Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BOlxI0nYWcXmno45CKeE-LRErx8.cer
File: BOlxI0nYWcXmno45CKeE-LRErx8.cer (raw, json)
Hash identifier: 4y6W4lTeuYafphotpWKfWAwZj76AZ2Ai1WbNJLBAmzI=
Subject key identifier: 04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D90B6003E6A30E9E18403B898200438D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Apr 2026 10:35:39 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207219
IP: 185.161.244.0/22
IP: 2a07:c0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:b6:00:3e:6a:30:e9:e1:84:03:b8:98:20:04:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 10:35:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e9712349d859c5e69e8e3908a784f8b444af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:a8:b6:8c:7d:cc:22:48:24:07:07:76:f9:
b2:db:17:c1:82:fa:78:a6:2a:4c:c0:78:65:58:f4:
8f:b1:c4:fa:ab:6b:c1:ab:47:4e:ab:44:b4:7e:67:
37:bd:ce:63:98:85:95:54:c0:e7:45:19:81:59:bd:
08:e9:12:1d:bd:6d:39:39:ae:d2:f4:7c:60:93:cd:
d8:68:2e:b6:19:b4:e7:5c:7b:cd:54:df:25:6e:b1:
40:24:91:b7:da:7a:83:2b:bd:9e:c5:30:eb:76:76:
87:dc:c5:dd:86:ae:1a:ac:ba:e7:5a:26:e3:5b:c5:
9d:17:e9:34:43:30:ff:86:4b:36:d3:95:ce:65:cf:
9e:01:80:04:da:e7:20:2b:09:48:11:a4:6a:6c:e6:
9e:cc:6e:09:c8:c4:fe:0c:1d:f0:ff:da:e9:d1:cd:
f3:ec:c3:38:aa:f8:0a:16:86:4d:a9:88:b2:b4:be:
fc:59:18:b7:c3:7b:71:d1:30:dd:bd:34:23:0b:0c:
e9:75:48:0f:fd:7f:db:99:5e:4c:94:dc:0e:66:23:
91:18:6a:54:99:4c:51:f8:e8:36:23:46:08:31:44:
ae:af:d7:4f:18:2b:44:e0:ec:2e:4c:20:21:e1:fd:
4c:03:e9:4e:6a:62:2c:42:18:a1:48:ae:9f:dd:61:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E9:71:23:49:D8:59:C5:E6:9E:8E:39:08:A7:84:F8:B4:44:AF:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f9c72d-7412-4610-8683-f4e41e68e4e0/1/BOlxI0nYWcXmno45CKeE-LRErx8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.244.0/22
IPv6:
2a07:c0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207219
Signature Algorithm: sha256WithRSAEncryption
29:fd:00:fa:56:a0:21:ce:07:1e:7f:8a:d6:49:5b:9a:8f:c8:
76:ac:ac:91:ce:78:a3:1b:de:0d:46:e3:0a:d1:46:92:8e:12:
b4:c2:5f:d2:e0:38:43:a7:46:ed:61:0b:56:03:2a:2b:c8:20:
8d:e2:ab:35:4c:ab:49:a4:d7:53:2f:86:50:b4:3e:55:ef:94:
ce:76:6f:c1:ca:38:fd:d2:b9:80:81:b0:68:ef:25:30:7d:fe:
13:48:d9:23:da:57:b1:88:5f:8b:d5:c5:56:87:b1:3e:93:15:
be:19:50:71:1d:79:3a:5a:4f:82:a8:56:80:f6:71:52:3d:21:
6a:f2:92:e6:b7:52:46:8d:eb:da:28:06:4f:72:61:d4:11:e1:
06:fa:2c:04:2f:dc:e7:60:a2:61:70:ae:e7:56:6a:9c:72:6e:
5c:95:58:8f:7a:ed:c0:05:6f:d2:0b:d2:dd:2e:a8:23:78:23:
9a:d9:ba:9e:ce:d5:bb:99:61:3d:ba:d7:64:bb:8d:f4:fe:e9:
59:a1:63:d5:7b:22:34:9e:ef:39:6d:31:9f:af:db:55:29:02:
94:93:b3:e5:a8:b8:ad:94:e8:a4:0e:36:c4:c7:ab:44:00:6c:
b6:63:76:78:91:63:fb:c4:12:aa:ed:94:b5:0e:6e:c4:5a:0b:
03:e0:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:56 2026 by rpki-client