Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
File:                     biCb10rb00nQEq8KpjDR_oZpxy8.cer (raw, json)
Hash identifier:          2QrJLhqP0Uw6hbP8wIlTYrRDjfNV1+evOJ5JbE8qYXY=
Subject key identifier:   6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019F663B04E0E8DB2AB6A5613250C6A5A1FE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 15 Jul 2026 14:42:51 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    IP: 195.234.180.0/24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:66:3b:04:e0:e8:db:2a:b6:a5:61:32:50:c6:a5:a1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 15 14:42:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:34:4d:f6:47:84:5c:d4:af:bc:a7:83:77:
                    3d:79:82:02:73:ca:06:dd:de:2a:8f:a1:a7:c5:cb:
                    fb:2e:cf:55:26:17:79:ad:e1:11:78:f8:da:3e:5b:
                    c6:f1:eb:88:54:0a:51:7a:ed:cd:ca:6d:28:00:3f:
                    e6:2c:78:12:49:00:6d:d9:c0:de:bf:b7:1f:98:ba:
                    29:c1:34:b9:41:b1:24:c2:e4:9d:29:af:5f:d4:22:
                    12:11:38:ff:52:bb:4f:b5:b7:e4:88:7a:9e:a3:a6:
                    a9:87:05:00:4c:4a:7c:ba:08:b5:1b:4a:35:f1:f2:
                    d6:b5:91:22:75:02:a5:a4:24:d0:c4:30:bd:2e:33:
                    bd:bd:a1:db:ce:6c:2d:fb:f0:e2:08:9d:c0:65:64:
                    a3:93:03:42:ef:24:a3:f2:df:7f:14:14:14:4a:b9:
                    e8:c0:2e:dc:94:e4:46:75:1b:34:3f:d8:9a:7e:3d:
                    07:a0:b3:31:37:fd:53:f4:8e:b4:c0:9f:a4:0a:8f:
                    a9:96:76:b8:12:e1:e7:ce:cb:03:bf:b9:b9:8f:7d:
                    fe:ac:40:c4:d7:30:4b:c1:03:c4:79:f1:b2:e0:ec:
                    fb:05:2a:0c:95:01:5b:f4:12:2e:87:87:87:79:40:
                    b6:aa:ab:86:b0:b7:34:31:fe:bd:f2:82:9f:9c:d4:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:e3:04:81:3d:01:b5:b2:fa:f5:c9:af:90:c8:38:f3:20:
         f9:56:d0:f2:93:a6:6c:0f:87:27:7c:a3:65:c1:23:56:f9:ce:
         c2:d4:8f:ef:e1:53:71:12:82:db:90:e7:6f:1b:ed:11:55:f3:
         2d:5f:57:5f:3c:3a:3c:38:91:cd:53:7f:44:c4:44:2a:79:ff:
         d9:c4:ed:a5:e8:3b:70:aa:57:5b:b9:61:5a:99:aa:53:7b:e0:
         1e:fd:b8:0a:2f:d1:fa:c9:95:36:40:c6:e2:07:f8:dd:60:74:
         cb:0f:63:51:db:34:77:b3:a4:1c:a9:83:ab:20:27:76:51:9f:
         f3:94:dd:5a:2c:33:d3:4a:90:d6:2e:c0:e3:2e:6f:63:8f:3b:
         f9:57:99:36:3b:56:37:8e:31:27:3f:43:dc:50:34:b5:b3:38:
         12:33:06:e9:0b:5a:ad:c2:cc:82:df:f1:db:2d:9c:3c:0e:e7:
         83:1e:1e:95:29:7d:27:45:72:c6:51:0b:0e:a6:95:b3:44:9f:
         7a:69:5f:af:7b:c7:ad:b2:61:1d:39:5d:35:ce:f5:0a:96:d0:
         9e:23:c8:28:0a:62:93:80:27:2b:e1:c2:a0:3f:cb:21:33:3c:
         0a:e3:ba:c3:96:07:81:c2:00:26:4f:f6:36:f4:c4:d6:6f:74:
         93:05:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:02 2026 by rpki-client