Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer (raw, json)
Hash identifier: SK3XXRGNar5Fgrh6Cu3BuMw31LDEqanZ2q8kC3YPbVU=
Subject key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC7D1B11B7E499D865BA6CFD43C374A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:17:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 35805
AS: 42082
IP: 5.152.0.0/17
IP: 31.146.0.0/16
IP: 37.110.160.0/19
IP: 37.232.0.0/17
IP: 77.92.224.0/19
IP: 79.99.248.0/21
IP: 87.253.32.0/19
IP: 91.151.128.0/20
IP: 92.54.192.0/18
IP: 94.43.0.0/16
IP: 146.255.224.0/19
IP: 149.3.0.0/17
IP: 176.221.128.0/17
IP: 178.134.0.0/16
IP: 185.146.176.0/22
IP: 188.123.128.0/19
IP: 188.169.0.0/16
IP: 213.217.16.0/22
IP: 2a01:9c80::/29
IP: 2a03:3580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:d1:b1:1b:7e:49:9d:86:5b:a6:cf:d4:3c:37:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:30:e5:8a:79:7a:8d:c5:ba:5d:d3:2d:bf:
2b:21:ce:75:17:2d:cb:0b:cf:4c:47:32:40:b5:f0:
c9:44:64:52:3a:f7:6f:eb:82:ee:79:f9:be:4b:eb:
cf:28:ed:93:2e:93:69:1c:9d:b8:36:3a:3e:d1:dc:
0f:08:44:b7:74:7a:5a:87:f6:5c:7d:74:72:9e:6f:
8d:5e:5a:10:0d:bf:b2:08:56:af:91:93:84:b1:d1:
09:d2:6c:e7:9b:de:63:8c:db:ff:92:1d:8b:a2:e0:
5f:39:38:33:ad:db:75:38:2a:a2:5d:4d:37:b4:ec:
fc:14:f6:6e:42:a9:d7:45:1f:74:ca:f1:cc:03:15:
e6:43:af:bf:ab:6a:cd:27:47:8e:1c:ed:29:92:61:
3c:72:66:31:82:25:e8:f5:a9:eb:9c:56:3e:48:ae:
fd:7a:b3:37:a8:34:fe:55:c4:71:fc:0f:44:e9:2a:
6a:91:95:9f:a9:06:d9:95:25:71:52:4d:eb:b6:0e:
c8:0e:d0:0a:45:58:53:41:01:e4:9a:97:8e:1a:07:
af:05:7b:54:de:04:52:fe:3b:6c:39:d3:be:32:eb:
c8:cf:b9:2c:e5:58:f1:dd:9a:e3:f8:83:c2:ed:0c:
da:c7:ee:b2:d8:0c:27:12:2a:3b:b3:60:90:87:41:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.0.0/17
31.146.0.0/16
37.110.160.0/19
37.232.0.0/17
77.92.224.0/19
79.99.248.0/21
87.253.32.0/19
91.151.128.0/20
92.54.192.0/18
94.43.0.0/16
146.255.224.0/19
149.3.0.0/17
176.221.128.0/17
178.134.0.0/16
185.146.176.0/22
188.123.128.0/19
188.169.0.0/16
213.217.16.0/22
IPv6:
2a01:9c80::/29
2a03:3580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35805
42082
Signature Algorithm: sha256WithRSAEncryption
a7:3a:22:e6:22:3e:c3:a6:bf:d7:b3:59:6b:e5:43:d1:0d:35:
44:9a:0e:3a:b3:b1:32:0c:99:ca:17:b9:57:29:40:66:f3:6b:
e7:b2:e5:a3:f2:69:58:0f:72:2e:7d:e9:e8:8f:9f:79:90:c4:
7c:69:e0:76:7c:bd:bf:6b:19:95:92:7d:1a:36:ba:86:99:7e:
f6:f3:cd:b0:bd:bc:97:74:65:fd:9d:d4:95:b8:1a:af:bf:d3:
5d:c3:c6:7e:7c:fa:49:8e:92:49:84:6a:98:ce:f8:1c:94:7d:
ac:3e:79:fb:e9:0b:8b:d2:04:e0:81:a6:c5:33:9b:8b:d6:72:
29:62:2d:8c:fa:cb:59:a1:8f:4b:3a:c2:2a:1c:6f:6d:77:0c:
13:70:7b:40:c8:63:75:6d:32:f1:7c:7c:c2:11:3a:0d:7b:58:
2d:ce:31:91:fb:de:eb:5c:5f:e9:42:c3:ec:bd:62:21:c5:7c:
6d:f9:49:86:c5:b6:4a:1e:53:41:0b:57:4f:15:77:8c:31:04:
3c:1c:cb:29:50:8c:2b:1f:32:22:6a:2d:b9:9a:b4:76:48:bc:
a2:3b:6d:99:9f:10:d3:15:20:64:e5:85:cb:a2:30:3d:5a:45:
ea:5d:fe:80:c1:ac:83:e0:00:81:e9:69:f3:7d:bb:ca:1a:3d:
88:65:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:35 2026 by rpki-client