Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BhJClTAYPA_O3K258VBVg5LwG4k.cer
File: BhJClTAYPA_O3K258VBVg5LwG4k.cer (raw, json)
Hash identifier: 90VZE2IGhF6H9vg1gE4M21w0gXP1D+W8IIPTc3xfX1I=
Subject key identifier: 06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198FA29E9858E0FA3E9B11E8DF3E03EB576
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 30 Aug 2025 08:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204985
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fa:29:e9:85:8e:0f:a3:e9:b1:1e:8d:f3:e0:3e:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 30 08:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0612429530183c0fcedcadb9f150558392f01b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:bb:5e:5f:83:a3:ad:eb:dd:f2:c2:1b:11:
3b:e0:54:c6:82:0a:cf:44:ab:dc:f9:24:8b:d2:ab:
72:5d:d0:1d:0a:72:9e:c6:29:bc:84:f9:6d:e8:07:
cd:e7:5b:eb:e3:77:1e:23:59:ab:37:cb:1a:36:90:
cb:f0:ed:43:8e:cb:8a:f5:93:f0:71:ea:6a:4c:96:
06:55:13:85:df:31:09:03:02:00:46:a1:c6:bc:c6:
56:37:30:23:7b:80:73:64:d5:f7:9f:26:05:2a:44:
d7:dc:07:7e:07:7a:7a:b0:cd:33:76:c8:29:f2:77:
5a:da:b1:c7:81:06:80:7a:15:43:46:68:23:85:f0:
d5:a3:0c:37:4e:d1:b2:f1:09:99:30:20:16:44:40:
8b:77:22:9e:02:c7:c7:ef:cd:54:e5:e8:e4:28:b9:
10:59:9c:e6:7d:db:58:a4:0c:26:ff:b1:81:c4:74:
06:0e:80:d7:39:9b:13:a0:88:7e:f9:db:2d:74:b0:
bb:ea:d3:38:1f:ec:a8:19:be:8b:cd:ce:82:5c:c0:
65:fb:66:1b:de:9f:d4:c6:e0:20:f9:99:34:e0:1a:
67:b2:b0:eb:9c:89:55:d9:41:0a:7c:e6:c4:89:ee:
8f:4a:46:eb:c4:a0:40:57:af:9d:da:00:36:1b:31:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:12:42:95:30:18:3C:0F:CE:DC:AD:B9:F1:50:55:83:92:F0:1B:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1c37fa-05e8-4411-a140-e3b3fcc5ec23/1/BhJClTAYPA_O3K258VBVg5LwG4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204985
Signature Algorithm: sha256WithRSAEncryption
66:9a:94:42:b0:d2:27:01:eb:bf:e7:bc:e6:c5:83:0f:60:65:
3c:45:8e:75:f5:66:9c:a5:f3:c3:07:92:15:53:d8:10:d1:c5:
29:0a:0e:14:04:42:21:92:72:39:6d:b7:3e:38:2d:e4:7e:ec:
9b:2b:00:27:fe:e6:fe:da:e7:f7:cd:f0:9b:d6:c7:ef:ae:92:
c6:e5:73:74:28:74:25:71:f6:e4:a0:d3:c4:18:b0:0f:c4:82:
ea:83:82:87:6e:0c:3d:0d:92:2a:3c:86:db:13:5e:4a:3a:36:
55:37:28:b1:88:7e:d2:25:1e:d6:a4:59:a9:13:16:99:d7:2d:
71:af:71:d4:42:09:07:e5:b4:d4:2b:bd:07:37:6e:4e:01:5a:
97:57:2c:2d:86:18:24:ab:ac:13:c3:cb:1b:91:99:db:1b:32:
6b:4b:99:d3:d0:61:9c:ae:3b:3f:00:66:d5:7a:26:d8:f7:9d:
97:7a:3d:dd:37:a4:79:4b:45:c0:bf:7f:95:9e:be:6a:ba:84:
52:6b:b4:33:b0:aa:aa:9f:ae:1c:4f:2d:a4:bd:b9:14:cb:d5:
98:5f:ac:44:aa:1b:b1:62:97:c0:29:45:2d:7f:53:a1:e9:ff:
0f:be:a9:7e:34:b1:1f:f1:74:62:30:e7:19:ae:8a:46:e6:73:
59:0f:e0:0e
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZj6KemFjg+j6bEejfPgPrV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwODMwMDg0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjEyNDI5NTMwMTgzYzBmY2VkY2FkYjlmMTUwNTU4MzkyZjAxYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ei7Xl+Do63r3fLCGxE74FTGggrP
RKvc+SSL0qtyXdAdCnKexim8hPlt6AfN51vr43ceI1mrN8saNpDL8O1DjsuK9ZPw
cepqTJYGVROF3zEJAwIARqHGvMZWNzAje4BzZNX3nyYFKkTX3Ad+B3p6sM0zdsgp
8nda2rHHgQaAehVDRmgjhfDVoww3TtGy8QmZMCAWRECLdyKeAsfH781U5ejkKLkQ
WZzmfdtYpAwm/7GBxHQGDoDXOZsToIh++dstdLC76tM4H+yoGb6Lzc6CXMBl+2Yb
3p/UxuAg+Zk04BpnsrDrnIlV2UEKfObEie6PSkbrxKBAV6+d2gA2GzGFlQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAYSQpUwGDwPztytufFQVYOS8BuJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzFjMzdm
YS0wNWU4LTQ0MTEtYTE0MC1lM2IzZmNjNWVjMjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvMWMzN2Zh
LTA1ZTgtNDQxMS1hMTQwLWUzYjNmY2M1ZWMyMy8xL0JoSkNsVEFZUEFfTzNLMjU4
VkJWZzVMd0c0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMguTANBgkqhkiG9w0BAQsFAAOCAQEAZpqUQrDSJwHr
v+e85sWDD2BlPEWOdfVmnKXzwweSFVPYENHFKQoOFARCIZJyOW23Pjgt5H7smysA
J/7m/trn983wm9bH766SxuVzdCh0JXH25KDTxBiwD8SC6oOCh24MPQ2SKjyG2xNe
Sjo2VTcosYh+0iUe1qRZqRMWmdctca9x1EIJB+W01Cu9BzduTgFal1csLYYYJKus
E8PLG5GZ2xsya0uZ09BhnK47PwBm1Xom2Pedl3o93TekeUtFwL9/lZ6+arqEUmu0
M7Cqqp+uHE8tpL25FMvVmF+sRKobsWKXwClFLX9Toen/D76pfjSxH/F0YjDnGa6K
RuZzWQ/gDg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:28:07 2025 by rpki-client