB7u
/hNeY3//kGgE9ph6PZkAwbflGLNqZK3yWtd+tLJ815L9qYJOve/hrz6GqwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLp5qho3mMnK77L2dqM4tBJb+tn/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzEyZjEz
Yy1mNTE4LTQyMmUtYmY2MS04MTZjODYwYzJhOGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMTJmMTNj
LWY1MTgtNDIyZS1iZjYxLTgxNmM4NjBjMmE4Zi8xL3VubXFHamVZeWNydnN2WjJv
emkwRWx2NjJmOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw0KCMA0GCSqGSIb3DQEBCwUAA4IBAQCd6u2M
phOaAf9lDO2HFAlLvHcjjeGi+RGFvPnixtuio0X8jN6lsK0ATvebHHozogxYgsDn
rornxt8qNi1li5egXpp2xXJfGY5kTnTBAJQsikfP/HgTaJ3nB7XxA32qFv7lVkqq
orUHzAKRCSSkkWde7pldOIwA77QQWwbX622paJfd8fJO8QXfF9jESm0eJ3iJ1asq
bE8excX6TsSdScmWgfX0xNqgrp4PJm4vF+w3XBQ/MWfGwC3ElWbWsyPqGvIZITlp
U6sIHIjo7gYbmFiXlBm7VlqxshG6ibF7TmAZEzPpAH9BM/wjCZgvIAU9+f8AIr4x
6v3L0NuYgCeCAUIH
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:08:51 2026 by rpki-client