Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
File: B2OUhFMlCEu573jU9xf8S1Rfp-0.cer (raw, json)
Hash identifier: LKBwTuf4g7Ux48poL6x/1kBmQx2/UIk7A8qxMkTcJ8E=
Subject key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7FF20A7E3DE8786623419B42203B6E18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 18:22:07 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 52199
IP: 45.149.54.0/24
IP: 2a0b:18c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:0a:7e:3d:e8:78:66:23:41:9b:42:20:3b:6e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 18:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:50:e8:e0:24:60:8c:9c:8b:81:14:ee:bd:6d:
19:77:96:59:58:34:9c:18:39:0a:6e:10:97:57:ae:
03:99:3f:67:d0:49:90:c5:b1:f5:ff:d5:6d:c6:a9:
5a:8e:cd:46:eb:49:1c:9b:bf:18:83:c5:74:a3:49:
45:cf:22:b1:7d:02:62:d0:e5:8f:ce:1d:30:47:46:
b8:e9:ea:ea:af:27:56:96:f8:4f:b1:2f:00:70:c9:
1a:7d:69:49:2b:14:ca:bb:fa:74:6c:3a:a2:6f:86:
7d:d7:c0:86:30:37:8b:1e:2e:c7:66:90:ff:31:9b:
38:ec:f8:11:b7:70:68:c8:09:71:12:c6:1b:76:7d:
af:18:69:3e:7e:d6:cb:10:81:24:2b:8d:2b:80:94:
db:75:86:ca:54:c3:37:49:83:a2:9d:45:eb:53:50:
2c:89:57:64:5e:da:cf:f4:3a:c0:f8:66:9d:94:88:
17:fa:b5:b4:1f:72:ea:a7:86:79:a2:56:c5:7b:9e:
7e:2b:a6:2d:68:bd:cd:17:17:3b:7d:07:8b:9d:0c:
84:98:bd:e3:48:0a:b4:9e:60:a0:68:91:a2:bf:af:
db:fb:4c:2c:0a:78:98:9e:65:01:70:e5:f9:4a:8a:
72:ef:d4:8c:78:bf:77:1f:07:c1:c7:58:11:a1:f9:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.54.0/24
IPv6:
2a0b:18c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52199
Signature Algorithm: sha256WithRSAEncryption
48:62:1e:4b:0c:7a:a3:f3:82:82:ff:3f:50:82:34:55:80:eb:
92:a7:03:9c:1e:6d:b7:01:15:dd:87:17:b8:87:ce:be:6f:a0:
77:36:f0:fc:c5:83:d0:0e:33:66:70:29:58:85:b2:33:a1:4d:
8d:79:fe:fa:14:c4:80:e8:44:f3:c9:28:4a:5a:a4:22:a0:d7:
1b:7d:ad:dc:b1:32:d4:4b:19:c8:d5:af:fd:6a:97:30:a5:56:
ad:f7:7d:29:20:e9:2d:a6:af:c8:94:3b:0b:97:b8:3f:f6:aa:
20:e6:50:da:f3:8c:15:45:8b:85:b6:ad:26:ab:de:2e:28:25:
96:99:f8:03:99:4f:b4:37:dd:03:8b:90:64:32:28:69:32:f9:
6c:ef:12:90:85:8f:6b:c3:c0:65:63:67:eb:99:0a:77:bd:47:
ed:f8:0d:a0:8a:72:0f:21:88:95:f6:91:78:cc:24:e4:22:02:
73:21:28:7a:28:59:e0:0c:e1:b1:60:6e:27:62:83:5b:7f:96:
a5:28:df:4a:bb:d0:5f:da:c7:68:c3:a5:f3:4a:61:03:b6:ae:
90:68:a9:cb:5c:d9:8e:69:4b:3f:49:2c:ea:37:cd:97:02:66:
ac:4e:a6:d3:3b:93:d2:cd:71:06:b5:a3:82:5a:4a:2c:8a:9f:
a9:29:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:23:58 2026 by rpki-client