Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/BkWuwiqlqZzV4TeIPFeXFiDghFw.cer
File: BkWuwiqlqZzV4TeIPFeXFiDghFw.cer (raw, json)
Hash identifier: pkvqqwNxHcUHLoePab/yVRmw/B83ENigO9I0sFkpG1Y=
Subject key identifier: 06:45:AE:C2:2A:A5:A9:9C:D5:E1:37:88:3C:57:97:16:20:E0:84:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A060CE8C92FE12FB8C38C5D532009BC1A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/BkWuwiqlqZzV4TeIPFeXFiDghFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Sep 2026 06:29:04 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 42266
IP: 87.101.32.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:ce:8c:92:fe:12:fb:8c:38:c5:d5:32:00:9b:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 06:29:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0645aec22aa5a99cd5e137883c57971620e0845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:b1:75:c3:80:4a:6b:a4:2a:e1:14:27:27:
a7:14:b5:f0:e0:f3:b1:4d:dd:4b:d2:a0:3a:1e:3b:
b0:1b:bc:c5:ac:5a:31:70:d2:dc:9c:e1:fd:dc:96:
9f:ec:33:d7:b1:76:ab:a1:2d:42:10:42:97:8b:fd:
fd:6b:fa:41:93:e3:f6:92:62:c5:14:75:41:4e:3d:
7f:5b:de:cd:fc:5d:fd:fe:ec:eb:6d:01:54:f0:59:
0b:a5:6e:56:78:31:c8:2c:03:1d:01:d4:ae:bf:56:
cb:3b:7e:87:dd:29:d4:a8:6b:1e:00:b1:7f:bb:fe:
bd:29:06:70:1a:50:01:e4:25:77:0a:b1:9c:19:ec:
d9:c2:8c:c4:7e:f9:8f:f0:a4:d4:ef:1d:28:88:36:
7f:f6:74:76:85:14:00:19:63:b0:fc:b3:45:07:a7:
41:af:bf:fa:74:cb:7d:48:91:f7:23:52:80:a9:40:
8d:d7:76:45:4d:f6:cc:a3:4b:1b:28:f2:12:51:ec:
8f:e5:7c:fc:8c:b8:47:8e:62:20:54:a3:3b:25:95:
0b:ac:67:b9:e7:e4:36:a8:77:b8:ed:4f:fc:fe:6a:
d9:19:d5:c6:8d:cd:fc:fc:e4:8a:23:c6:1d:12:80:
15:35:f3:78:1f:02:3f:53:a9:8b:16:67:2a:5f:27:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:AE:C2:2A:A5:A9:9C:D5:E1:37:88:3C:57:97:16:20:E0:84:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/BkWuwiqlqZzV4TeIPFeXFiDghFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.32.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42266
Signature Algorithm: sha256WithRSAEncryption
53:4f:75:f7:02:1c:9c:c1:49:af:54:99:ff:32:f6:26:30:bc:
32:10:68:53:1c:d6:a5:b6:79:05:ea:1a:cc:02:85:a4:73:d6:
60:b1:a5:69:83:a8:98:ec:1c:25:ff:25:b8:68:40:9b:7b:e6:
5a:e3:05:a8:73:67:06:6c:07:15:1d:37:5b:f0:9c:8e:f8:08:
a1:e8:31:9d:cc:4f:61:5e:83:77:03:31:f6:69:17:c3:06:5c:
4e:0d:b4:e1:cf:2b:46:87:b5:a9:6b:26:79:21:52:2e:a2:ee:
38:1a:aa:90:f0:97:90:76:c8:06:6e:b6:bf:ed:1e:80:ff:9c:
ed:7d:59:78:60:7b:d6:53:07:37:0d:9e:9c:a0:a9:ad:be:59:
cd:53:b1:12:01:58:79:f6:89:a8:f6:82:39:a3:8a:89:a6:b6:
88:03:31:40:4e:73:e6:41:84:9f:82:3c:ba:92:cf:02:c1:6a:
15:4a:d6:bd:31:b7:64:c4:07:23:7b:40:cf:c4:17:a7:92:24:
7e:e1:46:b3:7b:0a:6f:3c:b1:b6:78:cf:09:6d:71:f6:b1:e3:
6a:66:46:d3:5f:e1:cd:bc:8c:72:a6:44:a3:31:73:fb:49:ea:
83:67:9d:68:10:e1:4c:43:19:18:84:fa:1c:5a:1c:ed:35:f9:
61:a4:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:40:21 2026 by rpki-client