Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer (raw, json)
Hash identifier: mv0OEHixRBWG5AaPIam7MlgGhQxQKRdJ/aDdKtRe1AM=
Subject key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ED289F90801D6509AE1B180DB4D055
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:19:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50392
IP: 91.237.244.0/22
IP: 176.121.13.0/24
IP: 176.121.15.0/24
IP: 193.106.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:28:9f:90:80:1d:65:09:ae:1b:18:0d:b4:d0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04747b565844e3e2fc712fab5be85924aac58643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:ab:6d:ff:26:5c:d7:2d:2f:d6:25:d2:ca:
60:6d:be:35:8b:d2:09:67:ac:fb:c0:a7:2e:59:97:
48:26:21:79:17:d7:2e:15:99:3f:97:9b:13:22:4b:
74:fb:84:f1:58:f2:5d:8c:31:de:65:e8:1d:12:fc:
19:73:76:95:a6:4e:fb:01:43:b6:87:9d:03:4c:3b:
d1:00:ce:0a:99:e2:ba:5f:44:fb:62:3c:3b:99:53:
3a:f3:7a:ce:77:ce:eb:45:f7:89:e8:e3:af:69:84:
ea:2d:d0:ac:5d:59:b6:cf:c5:63:63:64:e9:a0:e4:
3e:97:35:ef:05:e7:ab:88:cc:a7:04:f9:9f:b6:fc:
3d:af:15:33:15:76:ae:9b:60:92:5e:20:1a:3f:f7:
1a:f2:d7:81:6b:83:1e:33:f9:a9:e3:7c:3b:25:82:
76:12:21:8b:be:4a:db:a8:45:20:e3:27:dd:65:3b:
82:66:2d:2d:5a:40:32:c0:33:94:33:93:17:0c:91:
11:8e:6e:87:b4:05:3b:d3:58:5b:46:33:b2:2f:37:
44:5f:c6:33:f2:cb:ea:bb:1f:71:7a:7a:2b:5a:32:
6e:d4:18:a6:2b:10:61:09:52:b9:e3:d9:7e:4f:33:
3a:f9:7d:3a:66:ff:5f:b9:e9:76:8b:aa:3f:1b:5f:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.244.0/22
176.121.13.0/24
176.121.15.0/24
193.106.144.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50392
Signature Algorithm: sha256WithRSAEncryption
5a:94:10:aa:47:af:ff:eb:e5:fc:9a:1e:c4:56:38:0c:81:0c:
c2:c2:63:94:97:07:fa:83:e7:72:87:35:7a:90:70:40:46:6e:
83:69:de:8a:94:45:1d:b6:32:18:d2:2c:29:19:5e:40:bf:b4:
46:39:6e:9b:4d:6b:91:71:30:ca:22:5d:c1:25:d2:80:c3:ea:
c4:88:e6:dd:a4:7d:48:49:10:4d:6d:35:c3:1b:8f:95:fa:92:
74:db:9e:c6:ca:bd:07:15:6f:85:34:72:44:fc:9c:a8:1d:6c:
c4:85:7b:6e:dd:6a:e8:0d:da:c2:bc:46:8b:b1:97:08:fe:dc:
d0:35:bc:fe:fd:11:98:42:ec:68:88:9c:9e:d0:8b:a6:72:88:
4f:8e:d3:0e:13:1c:73:fd:56:6e:2b:c9:e8:7e:bb:da:e8:42:
be:a5:af:36:12:0c:d6:3b:57:aa:9c:04:34:2d:c8:a3:fb:19:
02:3f:29:f2:2f:98:d8:f5:33:61:9e:8d:f8:b3:c8:95:f5:19:
f4:a1:8a:0c:b5:b6:70:9a:73:64:dd:0e:c7:a4:11:b3:d9:8d:
d1:8c:fe:9b:18:e5:99:6a:2f:a3:6b:bd:d0:c8:49:e4:74:e9:
bc:7b:01:f5:85:3e:85:d0:d4:cf:fe:40:46:d1:73:a1:0d:fe:
c8:26:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:14 2026 by rpki-client