Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer (raw, json)
Hash identifier: sgtjZkq9VohPEumUf4isJzFRgRqUv2GiIMb089ijsEI=
Subject key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C437E697B9867E7659B07A76F88CC824
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Oct 2025 14:27:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.151.68.0/22
IP: 185.173.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:37:e6:97:b9:86:7e:76:59:b0:7a:76:f8:8c:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 14:27:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=054ab196a5b113660d401f806b32be66625afbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:08:a3:8c:62:ef:17:37:5f:42:2e:56:a2:
87:fc:76:c7:53:9c:94:05:f0:8e:74:b2:d5:36:5b:
9a:3e:39:30:f8:a5:3e:8c:ce:36:a2:70:9b:7e:da:
a4:64:db:5e:21:d8:3d:f9:56:56:41:61:fa:25:2f:
ae:cb:15:12:5d:e2:62:50:41:2b:83:df:49:8f:dd:
44:14:5d:15:ff:e0:99:48:ef:1a:e7:7e:8b:fd:6b:
ae:27:5a:e7:91:89:2a:5c:16:9d:5e:fd:82:7e:06:
c1:a7:1f:7b:f5:9f:6d:bf:07:04:87:ed:69:e0:21:
70:a9:e6:f2:23:77:43:4b:ef:b2:26:8e:77:9f:da:
7f:18:6d:a9:00:19:7f:64:4e:8a:36:f4:6a:5f:71:
d5:26:a5:e7:2b:ea:e4:41:28:1c:1c:b9:2b:e5:ae:
f7:4d:b9:54:c6:09:08:8f:b0:ba:b0:f3:bc:26:6f:
95:5f:3f:2e:7d:50:20:ce:fd:9a:36:dd:7e:32:93:
52:6b:2d:10:32:b2:76:c1:bd:7c:5f:89:f9:b7:18:
ea:b5:ca:0f:90:81:b6:40:3c:66:84:16:93:80:07:
03:f5:fa:7b:47:8b:4d:02:2d:8e:54:a0:fc:5b:2c:
3e:17:aa:df:19:38:8a:90:8a:e1:18:0a:0d:14:48:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.68.0/22
185.173.144.0/22
Signature Algorithm: sha256WithRSAEncryption
02:0a:1e:aa:f6:e7:f8:cf:03:13:39:17:0d:9f:b0:be:1e:19:
88:67:ce:d2:da:63:04:69:b4:19:84:e9:ff:d7:e8:85:06:5d:
34:a1:51:61:73:e3:f7:d9:b9:32:05:13:3f:69:21:57:be:3a:
0d:b9:3c:6d:24:5b:f9:63:6a:2a:a9:00:a6:47:0b:c6:27:17:
8d:4c:9a:5f:70:7d:e8:97:c4:ac:56:ef:73:15:3f:6f:36:12:
1a:3c:fa:2b:3f:ad:62:85:22:9a:d0:b8:4f:a9:f7:95:82:99:
c5:85:d8:99:02:fa:e2:27:e6:56:78:9e:79:cb:36:87:59:1c:
ad:d6:13:1b:e5:ed:a4:c4:0d:fd:09:f9:86:17:61:6b:16:fb:
b1:f6:82:27:eb:e6:21:ea:85:bc:87:2e:58:b5:e4:2d:cc:73:
bb:09:f8:66:45:aa:5a:9c:95:7f:8d:db:84:f1:6f:4d:f7:49:
96:49:c7:7f:38:98:c5:84:a3:81:71:5d:f3:68:87:17:bd:07:
c7:43:67:de:7d:c8:64:86:6f:42:23:bb:30:1b:31:6c:4c:22:
37:61:8d:85:60:7c:26:50:88:9b:b1:2f:42:6d:d6:30:55:0d:
01:fb:bc:d0:11:9d:e3:04:7d:41:77:4e:10:3a:d8:f2:70:26:
9a:52:fb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:51 2025 by rpki-client