Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/BHi2EPnjpf-HqRAROXhup8RRtds.cer
File: BHi2EPnjpf-HqRAROXhup8RRtds.cer (raw, json)
Hash identifier: LTSK1KUtvKDDUJhPJ/HfomEE/6ICR4EpK7vsP6/xRBk=
Subject key identifier: 04:78:B6:10:F9:E3:A5:FF:87:A9:10:11:39:78:6E:A7:C4:51:B5:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1A57EEAA41779E6F7B4A786EB27A72D96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Nov 2026 07:38:40 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 48708
IP: 193.24.125.0/24
IP: 2a07:5080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:7e:ea:a4:17:79:e6:f7:b4:a7:86:eb:27:a7:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 4 07:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0478b610f9e3a5ff87a9101139786ea7c451b5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:b1:5e:33:da:25:da:91:b7:c3:bc:df:28:
0e:ed:d1:e8:14:f1:44:fe:2d:ae:34:06:22:63:fa:
08:6c:b8:c0:45:bb:d3:4b:c0:7c:15:cb:a9:d1:b2:
6b:21:0e:49:a4:6b:31:24:79:38:4c:ec:22:6b:d9:
27:bc:80:26:6b:16:cd:10:9b:86:b8:aa:ae:66:2c:
82:21:19:25:f0:5e:33:14:45:a2:ef:4f:f1:b0:97:
9a:a6:c4:65:55:a5:c0:75:99:99:4b:49:9e:c3:31:
d8:20:3b:a7:eb:1b:10:84:cd:41:2c:d3:da:39:39:
8d:99:3c:82:ba:c3:24:f0:02:fd:98:14:40:74:02:
c8:79:87:e9:5e:3d:7d:56:0f:43:f8:74:c0:84:f8:
a7:b4:9f:0e:6f:30:cf:ee:38:eb:32:ec:f1:9f:64:
10:c3:00:30:cd:50:3e:fb:b8:af:e6:88:e2:ad:fd:
c6:7e:fe:d5:26:16:84:c7:fa:f0:42:62:25:5b:63:
14:86:6a:d4:16:a4:24:77:7d:bf:b8:87:76:23:59:
45:0c:29:34:13:03:4b:4a:86:44:ee:69:88:48:d3:
8e:1a:fd:8b:72:77:bc:64:07:3c:26:e8:5d:3a:88:
ee:5e:ad:73:b2:83:b6:42:82:ab:4b:50:81:fb:73:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:78:B6:10:F9:E3:A5:FF:87:A9:10:11:39:78:6E:A7:C4:51:B5:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/604547-8b75-4c18-94fe-52a7aaf4b24f/1/BHi2EPnjpf-HqRAROXhup8RRtds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.125.0/24
IPv6:
2a07:5080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48708
Signature Algorithm: sha256WithRSAEncryption
09:65:a0:9a:c5:2e:b8:31:a5:57:0a:80:42:11:06:ac:33:51:
bd:79:35:a9:f9:ca:a0:1c:5e:f2:24:61:23:a9:4f:23:53:c5:
06:e1:c0:ac:51:df:de:c2:2a:74:a3:d8:b9:7b:55:3b:de:6c:
a5:2a:ea:f7:e6:d1:3f:29:5b:21:6e:83:f6:9f:60:c1:53:4e:
67:be:cb:7c:63:14:fd:67:e8:24:ce:3a:01:9a:a4:e6:a5:27:
ce:38:05:ea:31:8a:60:16:73:eb:6a:f5:bf:ed:00:1b:41:88:
de:23:5c:5f:4e:fc:6a:ad:82:22:7c:af:86:71:b3:46:c9:6c:
7c:26:f0:79:e7:05:1d:2a:54:85:23:00:6e:ec:e6:61:aa:c8:
53:a5:05:29:97:1b:d1:a5:ec:16:ba:e5:a1:d3:0b:c0:ec:f6:
c2:64:f1:df:7d:c4:e9:d9:d3:e9:1c:15:4c:32:5f:fd:f3:5e:
99:9a:6b:5f:51:37:3c:d6:e7:cc:ea:eb:5b:b6:ec:46:bb:a9:
bd:db:10:75:2c:69:6b:a4:e9:c9:cd:e8:3e:69:37:ce:4c:71:
1e:05:9f:da:47:24:49:a6:d2:07:96:e9:86:b1:61:4a:02:8b:
c8:98:3a:19:92:d4:8b:fc:40:8e:cb:cd:0f:3f:92:c0:f7:c0:
60:eb:67:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 21:35:59 2026 by rpki-client