Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
File: BNhWAsroYaFGaoWobO-1rLA4qxI.cer (raw, json)
Hash identifier: sHM27uNpYCwY2jRGyc8QmZeZfhKQG7vcpHC+17UZnjk=
Subject key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E160560E22EA1AF52234B5E4529BD40A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 11 May 2026 07:51:51 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208459
IP: 45.135.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:05:60:e2:2e:a1:af:52:23:4b:5e:45:29:bd:40:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 11 07:51:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04d85602cae861a1466a85a86cefb5acb038ab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:b3:25:00:96:23:53:c5:7e:3a:5f:67:36:
25:72:2e:33:63:bc:6f:7e:ef:db:64:cd:a5:73:99:
96:15:2f:e5:87:e0:2f:87:97:10:f6:bc:12:48:01:
a9:cf:46:3e:1c:37:89:8f:67:61:ab:8c:fe:29:3a:
57:e5:18:6c:22:b1:13:41:a5:15:06:d9:9e:a6:37:
a7:4f:ad:6f:7a:54:1f:17:ac:0c:1e:3b:2e:d7:03:
a7:b8:6d:69:4a:2e:26:70:8d:a3:df:c1:f5:2e:46:
40:80:07:5d:7c:c7:3c:31:fa:cd:00:e3:99:cc:23:
ae:6b:a0:96:95:b7:9d:1e:32:93:aa:2c:d3:f2:fa:
8d:fb:82:d1:a0:b4:e6:19:82:d0:10:28:6d:5e:19:
36:6a:20:e7:c8:c6:3d:4a:c7:6d:ba:d6:60:9b:b5:
7a:39:ae:f6:e2:15:9a:b9:00:40:e7:20:cf:93:8e:
98:f1:61:98:ed:89:4c:c9:26:ee:4b:bf:1f:09:94:
4f:ca:25:f1:48:41:cc:69:8f:e6:1b:32:63:07:bb:
77:d5:6b:33:d3:b9:85:02:60:f3:b7:61:1f:6e:8f:
c9:90:ca:f7:70:65:d5:9f:28:19:cb:67:09:ee:a1:
0b:35:db:24:82:98:c6:19:cf:ac:c0:fc:35:82:1d:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208459
Signature Algorithm: sha256WithRSAEncryption
37:f1:3d:bf:ed:a2:6f:39:92:00:e2:38:60:a8:d4:f7:ae:ae:
66:07:cf:d5:d2:1b:89:86:23:4d:39:79:7f:4a:fa:a0:00:f6:
2f:47:27:9c:e3:a8:29:98:09:e4:12:a7:2f:46:78:9a:36:b8:
69:86:7e:0b:45:ab:cd:eb:f5:9b:5b:d0:2e:d3:fd:c0:65:38:
1a:7c:52:07:aa:d7:8e:29:62:7b:30:7e:be:63:f3:bf:5b:fa:
4a:f3:68:26:f3:d0:2d:50:f5:51:67:7f:9c:09:4f:3c:cb:30:
bd:a4:4d:32:43:99:78:09:98:40:8d:59:27:9f:23:8a:32:e9:
83:0d:e9:48:9a:42:71:0b:1c:84:aa:33:c6:c8:68:fc:e5:ab:
34:6f:4d:2d:5e:b3:74:ca:85:61:52:67:37:7f:ed:73:81:ce:
30:0f:e1:aa:e2:6f:ef:d7:72:79:33:ce:9f:9e:fa:1d:2f:59:
f6:ad:c2:18:65:4d:1d:05:83:8c:95:37:09:56:35:5c:c3:4d:
cf:cc:7a:30:03:e3:32:b6:de:63:a9:68:30:95:59:c7:75:2d:
56:3f:10:9d:59:f8:e1:ac:60:3e:e9:a3:71:29:35:5c:dd:9f:
37:af:71:d2:0d:71:7c:01:7d:b7:19:4f:c2:c8:3e:35:45:b3:
d9:be:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 20:59:32 2026 by rpki-client