Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
File: BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer (raw, json)
Hash identifier: d4jVECXNTcAaMzMrxb5XYmCuCILbe4wu9KQ2cNxhC38=
Subject key identifier: 06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019DC6F7426A1EA0AAC0F817043133771AD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 25 Apr 2026 23:26:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206245
IP: 185.192.40.0/22
IP: 2a06:3a00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:f7:42:6a:1e:a0:aa:c0:f8:17:04:31:33:77:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 23:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:83:d2:c0:a4:bf:c9:1e:be:0c:19:f4:d1:42:
b1:ea:bf:84:3f:37:2f:30:00:05:02:8e:68:ca:d8:
e8:08:01:0b:f9:c0:b8:22:33:46:f1:53:4b:85:2f:
0d:ce:a5:17:78:30:1b:be:f8:c6:6b:2a:69:9e:0f:
ae:49:08:34:7e:9e:51:fa:9c:1d:04:e6:74:0d:22:
99:a1:84:bb:71:e6:42:e4:72:49:24:7b:7b:9f:f1:
45:db:29:a8:4d:6b:4a:72:99:61:8f:ae:be:28:55:
c6:84:06:e2:3a:e7:f7:b3:71:c7:18:d9:65:42:de:
2d:29:73:1e:a7:a7:01:d7:65:af:14:6f:bf:a1:17:
74:c2:ca:9a:b1:80:7e:1e:94:b7:98:93:b6:65:a6:
0f:cc:26:a6:76:b6:2c:5b:35:08:97:32:51:b9:58:
8e:1c:62:f8:b4:e2:0d:be:f0:53:e1:92:39:0f:2c:
ab:2a:8e:8f:95:f2:51:1b:52:a5:87:ed:09:7d:17:
1d:35:23:5e:8b:70:1b:6d:98:92:a1:b4:38:16:08:
74:9b:da:46:b0:33:0d:7e:89:a4:85:54:32:a7:5d:
de:d2:d2:1a:b7:39:c6:64:49:8c:33:f4:5a:49:34:
aa:fb:04:23:d0:25:56:8c:23:e0:45:0c:de:72:bf:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.40.0/22
IPv6:
2a06:3a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206245
Signature Algorithm: sha256WithRSAEncryption
5f:4b:6e:dc:96:f5:cc:45:53:86:24:44:73:e2:70:ec:d0:f7:
d2:4f:c4:a1:d3:9a:c1:da:02:99:e7:7b:ef:fb:89:2a:27:47:
13:37:d0:27:ee:c6:42:e9:42:ee:19:2b:b8:e4:ea:61:0a:69:
5b:f9:aa:1a:02:a6:9d:d0:8d:ce:a4:d7:98:a7:30:b7:e1:31:
e1:14:eb:30:83:15:67:38:05:09:98:0c:8c:90:76:ca:66:45:
47:bb:92:9e:f6:99:bb:40:0a:f2:ba:6e:65:9a:94:4b:5b:fd:
40:cf:00:37:67:79:86:2f:7e:13:60:55:bf:65:24:29:83:5d:
53:81:05:02:38:fe:11:e9:db:9e:ad:14:b9:ff:1f:36:cd:e9:
09:bc:4a:59:0d:0a:23:1e:c3:47:a2:e5:2d:60:d4:5a:f0:a1:
ea:ea:a2:32:1a:99:9b:c6:9f:1e:50:51:88:9c:1a:23:23:8e:
3d:00:79:2b:82:bb:ef:97:89:fa:1a:5f:c9:64:af:14:da:85:
c7:c0:8e:3c:76:7b:ed:23:19:f9:0e:96:22:74:96:a9:37:14:
ef:33:c0:b8:7a:78:8d:3e:a3:9c:83:f1:87:0c:a1:d1:41:68:
22:be:6c:3d:9c:46:c1:00:d9:1c:0f:e0:a6:f9:f1:be:9e:b3:
14:4f:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:07:44 2026 by rpki-client