Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer
File: BLNpYXtd8qXPxuPJ7BtwOd9UuMM.cer (raw, json)
Hash identifier: zHyX5c4UvBtA6B8PcrcHsBI89W9ZF2FYtj0dhBTgS+o=
Subject key identifier: 04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F50FA9D562B67D7D1646B85A1A58D466A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 11 Jul 2026 11:40:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 215709
IP: 45.88.59.0/24
IP: 185.219.88.0/24
IP: 2a0d:e500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:fa:9d:56:2b:67:d7:d1:64:6b:85:a1:a5:8d:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 11:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04b369617b5df2a5cfc6e3c9ec1b7039df54b8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:c6:2e:5e:fa:7b:f1:ea:63:19:90:72:28:
99:15:ab:1b:7e:97:ac:b7:34:12:9e:69:e5:f0:1c:
d3:6e:26:9d:56:dc:1e:6d:a1:08:16:aa:ab:fa:7c:
dc:99:16:26:b3:52:01:33:6e:2f:2a:4e:e1:8f:a3:
dc:9e:a4:2b:19:f9:04:75:c0:b8:38:e9:f2:f1:85:
50:80:fe:77:85:8d:b0:f6:c7:4d:af:d3:d3:98:e1:
fa:f1:5c:d3:79:40:a0:cd:dc:7e:28:67:7e:9a:1d:
9a:07:b6:5c:a9:0d:15:46:7b:7e:84:b7:57:02:5d:
01:5e:17:89:be:76:6c:a2:d9:81:a7:24:a3:01:bd:
db:a2:d6:b2:16:6c:38:44:13:1f:63:1f:7f:d3:3a:
a6:dc:90:34:ff:40:07:c2:74:12:a6:34:eb:95:64:
f5:87:d7:54:8a:61:87:30:9c:65:74:98:e2:61:4d:
ab:52:6b:74:74:95:c4:1d:89:b2:91:17:df:75:cf:
6e:95:69:d9:a9:be:10:f5:e7:19:9e:c8:de:7b:f3:
aa:cb:8c:d5:34:93:4d:63:fa:01:03:70:3a:96:08:
f9:75:90:9f:cd:19:cd:9b:86:25:8b:bc:87:1e:76:
b8:f8:9d:2f:b4:3c:ef:15:c6:6b:14:a7:f7:a5:2b:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B3:69:61:7B:5D:F2:A5:CF:C6:E3:C9:EC:1B:70:39:DF:54:B8:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/772bad-ecea-4fe2-bc54-6cf9dd5de847/1/BLNpYXtd8qXPxuPJ7BtwOd9UuMM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.59.0/24
185.219.88.0/24
IPv6:
2a0d:e500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215709
Signature Algorithm: sha256WithRSAEncryption
3f:20:47:31:34:37:f4:a2:9c:8c:a1:ef:88:11:34:06:04:0d:
55:3f:e1:f7:24:99:cd:f1:ee:40:9f:e6:ab:26:6f:e2:19:43:
7f:2e:f5:03:3b:23:8a:e9:c6:9b:49:9c:9a:ee:c2:f3:95:3f:
d4:d6:c1:2d:2a:d6:27:43:ef:e3:b0:98:2b:95:1e:0e:72:0f:
42:2a:94:2e:cd:1b:f7:a7:eb:a8:66:f8:73:c8:03:29:22:5e:
08:d7:64:71:db:83:b7:68:a4:94:aa:95:d5:6c:69:23:60:67:
99:91:fd:b0:d2:6b:d6:2e:79:8d:6c:36:08:6e:a8:57:1d:02:
5d:f5:d4:21:de:83:de:5f:89:09:6d:ae:4f:e8:eb:39:30:99:
6c:94:6e:e6:fd:be:c9:6a:1e:bd:79:dd:5c:c0:7e:73:dc:11:
d7:ad:59:df:eb:c1:b7:67:ea:8c:c4:44:f1:02:11:db:63:e7:
ea:ad:9f:11:cb:23:4c:8c:e2:9a:a5:2f:3b:01:99:f1:81:ac:
1b:0e:b9:32:b2:58:bf:c2:b5:f9:88:c1:3a:43:17:1c:a5:8d:
55:c4:b4:23:91:4b:9b:72:3d:5a:16:e8:7b:3a:ed:2d:04:0c:
4b:eb:bd:34:bc:e0:85:72:1b:d5:53:7b:9e:54:42:cf:3d:84:
83:9d:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:23 2026 by rpki-client