Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
File: BLw664svC0huXIwMec6djWixj5Y.cer (raw, json)
Hash identifier: E2LF87PlxuA63hDHtUDn+0tqxixEt/IN5bB573Eo08w=
Subject key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78354EFB59E77F6CF7ED231C3AED6EBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.96.240.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:4e:fb:59:e7:7f:6c:f7:ed:23:1c:3a:ed:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:9d:2a:01:73:15:b1:eb:a7:7e:38:a9:6a:
15:5d:a9:67:81:58:91:6a:a3:61:1b:6e:49:2c:ff:
a4:02:95:3c:7d:5c:92:27:2e:44:c3:b0:10:4b:d5:
9d:4b:38:73:65:8d:6b:13:b9:ff:83:8e:a7:db:ce:
97:36:72:d1:b8:54:27:0f:ab:50:53:5b:21:b9:53:
ea:7e:fe:8f:87:7f:23:57:30:0e:4d:f5:38:de:d5:
d8:33:70:86:58:8b:cf:3f:0d:43:f3:8a:5b:8a:0a:
4d:07:4f:3e:34:68:c1:75:60:33:96:8e:a1:a9:54:
cc:80:20:1d:15:b5:96:86:48:76:ca:1a:09:76:d4:
a0:6f:94:78:2e:e3:2e:09:bf:ae:d0:95:36:60:7a:
a0:75:e3:72:5e:a6:93:e9:5a:75:5c:d4:14:88:ad:
39:2b:aa:70:39:82:de:0a:2a:89:c3:26:01:48:06:
f6:fb:23:84:c8:c9:8c:b3:80:6b:d7:f5:9a:7e:ae:
aa:03:06:bc:2f:0c:76:db:77:e2:fd:3c:f6:f0:59:
c9:45:49:8a:36:bf:a6:d7:9d:d4:96:bb:d8:7f:4c:
b6:0c:55:4d:c0:73:c5:c1:1e:c6:3d:1e:44:cb:b4:
d1:b2:39:d1:a7:20:60:4a:c4:79:a8:93:b3:6f:38:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.240.0/24
Signature Algorithm: sha256WithRSAEncryption
94:05:07:c1:5e:6c:57:81:a3:1b:69:f8:64:69:ab:77:2f:9f:
a7:f5:90:7a:c6:42:ab:55:e4:9f:91:50:61:52:69:3c:52:52:
37:d6:65:25:64:b3:ab:d3:6c:66:b8:97:d2:1a:8f:be:b0:5d:
1c:0a:98:f3:a4:d7:c4:2a:c8:df:05:17:96:0a:77:39:82:e7:
8a:43:36:a5:8b:1c:a2:1c:bd:5b:cd:3c:74:9c:5a:92:53:14:
99:99:35:6d:f0:00:60:88:93:73:18:c7:d2:e3:a8:f1:c0:8f:
ed:28:f3:bc:bf:52:fd:d4:66:43:2a:2f:5f:d0:9a:25:dd:c5:
d9:fc:b9:46:e4:f4:ea:cd:86:bb:df:8f:11:11:a8:b7:c7:92:
fb:00:97:40:20:98:b2:75:99:b5:53:ad:95:01:c5:2d:d8:d8:
6c:26:38:b9:78:87:bb:45:ad:97:7d:b9:0d:92:90:17:21:cb:
86:de:7a:ea:3f:0c:97:6c:e2:78:c5:ea:d0:d4:a9:4f:7e:9b:
2f:3d:3f:45:e4:fd:15:10:1d:37:43:08:29:c9:4c:b7:8b:bc:
f9:98:d1:52:bd:3d:9c:c3:62:8d:cd:c5:78:29:07:83:32:c0:
16:d4:9b:2f:89:35:e0:6b:f4:95:12:a5:37:eb:fd:aa:56:ba:
db:a9:af:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:59 2026 by rpki-client