Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BWI7XxpkurkqlS0sw26EuDAXRis.cer
File: BWI7XxpkurkqlS0sw26EuDAXRis.cer (raw, json)
Hash identifier: Nvwb9wSafm0nUDvYpNCEEOQvFbLipOnhMlbrXXsetQA=
Subject key identifier: 05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB0770600C9BAE16510A9D8787D4A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:12 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212476
IP: 193.3.31.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:07:70:60:0c:9b:ae:16:51:0a:9d:87:87:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05623b5f1a64bab92a952d2cc36e84b83017462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:fc:d1:47:ab:69:df:ec:91:8f:a0:80:5c:
df:d7:7e:97:54:1b:c3:92:ee:13:7c:5f:df:a9:1b:
3f:8f:fc:5d:6a:99:65:bf:c4:13:19:44:b7:fb:b7:
1e:60:36:a6:00:ce:37:2f:72:96:49:63:b3:5a:59:
1b:fb:5a:a6:e2:ba:8b:d0:fd:eb:d6:42:a5:72:32:
50:cf:b8:3f:69:f2:4f:28:14:ad:8f:de:84:b4:c7:
96:83:29:ef:b8:22:ff:1c:b0:cd:ce:ef:e7:c5:bd:
22:39:b6:55:2f:2b:84:be:74:87:8b:35:ed:ac:09:
81:61:8f:44:59:b8:e6:c0:30:d6:d9:fa:47:b8:dc:
31:d7:59:13:4f:7c:63:2c:7e:63:f7:f0:6d:f4:6e:
d9:6e:2b:65:b3:a2:1c:58:90:11:ba:9a:fd:bf:57:
2f:c2:16:52:6f:e2:51:e0:1c:e7:de:1b:42:13:35:
de:92:7d:af:61:8d:1b:af:99:8b:e4:9c:a1:79:51:
f5:57:a8:eb:56:8c:97:66:95:df:f7:c7:e9:c1:22:
32:69:1b:0f:29:6e:0f:67:fb:6e:99:2b:d9:5f:d9:
e2:ac:9f:8c:0b:f3:b5:4c:88:7c:4c:d7:18:93:63:
ce:e8:82:88:b5:59:66:e6:57:c7:66:87:a3:5e:7e:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:3B:5F:1A:64:BA:B9:2A:95:2D:2C:C3:6E:84:B8:30:17:46:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/BWI7XxpkurkqlS0sw26EuDAXRis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.31.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212476
Signature Algorithm: sha256WithRSAEncryption
00:30:00:ca:ca:a0:2a:d6:f6:bb:f8:b9:a2:90:d9:14:81:7a:
f6:de:d7:61:ed:73:84:45:29:15:65:5c:6d:a4:b4:46:b4:87:
0d:c5:c6:5e:76:82:0f:a1:d0:92:f1:ba:a7:c8:74:31:bd:f5:
a3:d9:66:0c:8a:be:f0:11:46:55:8f:de:a7:40:ba:17:be:88:
cc:78:8c:ea:25:48:7e:0d:de:30:98:99:8c:9f:47:3c:30:67:
6a:56:ff:98:1b:18:2e:24:3b:bb:a3:73:fc:9e:34:61:97:65:
9e:1f:59:80:b9:28:f2:d9:58:34:a2:09:0e:1a:0d:34:f0:9f:
13:a4:76:10:18:8e:23:2d:18:7f:f5:93:b5:90:c1:ce:0e:f7:
93:48:8a:03:b3:b1:08:c0:4c:8e:80:61:2b:03:1d:0b:61:a2:
ca:f2:79:1f:56:61:33:28:7e:07:99:98:57:60:25:70:6d:1c:
14:d3:1c:eb:cd:91:72:2d:7a:b0:84:80:96:fb:24:95:43:ef:
e8:41:3d:58:be:13:d0:26:c3:17:48:d6:88:b3:30:86:f9:76:
63:c7:d1:2a:8f:3f:bf:d0:e5:52:f8:da:82:e4:78:b2:a7:0e:
37:f6:65:15:72:4e:38:c3:de:02:cf:ab:ea:4d:75:a1:ac:09:
c5:99:7b:b0
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZ8Y+wdwYAybrhZRCp2Hh9SoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwNjMwMTQ0MjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTYyM2I1ZjFhNjRiYWI5MmE5NTJkMmNjMzZlODRiODMwMTc0NjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxz80Uerad/skY+ggFzf136XVBvD
ku4TfF/fqRs/j/xdapllv8QTGUS3+7ceYDamAM43L3KWSWOzWlkb+1qm4rqL0P3r
1kKlcjJQz7g/afJPKBStj96EtMeWgynvuCL/HLDNzu/nxb0iObZVLyuEvnSHizXt
rAmBYY9EWbjmwDDW2fpHuNwx11kTT3xjLH5j9/Bt9G7Zbitls6IcWJARupr9v1cv
whZSb+JR4Bzn3htCEzXekn2vYY0br5mL5JyheVH1V6jrVoyXZpXf98fpwSIyaRsP
KW4PZ/tumSvZX9nirJ+MC/O1TIh8TNcYk2PO6IKItVlm5lfHZoejXn5luQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAViO18aZLq5KpUtLMNuhLgwF0YrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzIyMGNl
NC0xMWEzLTRkOTItYTQ4OC1jMzk0N2U3NmJlNzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMjIwY2U0
LTExYTMtNGQ5Mi1hNDg4LWMzOTQ3ZTc2YmU3NS8xL0JXSTdYeHBrdXJrcWxTMHN3
MjZFdURBWFJpcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwQMfMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM9/DANBgkqhkiG9w0BAQsFAAOCAQEAADAAysqgKtb2u/i5opDZFIF69t7XYe1z
hEUpFWVcbaS0RrSHDcXGXnaCD6HQkvG6p8h0Mb31o9lmDIq+8BFGVY/ep0C6F76I
zHiM6iVIfg3eMJiZjJ9HPDBnalb/mBsYLiQ7u6Nz/J40YZdlnh9ZgLko8tlYNKIJ
DhoNNPCfE6R2EBiOIy0Yf/WTtZDBzg73k0iKA7OxCMBMjoBhKwMdC2GiyvJ5H1Zh
Myh+B5mYV2AlcG0cFNMc682Rci16sISAlvsklUPv6EE9WL4T0CbDF0jWiLMwhvl2
Y8fRKo8/v9DlUvjaguR4sqcON/ZlFXJOOMPeAs+r6k11oawJxZl7sA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:01 2026 by rpki-client