Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bCPVlXu1Sx5tXra0GIjM7EX5nkk.cer
File: bCPVlXu1Sx5tXra0GIjM7EX5nkk.cer (raw, json)
Hash identifier: 29nz7cAAU8zho3GV93PXSYYa/Eb2Q8U7COd7ggSx2f8=
Subject key identifier: 6C:23:D5:95:7B:B5:4B:1E:6D:5E:B6:B4:18:88:CC:EC:45:F9:9E:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FADF35CA8C859A391559B88094F950
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/bCPVlXu1Sx5tXra0GIjM7EX5nkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:02 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 204816
IP: 217.20.253.0/24
IP: 2a12:ffc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:df:35:ca:8c:85:9a:39:15:59:b8:80:94:f9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c23d5957bb54b1e6d5eb6b41888ccec45f99e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:d3:bb:2a:7d:f5:d8:b6:94:0c:bc:6e:15:
36:33:62:8c:bd:3d:c3:a8:d4:a1:42:36:c0:c9:41:
99:48:23:ff:79:25:8b:24:a3:2e:b8:39:7e:24:61:
db:0a:c9:a6:14:6a:c6:73:2e:17:78:99:9c:9a:98:
12:24:b2:53:9d:2d:93:9a:0c:85:52:04:91:e3:a5:
b9:08:8f:61:19:ef:bd:16:67:3e:6c:1a:eb:69:59:
a8:8d:14:f9:ae:cd:66:3c:8d:4c:14:3f:27:b2:42:
c8:b3:d7:c6:05:0b:4a:f5:9a:e1:08:42:cf:cb:75:
0a:f1:bf:a5:c5:8f:2b:01:e4:72:4d:91:66:38:a1:
91:b6:eb:37:0b:82:bf:b4:51:ff:ad:3f:bd:ff:6a:
a8:46:42:4e:96:83:87:7c:c0:14:79:28:80:a6:55:
f9:79:3c:a6:2d:ac:67:13:9c:51:7d:f8:67:53:43:
ba:2c:d2:58:69:7d:4c:68:4e:d6:21:4c:f9:3a:87:
fa:e4:f4:28:15:85:b7:d4:0d:96:cb:e3:7e:fb:c6:
54:26:c4:1c:98:29:20:dd:d4:ec:ff:d5:aa:9e:ae:
cd:8e:86:ae:54:0e:eb:f8:bd:a2:34:f3:a4:ab:41:
ad:49:9c:f3:15:5c:06:bf:a7:c6:40:af:76:ee:e1:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:D5:95:7B:B5:4B:1E:6D:5E:B6:B4:18:88:CC:EC:45:F9:9E:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/bCPVlXu1Sx5tXra0GIjM7EX5nkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.253.0/24
IPv6:
2a12:ffc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204816
Signature Algorithm: sha256WithRSAEncryption
43:f2:b9:cc:84:d2:9e:7e:dd:b0:f0:4f:7a:87:5c:c8:4c:d6:
3b:5a:b4:17:f7:11:d8:fd:47:ab:39:ca:21:81:ed:ed:10:a3:
c1:bd:ef:ec:77:e9:56:8a:68:d9:53:75:33:6b:d2:cf:d8:a0:
c0:32:de:87:ef:08:59:66:77:c4:de:81:01:2d:11:14:59:9c:
02:29:05:4c:d3:9c:78:69:1d:57:77:19:2b:6b:cb:82:99:03:
ce:1c:ae:d1:a1:56:de:21:e1:26:98:09:15:fb:76:34:07:0a:
d8:dc:ca:46:d4:6c:db:19:74:f2:a3:ed:8d:5e:c9:7f:85:31:
1b:25:8a:d6:77:16:04:3f:8b:cb:f9:91:fb:a5:30:db:81:88:
7b:c0:97:73:8c:9d:df:cc:40:e5:32:3a:9d:25:36:6e:88:d7:
e8:54:5f:ee:94:96:4f:07:67:72:78:ed:60:63:f7:95:16:3b:
20:ce:aa:06:c0:55:06:61:b6:bc:4c:03:72:3e:c1:33:81:f1:
3b:b7:02:51:74:65:4b:81:19:80:e9:f4:b8:e1:cb:fd:2c:84:
78:50:8c:d9:33:01:a6:2a:75:3f:30:eb:6f:bf:34:fb:b3:54:
59:89:4f:6d:fb:60:ef:f2:1c:bb:f0:ca:62:c6:e0:3d:e3:f5:
59:23:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:14:55 2026 by rpki-client