Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BJiZEEpGYR3dHTmg13fAsPKVI5E.cer
File: BJiZEEpGYR3dHTmg13fAsPKVI5E.cer (raw, json)
Hash identifier: W4WVhT/xlBPColgz1u4bzGVw44xQoL/W+gvKAe90toA=
Subject key identifier: 04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019C79F037C5052E437AB3CDBBE0E5099CDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Feb 2026 07:25:11 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 211435
IP: 193.39.194.0/24
IP: 2a10:e3c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:79:f0:37:c5:05:2e:43:7a:b3:cd:bb:e0:e5:09:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 07:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049899104a46611ddd1d39a0d777c0b0f2952391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:80:a8:8a:ed:1a:5d:18:08:4e:af:b2:70:
0b:8f:e5:3c:2d:7f:f6:cb:10:2b:bb:9d:d4:9d:ca:
af:a9:c8:fc:88:c2:b1:de:7d:82:ae:b2:7d:2d:84:
e6:11:99:c2:77:ef:4c:af:33:c8:cc:fe:e3:bc:59:
1c:3f:2a:ec:54:c9:8e:f1:bb:4d:a2:37:b0:0d:d9:
4a:54:45:3e:21:d4:02:50:d8:94:27:f7:68:09:fe:
78:a6:05:e2:82:62:4a:3e:00:ca:0d:49:49:ea:99:
7b:dd:95:3b:76:4e:c3:0f:8e:bc:d6:32:c2:fa:9e:
2d:ff:cd:a3:c3:59:9c:30:da:80:fb:5c:35:bb:23:
2b:f3:c6:69:be:fa:72:1e:7e:6b:7f:06:97:32:4e:
98:18:6f:9e:72:d7:02:72:8b:0c:aa:60:00:57:da:
4c:da:1a:e0:75:65:36:5b:5d:ac:91:51:d9:c8:fe:
0e:ae:f0:73:6c:d2:54:41:b3:03:63:03:c9:72:cd:
ae:e3:94:da:a3:fb:67:83:11:f5:7d:3d:1b:47:96:
06:5e:5b:f3:9e:4e:47:09:3d:7c:49:e8:8e:3c:9e:
f9:f1:cd:b6:48:20:95:fc:b4:87:af:95:da:74:bc:
13:ba:cb:aa:e4:28:fb:b8:12:59:d1:0f:d5:ab:68:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:98:99:10:4A:46:61:1D:DD:1D:39:A0:D7:77:C0:B0:F2:95:23:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f9d86-12d4-43c6-a078-d8a16e4f0b41/1/BJiZEEpGYR3dHTmg13fAsPKVI5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.194.0/24
IPv6:
2a10:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211435
Signature Algorithm: sha256WithRSAEncryption
7f:96:27:30:2a:e4:5a:d3:9a:d8:20:6c:f7:d5:2d:3a:9a:c0:
ff:35:a7:97:6f:6c:dc:98:e9:44:27:9a:bc:d9:ea:36:3a:3d:
cc:74:61:a5:d1:8d:a4:46:3a:67:7c:98:83:bf:c4:d7:bd:3d:
da:1c:3f:cc:34:14:94:7e:7b:0d:41:b7:59:c7:d5:a4:a0:7e:
fc:20:8e:f3:a6:28:5f:bb:98:9e:19:d0:93:e1:3d:1e:23:22:
b0:4f:93:0a:8e:2e:4a:5a:09:4a:c6:9f:1f:33:61:d6:4b:99:
6d:09:81:72:c8:28:f9:90:8a:29:a9:c7:08:12:73:84:0f:73:
0f:ff:af:a7:f0:af:9d:5a:35:e0:a5:fa:25:ea:76:ad:82:79:
55:b0:b0:34:e8:38:17:2f:80:00:96:ca:73:c3:73:82:16:8f:
30:67:de:41:fc:b4:e9:8d:64:83:90:75:59:a7:91:32:e3:20:
1e:69:0a:80:8c:4d:8a:51:24:84:53:5e:28:72:51:74:c2:8c:
66:f3:33:37:b6:0a:a9:bf:9a:86:15:24:b7:b3:3c:4d:8d:03:
1e:d8:aa:a8:27:e7:79:2b:5f:3c:74:83:0a:14:7e:d1:df:92:
2c:9d:95:21:61:bd:6c:56:38:4f:1f:bf:61:5d:e9:3c:90:42:
85:64:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:26 2026 by rpki-client