Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BT37s2MBCw33p8otbR9yl1il9VQ.cer
File: BT37s2MBCw33p8otbR9yl1il9VQ.cer (raw, json)
Hash identifier: 4mrX3/WGR8iKdCsXNEsKmEmWE0Bkme4mWZsPAokGIL4=
Subject key identifier: 05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18EE1C5B96958B19F913D6F9F6596D0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:28:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212606
IP: 185.178.49.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ee:1c:5b:96:95:8b:19:f9:13:d6:f9:f6:59:6d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:28:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=053dfbb363010b0df7a7ca2d6d1f729758a5f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:ae:e4:c0:0c:c4:fa:9f:51:55:d3:71:21:
7c:52:7a:ad:b5:74:d6:3b:d4:a3:02:6a:5d:c2:8c:
5e:6a:12:7b:b1:8c:d0:fa:c1:5e:75:a2:45:13:ad:
e8:37:3a:78:84:bd:27:b5:7a:27:0d:49:fe:f1:1c:
d8:fd:5d:61:92:77:e2:a9:1e:62:f4:87:f0:10:fc:
11:eb:6b:bd:b7:57:b4:fe:96:84:64:78:72:ba:30:
2c:81:bb:e7:31:c9:7b:97:c5:5d:55:07:bd:30:ba:
1e:e5:f9:99:2a:de:1f:d6:7b:60:e2:86:3b:38:14:
6f:22:44:ee:7b:ba:aa:f4:e2:c6:ee:b9:3e:c6:09:
67:7d:15:d4:79:cb:c6:3e:f1:f2:e2:67:5e:d7:27:
01:58:b2:fd:5b:8b:36:d2:53:af:c3:db:84:0d:d0:
de:ab:b9:e4:33:d0:48:d2:23:73:c4:71:80:e2:3a:
0d:41:32:5d:ff:bc:9e:b8:75:02:5b:e1:b8:4d:3a:
27:a7:80:e1:c5:1c:fc:18:39:09:49:0b:58:a4:a4:
fd:cb:86:07:8a:af:0e:4f:01:fc:5e:d9:bc:39:03:
a7:ac:1d:12:b5:4c:87:d4:65:89:8d:c2:82:94:28:
96:68:6c:cc:ae:3e:b5:ed:54:54:4f:00:ee:4e:77:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3D:FB:B3:63:01:0B:0D:F7:A7:CA:2D:6D:1F:72:97:58:A5:F5:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/BT37s2MBCw33p8otbR9yl1il9VQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.49.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212606
Signature Algorithm: sha256WithRSAEncryption
6b:fc:2a:3b:48:6e:42:84:25:1f:9c:6a:4c:3c:f6:91:cd:73:
d9:85:7e:ab:63:0b:44:91:2f:ce:71:4e:3f:03:1d:c3:ef:3e:
f6:90:67:8e:5f:15:7a:59:a3:86:39:d1:0e:24:c4:fa:fb:77:
2b:6f:f7:31:d7:79:28:16:9c:6a:eb:47:b1:10:79:2e:84:6c:
d0:a4:5c:5b:94:21:54:c9:86:76:95:61:03:88:93:77:03:f2:
95:9b:11:bb:a2:28:68:07:78:82:ae:ad:57:38:65:dd:f6:b3:
c2:27:6b:34:8f:e3:ac:be:3f:0c:3f:86:72:d7:03:51:e4:57:
61:03:12:60:17:0d:0e:69:4d:74:e5:31:17:31:2a:22:60:f7:
bb:97:5e:68:68:6b:3b:cd:c6:7d:ff:28:b8:67:fb:32:aa:d6:
1c:a5:5d:12:e2:83:78:cd:26:22:85:1e:41:1b:37:76:7b:83:
61:13:d0:b2:6b:9d:55:2e:ac:80:1f:85:9b:79:c8:90:14:71:
af:ce:2e:b3:6a:4f:cf:6e:92:dc:37:6e:f2:2b:ac:e0:7d:3d:
59:18:d3:df:d4:94:97:6b:a8:9c:15:af:d4:b7:cf:e9:9e:6c:
16:e1:e2:9f:e3:b5:2e:d7:45:f2:15:7d:3a:b0:bb:e2:9b:e7:
d8:55:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:18 2026 by rpki-client