Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
File: BTPwgeV70J2rsG4334Vp61JCD3Y.cer (raw, json)
Hash identifier: Mt5aCkpyHZGEZSFCjt5+jQ48EFt+osDWPVhvVEZF8VM=
Subject key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7B356E6E063ECADC96261B1138B6B32F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 20:17:37 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 213735
AS: 213740
IP: 159.135.128.0/19
IP: 185.205.104.0/22
IP: 2a0b:440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:6e:6e:06:3e:ca:dc:96:26:1b:11:38:b6:b3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0533f081e57bd09dabb06e37df8569eb52420f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:0c:39:fe:fe:60:86:96:76:e3:d0:1d:21:
75:58:b3:d3:02:cb:52:b7:ed:0c:8a:d5:f9:cb:a0:
7b:a8:f4:37:83:74:9a:69:a2:ac:a4:bb:a9:75:41:
89:fa:31:c4:01:6e:26:c8:dc:30:91:19:c8:45:3d:
68:09:89:93:11:9a:97:1c:43:62:8e:58:3a:1e:f0:
ce:74:6b:4a:d8:b5:2d:e1:7e:6c:18:92:7a:0e:c0:
3c:f8:64:68:ee:7b:74:59:1c:67:a4:e5:d0:db:8c:
af:e6:d0:f1:6b:76:a4:0b:28:27:18:8c:d6:cf:13:
63:fb:a3:2b:f7:09:d7:65:38:5e:cf:a4:62:c0:86:
c1:1d:27:4c:fd:33:89:3e:b4:17:d5:75:75:3b:be:
eb:17:10:d2:8c:f6:3e:34:60:ec:8b:50:e0:2c:43:
d0:93:a5:45:9a:a2:c3:aa:6d:e7:85:05:67:2c:66:
ca:d4:e0:43:32:db:2f:72:42:7a:4b:79:2f:72:ef:
90:ea:43:91:99:fd:9f:be:89:c4:dd:50:ac:33:d0:
e5:b4:83:59:bc:a4:4a:fe:01:77:c9:ea:d1:b6:ed:
8e:03:75:0e:a4:d6:20:92:08:40:f6:7d:22:6e:54:
44:67:39:6d:a2:2e:f5:06:d2:0f:12:58:71:d6:1e:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.135.128.0/19
185.205.104.0/22
IPv6:
2a0b:440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213735
213740
Signature Algorithm: sha256WithRSAEncryption
91:9a:ae:dd:5d:21:dd:1f:82:7f:05:8f:93:31:e1:c1:e4:fa:
24:5f:5e:f1:ab:5b:dd:35:6b:e7:c1:68:16:e5:af:fb:a4:17:
1f:81:15:1d:5d:f2:f5:2d:c3:c3:88:5d:73:aa:ed:28:48:3d:
0d:e9:02:28:7f:49:56:a0:07:cc:6b:ba:72:7b:11:45:97:00:
40:90:8f:0b:82:b0:84:d7:91:7f:0b:7b:48:1c:2d:fe:b7:c8:
21:cd:2c:41:22:da:56:28:c8:ab:7b:ad:bf:1e:96:6a:e1:e3:
cf:cc:fb:90:d6:4f:77:b1:58:38:1e:42:52:e2:96:59:ad:9f:
04:55:5d:8c:64:91:63:e6:0a:63:67:09:22:3d:c3:aa:c3:1c:
fa:ed:7c:61:b3:f9:d1:fc:b6:4e:c9:8f:6f:e4:b3:44:fc:97:
38:ac:d7:a8:d2:b2:d3:b6:f9:82:bb:f3:ae:55:ec:2e:93:8c:
08:44:77:9e:f7:b0:8c:48:4e:4c:24:95:b8:64:6e:a7:97:04:
fc:12:3b:ce:da:e8:06:b7:56:db:47:9a:fd:f1:f1:bd:d4:2e:
de:9c:76:57:94:5c:52:2d:7e:0e:fb:ac:aa:e6:9a:62:e0:5b:
dc:1f:aa:26:32:a5:4a:27:00:81:4f:77:39:1c:ec:fd:3c:e0:
56:86:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:20 2026 by rpki-client