Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
File: _-BD2zfqJckthc5lp20aTlE2JKo.cer (raw, json)
Hash identifier: DmyrKF+oVlrJFgMGLuZ+i1zNJlWlf5CfixkQauhGYxc=
Subject key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA094BD3941C7343C42199B6C2ED37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56638
IP: 192.162.216.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:09:4b:d3:94:1c:73:43:c4:21:99:b6:c2:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:01:c9:50:6c:f4:45:b5:2d:9c:5e:79:83:
9b:c1:b4:bc:b8:7d:9c:60:c3:72:ac:8b:fd:fe:2d:
95:1b:e7:41:59:df:4c:db:c0:08:ba:dc:15:ad:d9:
fd:3c:5c:3f:06:4c:f0:b2:ee:6a:3e:57:e7:50:ca:
3e:51:e7:e0:50:fb:91:44:af:f4:0b:7c:16:03:4b:
50:22:2e:e4:ee:85:2c:e5:a5:35:1c:aa:dc:23:4e:
d9:12:fd:57:e8:23:e4:3c:94:18:d6:3e:7c:39:59:
4e:66:0b:cc:ab:19:3d:64:61:e3:3b:e5:c2:04:f2:
76:bf:bd:b4:4f:b3:0d:12:af:17:c0:eb:56:e3:a4:
ce:89:cd:46:ac:86:9b:bd:bd:23:e0:f2:63:9a:02:
8f:53:1a:86:90:aa:6b:ea:5e:99:02:68:71:03:18:
8f:4d:79:83:92:3d:fd:2f:01:99:d3:f4:6a:3f:ee:
79:4b:98:41:27:a8:0c:ec:9a:06:95:46:ca:75:33:
e4:10:df:26:7a:36:47:68:b5:e1:14:e6:0e:82:19:
77:cf:16:e8:a4:86:34:18:ea:5f:0a:d8:43:71:c6:
43:b3:16:22:ce:14:42:82:db:91:2b:bb:a7:77:54:
3a:59:9f:80:72:51:a8:33:bd:96:d1:a6:8d:d3:70:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.216.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56638
Signature Algorithm: sha256WithRSAEncryption
7d:81:40:f7:0e:6a:bb:3d:71:a0:41:19:b2:a3:50:c7:33:8f:
55:7d:55:f7:4b:3d:39:52:f8:67:12:64:f0:83:e2:76:96:52:
d8:09:a4:72:a3:9f:08:7f:a4:a9:c4:b1:dc:84:5b:6a:f6:92:
76:53:c7:50:be:55:7f:9d:1e:d0:87:36:a8:57:fa:ee:cb:eb:
6f:ad:6d:49:15:34:aa:2f:7c:9c:ff:af:43:77:cb:c6:11:b3:
15:a3:83:c5:c1:b3:f0:29:55:e9:f4:9c:29:d4:cf:d6:50:7a:
ca:af:47:d2:b2:2e:bd:27:d6:23:3e:94:22:a4:67:1d:af:9a:
70:1b:af:11:93:80:93:c0:d0:20:76:1b:1c:2d:5f:7d:3b:0f:
8b:2d:44:39:89:e7:d7:61:3b:f5:0d:d1:92:cd:94:42:25:13:
ae:22:5e:7d:72:1b:0f:e2:47:0c:d3:c1:ba:ce:d4:c1:85:2b:
32:82:65:90:75:ee:f4:7a:b2:04:2f:f6:38:7f:48:f8:dc:d6:
0d:8b:ad:f3:37:35:f8:af:5f:d3:a1:19:f4:d7:52:55:82:5d:
97:ee:e5:9e:82:4e:85:3c:a4:76:24:c6:fe:a4:06:fc:3a:df:
8a:6c:b7:99:a9:80:ed:fe:8d:02:65:ce:c9:cf:0e:70:26:96:
62:4f:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:02:49 2026 by rpki-client