Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
File: BJ5OW_-brMwUl8sgid2GYbzRPvM.cer (raw, json)
Hash identifier: FfbKBi6L3O5IpkECYwF8QIyoH0pDWVGdXKxVCPlPP4A=
Subject key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F0365032FDBE4BF136D8A0B6EB352DF0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Jun 2026 10:06:19 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197316
IP: 80.73.254.0/23
IP: 2a09:300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:65:03:2f:db:e4:bf:13:6d:8a:0b:6e:b3:52:df:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 26 10:06:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:60:7d:ea:bf:22:d7:78:77:98:5b:f7:11:
49:c1:de:db:c2:ed:e8:b2:39:d8:f1:01:87:66:23:
e7:e3:b6:7b:9b:f2:b5:56:45:cb:2b:26:ea:1b:ea:
ad:87:d5:d9:80:e3:62:76:79:0d:f9:af:f9:cb:f6:
4f:e4:f3:aa:bd:ba:8c:a0:75:bf:d6:1c:55:77:a4:
1a:b6:a0:ec:39:a0:89:f4:d1:ac:4d:77:b6:fa:8d:
af:13:4c:4a:9e:27:07:30:9c:e7:ba:54:0a:f0:21:
a7:c0:65:32:5b:c0:6c:d9:b0:de:d3:9c:1c:a5:a4:
be:18:df:1b:cd:e9:62:1e:bf:18:34:99:79:56:72:
5c:41:d0:ee:30:06:5f:a9:6d:9a:4f:1a:d9:d1:78:
f0:13:9d:e9:07:ba:b5:9a:8d:76:6d:d6:37:41:ed:
98:75:d5:f4:06:6e:2d:b9:54:64:4e:0e:29:e1:e5:
36:e8:dc:ca:c3:cf:16:ff:7b:fd:84:29:bf:9e:23:
b5:99:51:cd:e2:4c:dd:b6:f7:88:8b:76:4d:af:33:
34:0c:4f:3d:40:3e:61:e0:ba:c8:73:76:6a:f3:c7:
79:76:5e:c6:6d:f3:2a:19:c2:33:7e:f3:00:f3:9b:
69:4d:43:d9:ea:10:13:0f:81:01:f3:de:19:33:53:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.254.0/23
IPv6:
2a09:300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197316
Signature Algorithm: sha256WithRSAEncryption
5b:5e:88:88:46:f3:d2:32:84:5d:cc:0f:a0:b1:e9:2a:6b:9c:
40:b4:98:8e:21:b6:da:52:10:a6:3a:a4:a4:77:39:b0:e5:64:
5f:32:f0:e8:0d:27:d6:6c:9f:29:a3:92:7c:0f:da:28:8b:1b:
50:37:72:6e:a3:33:dd:15:16:9e:fe:d1:cd:27:5a:d1:4f:ba:
cd:09:06:54:0d:92:83:79:d7:9b:59:50:b3:8c:ba:9f:ab:3a:
7e:e8:81:48:49:b7:5b:dd:63:3b:63:5a:d7:7d:26:e0:43:32:
b1:a3:12:d8:c8:c6:c9:66:04:09:d7:b1:ce:69:eb:23:a6:b4:
dc:11:0d:a8:43:ed:e6:f5:ce:69:37:10:58:3d:1a:e2:bd:19:
b2:70:ab:8a:e5:b6:39:5c:16:bd:9b:6a:76:a5:ee:6d:c2:3c:
48:64:dc:ee:63:a3:e5:1d:5c:af:d8:1f:33:02:5a:50:6e:6a:
37:d1:fc:44:58:25:a1:76:8c:a5:52:da:70:8a:21:5c:84:0f:
fd:63:2f:2f:7c:58:0e:7d:48:96:e9:bc:cb:3c:12:84:58:d7:
ca:10:eb:0e:31:27:6a:6e:1b:37:86:27:7f:10:e0:62:26:5f:
f9:20:04:fe:37:bd:80:98:b7:42:24:9c:13:d6:c9:6a:cd:ad:
7a:41:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:29 2026 by rpki-client