Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
File: BKSudHHI82IdUyVtdfEQt0iZeJg.cer (raw, json)
Hash identifier: ft+c9sEYUyJ9OY5KIrYU5R9iBEmS7dEaRGIs36sFqRM=
Subject key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7F84A74A045C50B0AA4232CA3B774910
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 16:22:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208721
IP: 45.14.116.0/22
IP: 2a0f:50c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:a7:4a:04:5c:50:b0:aa:42:32:ca:3b:77:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 16:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04a4ae7471c8f3621d53256d75f110b748997898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:58:8c:df:1b:ab:d0:85:89:00:f4:57:3a:
ed:fe:ce:29:9a:79:c4:d0:0e:5e:4d:cb:cb:d3:98:
2c:87:ed:2a:65:9b:50:09:59:f6:84:72:dd:38:a4:
49:e4:27:21:1c:ca:90:1b:fe:c1:51:32:07:ce:71:
bc:c7:b7:43:44:ba:b6:a7:41:ef:6e:dc:61:75:71:
2c:a8:1d:e1:b8:bd:b5:4f:80:53:c6:02:e2:d2:be:
5e:64:66:d5:23:de:4e:a7:c6:b6:a5:7e:a0:b1:2c:
44:60:cc:26:fa:61:b2:da:9c:cf:33:71:8f:81:87:
35:20:e0:05:41:d6:f4:93:b2:2c:14:40:af:79:21:
91:16:fc:dc:06:43:c0:28:dc:01:fb:bb:83:88:67:
76:12:0b:88:45:e7:ee:fc:25:e6:cc:bf:29:fc:ef:
92:a1:51:92:82:8b:fb:e2:09:de:9d:8e:7d:8a:af:
e1:ed:63:ab:22:7a:25:a6:82:2a:a4:a5:2d:e6:36:
59:e4:13:cd:05:59:eb:48:22:fd:6f:6b:b3:1e:46:
04:b9:31:90:17:43:75:03:bf:09:3c:31:e3:d6:62:
2d:a2:b7:40:e0:67:c6:68:c4:ed:df:3e:34:78:fe:
34:cb:b0:14:1e:5d:fe:3a:2b:4b:3c:b4:88:98:d1:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.116.0/22
IPv6:
2a0f:50c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208721
Signature Algorithm: sha256WithRSAEncryption
a2:d6:08:ee:08:d5:33:ff:5c:21:78:c9:c7:39:11:44:21:4a:
57:a8:37:04:5f:33:a1:74:7f:0c:78:e1:b8:ad:61:29:ac:f5:
c0:39:25:5c:43:f9:51:46:40:7b:c0:c5:c8:e1:5e:c3:57:18:
9a:3d:94:c2:e0:e4:d6:3b:14:96:17:3e:3e:ee:04:82:c6:62:
f6:ea:5e:ce:89:00:08:ad:10:dc:90:df:9c:dc:fc:46:63:d3:
6a:bc:5b:69:74:c4:9c:6c:fc:5d:62:e0:f7:61:1e:59:86:8a:
32:45:62:8c:4f:f4:d8:cc:d1:f4:b0:ee:46:35:72:3d:11:44:
58:1c:91:a9:75:5c:5c:db:3f:16:53:97:89:ea:21:ae:d0:75:
ac:e4:1c:4d:85:81:82:b2:a0:59:c7:9b:55:cc:03:e0:ca:a9:
f5:ed:20:5d:97:1d:9c:83:93:e1:8c:e5:aa:36:c3:f6:fc:8e:
bd:0e:6c:3e:89:11:16:b2:8c:2c:a6:f6:1e:3e:40:ae:ed:93:
c2:c9:3e:9d:bb:ff:17:8f:c7:93:70:be:b7:84:b5:be:3a:0e:
41:2b:1d:fa:59:88:8b:16:01:79:7a:b4:12:60:f5:58:23:84:
69:12:d7:22:a0:e2:31:96:8c:2a:cc:e9:af:cb:c8:ee:a6:9e:
6b:30:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:20 2026 by rpki-client