Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer
File: BlYcOCHjkaqkkT2x2KqSvyIyUS8.cer (raw, json)
Hash identifier: 0VKhsMIR6l0zGFH3xgwIBCfVNA5v+pqba6406vFOkTw=
Subject key identifier: 06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D1A28D52A3013504B3D986360A9BAF8AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Mar 2026 10:06:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208226
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:28:d5:2a:30:13:50:4b:3d:98:63:60:a9:ba:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 23 10:06:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06561c3821e391aaa4913db1d8aa92bf2232512f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:b8:70:ab:3f:07:99:9b:c3:9d:47:93:bd:
8b:b8:1f:7a:06:1e:03:be:ca:ae:47:e5:74:4f:7e:
e7:a1:0f:2f:a3:1e:77:c3:2d:71:ae:3d:70:e8:88:
b7:63:9f:4d:d9:22:0b:2b:5d:d8:39:a0:08:29:af:
04:96:6c:c4:20:5b:72:ea:ce:c2:0d:af:d8:40:62:
f7:65:fe:61:51:a5:01:53:23:d3:2a:a1:57:b5:c9:
f6:44:94:1c:5f:3a:4b:ce:bd:14:c9:65:e4:56:8d:
50:0f:6a:47:62:69:a4:f3:0f:9a:f5:3e:4e:bd:d9:
f7:53:bb:c7:f1:ca:ec:ee:61:20:d1:ae:8b:0f:03:
68:d2:43:25:2d:5d:32:ee:2a:3e:8a:8d:6c:50:cc:
ea:00:0b:4c:4b:86:5c:22:c8:dd:c0:79:74:2f:a6:
3c:6f:f4:49:ed:54:4b:25:aa:24:c1:21:84:8f:9d:
0c:63:ad:fc:a0:72:88:84:77:19:69:f1:5a:1c:02:
e0:45:3d:eb:ea:e2:40:ae:5b:d9:9c:e0:10:dc:99:
9f:5f:51:b4:50:8b:87:69:9d:12:66:06:22:9f:f6:
68:fa:6f:87:ca:2c:19:7e:82:85:60:4d:c3:00:26:
a1:77:bf:d5:ee:a2:76:70:e5:87:da:04:32:89:ce:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:1C:38:21:E3:91:AA:A4:91:3D:B1:D8:AA:92:BF:22:32:51:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/396167-b670-4e37-87de-5bf597ccf3ac/1/BlYcOCHjkaqkkT2x2KqSvyIyUS8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208226
Signature Algorithm: sha256WithRSAEncryption
a8:9d:b2:61:9b:00:d6:c8:76:f3:b8:0c:d7:d2:40:2f:8e:24:
eb:a1:ed:6b:6e:da:12:d4:14:d1:00:5b:9f:f3:19:8e:54:dc:
1d:47:1a:6c:74:ac:11:4f:ce:9a:38:bc:cf:9c:92:42:25:59:
d8:73:27:a6:5e:b6:e6:66:0c:0f:24:27:45:45:a7:de:1c:10:
fd:b7:64:9e:3b:07:78:2e:85:2c:0d:28:c6:70:1d:8b:28:73:
6a:76:51:60:8b:62:0c:e3:45:2f:61:83:3d:30:b0:dc:ee:b7:
db:56:6b:53:41:3e:ca:31:65:54:e7:f7:b8:68:f5:a9:82:31:
14:34:f8:84:80:04:14:49:14:14:4a:b2:5e:63:e6:b8:5a:7d:
f5:d5:1a:7e:93:dc:ac:17:ed:41:6a:4c:9d:10:d4:11:91:27:
99:fd:77:00:c4:0e:70:d4:e2:d1:ad:c5:f6:12:07:99:ca:96:
ad:e2:05:78:42:87:f2:72:d0:08:e5:05:93:c8:ca:94:31:ed:
b9:d9:fa:d8:b5:93:fe:33:67:a1:29:89:ca:c2:67:b3:1b:ea:
45:0c:aa:36:57:9a:37:ac:73:6f:63:06:4b:60:e9:f4:86:45:
1e:70:22:68:b6:ea:6a:51:43:f6:bd:5e:7a:c9:91:e6:1a:0b:
89:b0:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:45 2026 by rpki-client