Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
File: BR01GL3lliv_5z55iEcY5u0PpFY.cer (raw, json)
Hash identifier: qfzyD1cpge/Z8NhOtQku4kdi4lIMkSLIkmzmImVpgoY=
Subject key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA564C6743DFFF4E0B9B661C5C9EC57
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:18:47 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 20741
IP: 46.17.16.0/21
IP: 185.11.180.0/24
IP: 185.190.168.0/22
IP: 2a02:27d8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:64:c6:74:3d:ff:f4:e0:b9:b6:61:c5:c9:ec:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:bc:08:b6:d1:08:e5:05:18:c8:7c:63:64:
3e:ff:24:a7:03:7f:c0:0f:eb:51:4e:84:df:cf:69:
6f:59:f3:57:58:6f:50:cf:06:74:3a:26:9e:3a:a8:
59:a5:09:53:5c:35:63:4a:a7:8b:f1:40:94:47:d6:
47:08:68:43:96:f9:99:d7:e5:6e:be:76:c7:34:04:
5d:37:f9:a5:bf:51:4d:55:54:51:4c:35:cb:d5:0c:
9b:15:81:6d:67:3d:e1:32:a1:c1:5b:75:aa:45:4d:
04:d9:77:b4:14:23:cf:fa:5e:93:28:f6:2d:8e:29:
f9:91:d4:e6:af:31:1c:1c:77:2b:78:a5:24:63:7c:
3e:4b:9a:56:3e:eb:6f:ee:23:5c:6b:e7:b0:97:1e:
8d:9b:29:86:89:4b:2b:df:4f:85:bb:1b:42:32:1c:
f0:7a:9d:70:92:f9:0f:e5:f8:0a:83:2b:f8:82:84:
cf:50:f7:e1:03:90:51:8d:42:9f:63:f2:b8:f8:ab:
04:93:65:74:d8:62:6e:f5:c0:3e:9a:a9:f2:bd:ad:
79:53:31:1e:60:2d:e9:a1:50:c9:30:e3:f5:95:db:
b6:59:e8:8a:9f:1b:34:c3:f5:44:e2:15:4f:1c:1c:
35:71:91:cf:f6:07:5d:cf:2b:16:33:28:6f:50:26:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.16.0/21
185.11.180.0/24
185.190.168.0/22
IPv6:
2a02:27d8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20741
Signature Algorithm: sha256WithRSAEncryption
8c:2e:ac:6e:b3:6e:17:85:05:69:b8:8c:47:21:fa:60:dd:e5:
31:bb:0b:78:92:7d:60:1e:f3:3d:52:c0:57:95:a7:df:c1:0f:
0d:d2:a7:da:f5:09:c6:ff:5a:19:92:bd:64:9e:ca:c7:ce:6b:
35:c8:cb:b6:04:0d:5c:97:7c:91:fe:58:58:7e:49:5d:9e:32:
88:99:ac:57:bf:03:6d:bc:3b:4a:2c:66:e8:2e:d4:52:5e:ce:
6e:6c:52:c1:d8:4d:f6:45:98:15:ea:83:45:a8:b5:05:87:4d:
0b:50:eb:d4:b2:4b:ec:be:58:5b:3b:e2:9f:51:4d:c4:4a:d6:
b6:04:a0:c2:af:8e:11:84:99:ce:94:7f:b7:85:e1:79:cd:30:
86:4b:53:b9:53:c9:24:6c:31:94:63:ae:79:f7:b7:54:19:c2:
6b:08:22:9b:e1:a6:16:64:41:f7:6d:87:d7:db:68:6a:47:23:
a4:5f:5d:8d:c7:47:26:e5:73:4a:85:5f:63:72:aa:06:bb:0a:
94:3c:4d:a0:d8:ad:ab:0d:44:ae:80:11:a3:35:a1:44:c3:30:
e4:3e:1e:10:a6:41:db:ac:69:e9:0e:49:5f:56:78:45:d5:5f:
f4:24:fe:75:e8:6d:a0:a0:32:b7:44:e9:06:2b:09:f4:e4:97:
00:2f:65:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:48 2026 by rpki-client