Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
File: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer (raw, json)
Hash identifier: K3du2Bcmp42US8lbAZggreRGw4JxM6LHoecXWJAqPI0=
Subject key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B775877B0234A9F2D0AB4AB2B97F6E8DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 02:17:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 210023
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:77:b0:23:4a:9f:2d:0a:b4:ab:2b:97:f6:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:5a:6b:ae:de:8d:f0:3f:a0:a3:f7:07:ab:
63:94:ba:b6:d5:27:88:e4:7b:4a:dc:7a:d2:f1:ba:
43:b2:95:3e:b9:2d:e7:66:f5:2e:5e:68:37:f9:6b:
9c:19:78:00:ad:1a:7b:bd:fa:ba:95:41:0d:91:97:
51:e4:d6:d5:07:d1:57:7d:2e:95:20:db:80:e5:7d:
a4:64:05:d2:29:95:e9:3a:42:dd:12:54:1d:a6:63:
c9:68:ec:68:ab:27:0b:a0:44:b5:37:65:96:66:60:
32:ed:ad:3d:d2:b3:d3:b4:17:b4:16:59:8f:9e:c0:
78:cc:54:25:bf:09:d3:3f:bd:76:40:f5:8d:ef:3f:
8a:b8:77:d9:8f:78:4d:f6:09:16:d1:f7:63:11:d2:
27:fe:55:51:66:01:e8:7e:bf:26:fd:2f:16:00:2a:
f5:15:fb:cc:d9:93:3b:36:7f:19:bc:2c:98:62:1d:
26:0b:e9:70:64:4a:ce:1c:0a:6f:4b:67:39:0c:63:
f5:be:a6:fe:b4:90:82:46:43:20:1b:b0:16:2e:27:
f8:72:a1:75:84:18:bf:71:24:e8:19:32:eb:97:e3:
95:d4:b9:88:e0:ee:67:46:ca:0e:62:40:24:2f:28:
9b:2e:bd:71:0b:b7:fc:94:5a:cd:46:e5:7c:53:b7:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210023
Signature Algorithm: sha256WithRSAEncryption
87:d0:59:d9:a9:c4:72:1a:5c:3b:fd:23:71:d2:0b:7a:5f:d2:
6c:b0:27:21:eb:23:bb:24:fa:23:8e:8e:8e:2b:52:ed:9f:b9:
75:df:b9:29:c1:64:16:64:89:f9:1b:19:69:35:ff:13:1b:ff:
29:5c:09:a6:19:ef:0e:24:68:60:34:77:87:09:80:be:20:b2:
3e:aa:46:89:1d:52:46:4f:f0:70:be:a7:79:5e:e0:f6:b1:aa:
8a:7d:0a:22:80:72:14:85:29:8c:ea:ed:81:f5:16:1e:68:5c:
9b:5c:f5:4c:46:8e:bb:a6:8e:79:64:f1:26:e7:6a:ba:ba:e4:
4a:d5:49:71:c0:5f:f3:86:8a:a9:06:78:81:de:24:87:07:6a:
40:12:a8:e7:c3:8f:33:13:d9:54:b6:86:cf:26:e1:28:9d:f3:
e1:0c:1b:8d:ae:cc:ad:52:66:b6:3d:a0:f3:3e:3b:c8:de:85:
d2:10:cc:d2:f7:93:cf:ae:66:53:5d:c3:7f:06:c1:73:04:5c:
b7:50:79:d7:7a:f6:fc:47:75:cf:f1:13:08:35:fe:92:08:13:
c6:b6:9a:a2:98:a2:65:f6:b7:c7:43:f9:de:ef:80:50:fc:11:
f4:bb:02:c3:69:10:7a:39:e4:9d:79:5d:52:34:58:2e:e2:66:
62:7e:f5:90
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZt3WHewI0qfLQq0qyuX9ujeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDM0N2ZhNTExMDlkZGVjZDZjZDU5NGM2N2JiMDJiMmQ1ZTcyMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMNaa67ejfA/oKP3B6tjlLq21SeI
5HtK3HrS8bpDspU+uS3nZvUuXmg3+WucGXgArRp7vfq6lUENkZdR5NbVB9FXfS6V
INuA5X2kZAXSKZXpOkLdElQdpmPJaOxoqycLoES1N2WWZmAy7a090rPTtBe0FlmP
nsB4zFQlvwnTP712QPWN7z+KuHfZj3hN9gkW0fdjEdIn/lVRZgHofr8m/S8WACr1
FfvM2ZM7Nn8ZvCyYYh0mC+lwZErOHApvS2c5DGP1vqb+tJCCRkMgG7AWLif4cqF1
hBi/cSToGTLrl+OV1LmI4O5nRsoOYkAkLyibLr1xC7f8lFrNRuV8U7c5vwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFAQ0f6URCd3s1s1ZTGe7ArLV5yEOMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzkxNjE4
Ni01NTcyLTQwZmMtOWUyZi03N2ViNTNlODJjNWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvOTE2MTg2
LTU1NzItNDBmYy05ZTJmLTc3ZWI1M2U4MmM1ZS8xL0JEUl9wUkVKM2V6V3pWbE1a
N3NDc3RYbklRNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM0ZzANBgkqhkiG9w0BAQsFAAOCAQEAh9BZ2anEchpc
O/0jcdILel/SbLAnIesjuyT6I46OjitS7Z+5dd+5KcFkFmSJ+RsZaTX/Exv/KVwJ
phnvDiRoYDR3hwmAviCyPqpGiR1SRk/wcL6neV7g9rGqin0KIoByFIUpjOrtgfUW
Hmhcm1z1TEaOu6aOeWTxJudqurrkStVJccBf84aKqQZ4gd4khwdqQBKo58OPMxPZ
VLaGzybhKJ3z4Qwbja7MrVJmtj2g8z47yN6F0hDM0veTz65mU13DfwbBcwRct1B5
13r2/Ed1z/ETCDX+kggTxraaopiiZfa3x0P53u+AUPwR9LsCw2kQejnknXldUjRY
LuJmYn71kA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:47 2026 by rpki-client