Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
File: bDjM5r4-JvXmJUacse03btd5v7A.cer (raw, json)
Hash identifier: usB5L1Bzn4RYMZCrP2ued+ytePDm1ametJBYoykjxXo=
Subject key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FBC1A6FAD3BB0F74BD13C74335F3BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:43:00 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 205315
IP: 185.222.116.0/22
IP: 2a0c:3800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:c1:a6:fa:d3:bb:0f:74:bd:13:c7:43:35:f3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:43:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:0c:a5:d3:5c:79:be:2a:2b:1d:9f:24:83:
b1:e4:48:ef:e1:55:72:19:39:d1:8d:d8:75:81:c3:
ee:f8:ff:52:1d:9e:1c:b4:4a:0c:ac:d1:c4:7c:c5:
f0:6c:f2:3b:f6:98:65:54:6c:29:de:4c:7a:ed:d7:
f5:81:c6:a3:42:56:13:09:3b:b0:ca:db:9e:cf:8f:
71:48:9d:73:71:52:3a:aa:12:65:f2:69:cd:9a:78:
6e:a5:da:87:81:84:49:9d:70:85:fa:36:08:05:79:
c5:b1:c7:49:a1:2d:11:55:0c:35:26:8a:be:0d:b1:
72:96:c0:29:70:b1:09:b6:1f:7f:fa:47:b4:01:6d:
9f:5f:c9:14:f1:d1:6a:fb:68:78:60:95:42:60:20:
ef:fc:bc:83:cd:00:41:76:62:99:7d:2c:37:55:04:
04:f1:6a:3e:ab:27:ab:a8:12:c0:d9:a4:53:80:eb:
e9:00:a6:6d:79:06:03:18:39:f6:8f:82:68:51:e1:
0d:a8:9f:f2:db:27:ee:26:07:e0:65:29:cf:cd:8a:
78:ea:69:7b:45:bf:8d:19:fa:b5:25:f6:76:3f:63:
b9:4b:11:0a:c2:3f:b0:10:95:88:05:09:bf:c0:67:
36:0e:11:12:98:ca:fe:58:b8:11:af:c0:4f:22:f3:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.116.0/22
IPv6:
2a0c:3800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205315
Signature Algorithm: sha256WithRSAEncryption
97:0a:08:01:02:24:5b:03:c8:27:68:01:e0:84:00:f9:d0:c3:
46:62:40:77:df:f6:59:c8:94:6c:8d:50:de:9a:f4:90:ba:69:
54:88:e2:e2:50:3c:20:9d:77:28:57:7d:c0:08:78:af:8e:89:
4b:e3:ae:de:4d:57:a0:e2:31:cb:19:97:6b:93:06:d2:51:7d:
cb:b3:aa:de:e0:98:f1:32:7c:90:20:c1:48:00:84:12:5a:19:
ba:a2:e5:55:49:9d:f7:17:96:4c:fc:26:88:11:59:49:10:86:
91:0e:f5:7a:f8:95:73:ef:74:1a:72:75:02:3e:a6:4e:a0:89:
d4:a1:9e:b2:a7:47:fb:67:3e:6d:1a:bb:e3:44:9b:4c:d3:21:
93:f3:31:89:4c:53:73:c9:9a:3c:f7:56:a1:cb:5b:0b:a3:0f:
06:f6:63:fc:42:b1:c9:d4:6b:0d:07:09:99:66:84:45:af:8b:
68:9d:03:e0:7c:41:18:67:c1:71:96:5c:49:82:9f:af:64:3f:
05:aa:63:04:11:9a:92:62:1a:50:f5:7d:4d:c3:ad:69:a3:16:
d4:88:2f:45:ff:68:35:c0:d8:0e:4d:6c:17:2e:2a:5e:e3:91:
39:f7:9b:11:5d:d2:1a:ab:55:bc:e9:06:b9:8d:c2:eb:a8:11:
c5:d6:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:40:38 2026 by rpki-client