Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjcCShgkPkX40Eqtrr66kKVp6IM.cer
File: BjcCShgkPkX40Eqtrr66kKVp6IM.cer (raw, json)
Hash identifier: 6RFBSMWuDoIQFOtOL/XDFkJErdY7IYFfT0WcHoDzolI=
Subject key identifier: 06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019768B95E95AADD4005E001A7100D0A42D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 13 Jun 2025 09:57:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197552
IP: 91.218.164.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:b9:5e:95:aa:dd:40:05:e0:01:a7:10:0d:0a:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 13 09:57:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0637024a18243e45f8d04aadaebeba90a569e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:51:cc:30:58:5b:a8:02:64:2e:2e:21:11:
c5:42:4d:48:a1:c3:f0:f8:a9:be:6e:6a:1a:58:79:
cf:71:3f:e5:c7:a9:cd:13:67:69:13:bf:ab:55:b8:
3f:39:6a:b5:8d:63:77:3f:6a:bd:7a:eb:a6:cf:52:
04:54:7e:47:1a:ee:ed:2d:5d:11:cc:cc:fc:ee:27:
64:ad:a7:65:81:8d:88:5f:7f:7b:06:c2:49:fb:f7:
d4:a6:de:5e:d9:70:fa:9d:a7:d7:c2:ef:46:2a:16:
66:84:17:ac:40:ba:65:23:8d:e8:dd:6e:dd:00:ec:
59:60:45:0f:f6:0f:1a:0c:d0:80:c2:8d:68:e3:8f:
dc:ac:33:41:f0:ba:16:36:3f:2d:54:ce:3e:cd:4e:
52:4c:c9:d7:58:b9:43:88:4e:24:2e:65:dc:78:fd:
0a:b4:57:94:f5:2d:f4:0a:c6:be:ad:2c:d0:cf:27:
8e:95:1f:17:b3:3e:ba:25:8d:eb:8d:a1:c3:33:b8:
d7:6f:d9:97:c7:1f:80:56:51:97:d2:9a:e8:c5:79:
2b:c8:aa:4b:3e:88:43:f4:5a:e9:1a:a0:37:5b:05:
05:47:f1:bd:bb:d2:cb:03:dd:cf:52:e6:dc:4d:d6:
c1:a3:e2:86:60:9f:05:15:43:f1:a5:dd:62:de:17:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:02:4A:18:24:3E:45:F8:D0:4A:AD:AE:BE:BA:90:A5:69:E8:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/9730d4-4f7d-4943-b9fb-7d94a94e3312/1/BjcCShgkPkX40Eqtrr66kKVp6IM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197552
Signature Algorithm: sha256WithRSAEncryption
00:16:7d:24:8b:5e:a8:4b:b2:c2:75:09:40:c3:42:95:36:34:
95:58:8e:0b:2d:8c:75:d3:30:7b:8d:78:57:ef:30:67:00:e9:
e6:ed:98:81:ed:d4:51:26:3c:3f:65:d4:09:ef:17:db:82:6a:
c0:5d:d6:1e:72:57:b8:ea:26:55:59:7e:d0:a9:43:0b:ef:a9:
5d:97:40:bc:d1:c1:de:21:28:4d:ec:b2:a0:09:1d:84:94:bf:
68:89:4a:64:40:ec:bc:b1:81:5e:c0:f2:12:a2:a5:f5:55:c3:
49:cd:c0:ce:c0:8a:d6:ac:df:58:d4:fe:b6:a1:9f:ef:28:7e:
d1:84:44:cd:07:0f:7d:d9:09:8a:86:62:c8:04:7d:1a:06:a5:
5f:26:ed:29:bd:e7:ea:64:a8:ae:6c:b7:e4:b3:ef:2f:9f:7b:
14:42:49:35:a9:b8:c0:d7:39:ed:f1:75:43:fb:b0:c0:50:70:
35:b3:e5:cd:54:fa:68:a7:1c:62:7c:29:7b:da:e7:c5:10:d8:
b0:e8:53:f3:67:24:21:8d:fe:04:b5:8c:e8:43:1d:f7:0f:2b:
64:fb:31:9b:f6:4e:f2:13:1a:5d:11:15:c4:90:93:9d:1f:1b:
90:66:96:1f:fe:d4:c7:4d:87:93:9f:64:fd:3c:38:6d:ae:6b:
4c:e0:58:2c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZdouV6Vqt1ABeABpxANCkLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNjEzMDk1NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjM3MDI0YTE4MjQzZTQ1ZjhkMDRhYWRhZWJlYmE5MGE1NjllODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdBRzDBYW6gCZC4uIRHFQk1IocPw
+Km+bmoaWHnPcT/lx6nNE2dpE7+rVbg/OWq1jWN3P2q9euumz1IEVH5HGu7tLV0R
zMz87idkradlgY2IX397BsJJ+/fUpt5e2XD6nafXwu9GKhZmhBesQLplI43o3W7d
AOxZYEUP9g8aDNCAwo1o44/crDNB8LoWNj8tVM4+zU5STMnXWLlDiE4kLmXceP0K
tFeU9S30Csa+rSzQzyeOlR8Xsz66JY3rjaHDM7jXb9mXxx+AVlGX0proxXkryKpL
PohD9FrpGqA3WwUFR/G9u9LLA93PUubcTdbBo+KGYJ8FFUPxpd1i3hcLuwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAY3AkoYJD5F+NBKra6+upClaeiDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3Lzk3MzBk
NC00ZjdkLTQ5NDMtYjlmYi03ZDk0YTk0ZTMzMTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvOTczMGQ0
LTRmN2QtNDk0My1iOWZiLTdkOTRhOTRlMzMxMi8xL0JqY0NTaGdrUGtYNDBFcXRy
cjY2a0tWcDZJTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCW9qkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMDsDANBgkqhkiG9w0BAQsFAAOCAQEAABZ9JIteqEuywnUJQMNClTY0lViOCy2M
ddMwe414V+8wZwDp5u2Yge3UUSY8P2XUCe8X24JqwF3WHnJXuOomVVl+0KlDC++p
XZdAvNHB3iEoTeyyoAkdhJS/aIlKZEDsvLGBXsDyEqKl9VXDSc3AzsCK1qzfWNT+
tqGf7yh+0YREzQcPfdkJioZiyAR9GgalXybtKb3n6mSormy35LPvL597FEJJNam4
wNc57fF1Q/uwwFBwNbPlzVT6aKccYnwpe9rnxRDYsOhT82ckIY3+BLWM6EMd9w8r
ZPsxm/ZO8hMaXREVxJCTnR8bkGaWH/7Ux02Hk59k/Tw4ba5rTOBYLA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 16:09:15 2025 by rpki-client