Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer (raw, json)
Hash identifier: XPTXrpMHcdn3Jx+ldaa91D9kHN7UYjfVjVtuWMKFCf8=
Subject key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7C80B8447ECB4E950E008AC65D7D0FE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 02:19:29 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.50.117.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:b8:44:7e:cb:4e:95:0e:00:8a:c6:5d:7d:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:cb:d9:74:95:f3:5e:2f:e3:9d:71:9d:9d:
d1:8c:53:df:61:fa:5b:62:ee:af:a1:59:51:36:54:
55:51:21:75:b0:c5:1d:4f:ac:b6:d7:c5:ec:e0:7c:
dd:f6:12:34:da:db:a1:b4:1b:dd:f3:6b:8c:b9:21:
f7:e2:1b:7b:bf:4a:d4:6c:84:7c:bb:1a:85:f9:f5:
bb:df:df:9e:5e:d9:49:9f:94:30:08:f5:9a:23:a0:
7d:c8:6a:37:b8:0c:a2:b1:8c:65:31:94:55:1d:b6:
05:47:0b:24:54:37:38:99:10:30:e2:6a:fa:c3:45:
b5:eb:49:2e:d0:cf:39:fd:8e:bb:97:8d:20:d1:a4:
73:dd:d8:3c:af:4b:58:30:1a:14:7b:5a:22:4d:32:
51:1f:f7:30:17:29:b5:db:5b:1c:89:8b:0c:4d:81:
d7:7d:9b:78:48:87:02:75:b9:91:94:d8:d9:70:86:
d1:dc:27:d6:78:47:a4:b8:a4:e0:1e:51:08:ad:10:
3e:0f:08:f0:38:18:7c:21:b4:c0:35:bb:e7:10:e7:
cf:b9:d0:d2:bd:b2:46:2b:fe:63:53:75:1d:ae:95:
56:95:0f:16:92:6a:a2:a2:22:71:67:be:c9:e1:b3:
3f:de:6a:cf:5a:e2:26:b2:08:15:85:88:45:06:27:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.117.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2b:04:6e:7d:37:23:dd:9e:c1:9c:ce:2b:6d:ac:ea:58:5d:
38:4b:a5:b0:57:b8:c3:cf:dc:41:ed:32:cf:55:c9:1f:f0:d4:
a7:44:fe:bc:a6:be:fb:61:98:e6:92:51:1c:ca:7f:42:75:0b:
e5:b1:e5:d5:4c:bc:1a:27:0d:50:2a:37:22:9a:94:4d:bd:6d:
fe:94:a7:82:ba:a4:0a:f0:cc:98:05:19:8e:0f:74:84:a1:57:
a8:8d:77:f0:20:54:87:51:31:b9:39:91:ab:37:72:e7:d3:94:
4c:5b:bf:f5:08:3c:38:ab:b2:0b:a2:30:07:8c:36:88:0a:f1:
a1:fa:d2:83:0d:da:18:48:6e:8a:71:92:6c:a2:5a:83:01:01:
bb:a6:f2:36:f3:5b:59:5f:da:55:a6:79:bc:f1:1d:ce:92:a1:
cf:df:d8:5a:c3:ef:e2:9e:58:1d:39:22:e0:d2:44:2e:f7:2d:
3e:e9:f8:4d:ae:54:12:be:57:f9:e4:70:00:48:93:6a:6c:ae:
a3:4c:ca:fb:4c:0d:94:a7:aa:d0:8d:cb:d5:23:98:e9:27:26:
c1:5e:7e:6e:f2:e6:a4:a5:07:60:bc:99:7e:36:8a:74:16:ec:
c0:ef:36:93:3a:53:c4:cf:95:4f:e0:cb:d6:e4:76:ea:a0:23:
fb:45:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:00 2026 by rpki-client