Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer (raw, json)
Hash identifier: Vi2XhGRyL8dlG8+dn9G/jDGRuouZwX6EYJnoMuY4ts0=
Subject key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7E3888FE6C9599546684A9C621D81CDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 10:19:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 57458
IP: 130.255.176.0/21
IP: 2a03:c080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:88:fe:6c:95:99:54:66:84:a9:c6:21:d8:1c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:19:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:6d:2a:5c:75:b3:eb:09:82:c0:52:bb:b6:
0b:f0:86:d5:ad:13:b5:4c:7e:dc:cf:bb:bd:29:a1:
33:10:83:87:0f:de:41:eb:e5:b2:cb:2c:49:c6:fa:
eb:1d:c7:07:c6:ed:59:a9:14:6b:7d:24:b3:a4:5a:
46:47:e0:a7:64:e6:19:b7:5c:fe:19:3c:8d:bb:93:
ae:e0:37:20:57:a7:ab:60:5e:3c:db:ee:56:ce:5a:
ed:dc:12:10:13:f8:79:11:8f:17:26:06:64:30:95:
10:9d:56:13:14:5c:18:f5:3d:b8:5d:2d:58:1d:c2:
12:b0:11:11:e9:74:c5:60:a5:13:f9:9b:bd:67:23:
2d:33:8a:50:c1:7f:29:08:0e:82:ac:7a:b3:ad:4c:
df:c4:93:0f:6b:17:7d:18:b3:80:00:66:d4:13:61:
b1:e1:84:d8:9b:39:69:d4:0a:b7:b1:54:ec:5d:87:
97:80:49:53:4e:3d:d4:f4:77:84:ad:ac:b0:37:46:
35:09:24:e0:59:d0:3c:e2:e7:7b:cc:0b:37:d0:6c:
53:64:64:21:1a:14:03:fc:66:0b:03:43:68:50:2a:
28:61:e6:f0:b1:58:5a:5c:b7:05:42:e5:45:b2:2e:
db:d9:d9:a3:27:24:cf:9b:98:bd:b1:6b:14:0d:16:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.176.0/21
IPv6:
2a03:c080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57458
Signature Algorithm: sha256WithRSAEncryption
a6:11:f7:2f:55:bf:ed:46:f3:ca:5f:42:08:d7:ba:6d:08:77:
70:98:2e:67:c4:9a:bb:77:f8:95:6e:91:f1:6b:7f:45:ef:50:
b3:b1:6a:8d:87:33:53:78:1f:3a:8a:9a:a0:b3:a4:28:eb:53:
82:c7:ea:59:99:69:f5:c4:ac:80:96:eb:14:7f:f7:da:9e:7a:
64:a4:9a:56:d1:32:66:23:46:d4:99:be:92:78:c6:63:89:98:
4b:64:c0:74:06:ee:09:e0:66:d9:2e:be:ba:54:24:f7:97:9b:
76:80:fc:74:43:df:df:bc:43:20:eb:b8:81:f7:e1:6e:ed:59:
90:0f:7b:4c:ec:5a:e2:d2:d6:80:32:c3:27:72:d0:cb:28:f2:
bc:8c:20:e2:d0:95:7b:70:57:5d:df:fd:f4:5c:f7:e0:0f:85:
0e:f9:cf:86:2d:37:72:74:b9:ba:2f:5b:da:40:ec:4c:be:63:
21:26:b4:07:20:74:61:5d:12:ec:fd:52:fe:b1:04:a9:75:e2:
78:61:ff:46:43:5b:1a:8a:ea:ff:6a:67:22:a4:80:b6:68:7f:
c9:1b:97:30:b4:08:b4:7c:8e:96:1b:3a:a2:7a:47:4c:72:4b:
59:63:0a:29:c9:d5:42:71:63:2d:43:4b:50:6b:c4:af:67:33:
4d:1a:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:31:46 2026 by rpki-client