Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BvhAXSjMa31lSfWlKcW2V4aJnYc.cer
File: BvhAXSjMa31lSfWlKcW2V4aJnYc.cer (raw, json)
Hash identifier: mt1h1dZY2UhtiqsQPGkAlInwt5vl2eZ4op6FTD/TfeM=
Subject key identifier: 06:F8:40:5D:28:CC:6B:7D:65:49:F5:A5:29:C5:B6:57:86:89:9D:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FAC0FAAEAB26EDC5E396161B4C5A3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:54 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212709
IP: 91.208.9.0/24
IP: 193.200.231.0/24
IP: 195.137.181.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:c0:fa:ae:ab:26:ed:c5:e3:96:16:1b:4c:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06f8405d28cc6b7d6549f5a529c5b65786899d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f2:26:29:d5:9a:5c:38:f8:16:92:2b:ab:e9:
6b:3c:de:76:ba:74:f0:ac:5c:93:1f:68:15:36:a5:
81:84:52:d7:6b:67:ae:8c:c8:c7:16:b1:bc:63:e6:
65:99:97:b6:b9:21:55:81:60:9b:2a:b5:8f:7a:88:
00:73:21:c2:12:3c:af:07:59:a5:4e:60:9d:c5:f1:
7b:bf:ce:68:86:7e:bf:6e:7e:f9:87:d4:8f:61:5a:
6f:75:74:f0:a3:c0:4a:88:b6:37:ea:e9:27:b5:df:
e3:86:4c:d3:71:cb:b2:33:a7:8e:a3:14:b2:3c:69:
bf:11:db:0f:a5:bb:b5:f9:59:08:92:2e:3e:d0:73:
3e:fa:d4:44:98:33:ea:7e:6f:8c:cd:1e:3f:a1:26:
dc:69:d3:dd:24:ee:39:b5:1b:66:84:21:18:8b:3e:
05:6b:c4:f1:20:d5:9f:be:35:1c:cf:3d:3f:cd:97:
58:74:5e:d6:8c:47:bb:c1:e2:08:ee:4e:b6:47:7c:
74:80:33:2a:bd:63:7e:d4:0f:11:08:7c:3c:06:27:
98:d7:85:11:a3:25:85:6f:7c:84:9b:22:5c:13:4a:
e5:b4:bb:0e:64:99:53:5c:7a:d5:10:e9:fc:5f:c3:
36:1e:33:29:0a:61:43:90:b3:98:49:5a:9e:bf:ee:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:40:5D:28:CC:6B:7D:65:49:F5:A5:29:C5:B6:57:86:89:9D:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/BvhAXSjMa31lSfWlKcW2V4aJnYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.9.0/24
193.200.231.0/24
195.137.181.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212709
Signature Algorithm: sha256WithRSAEncryption
14:3e:53:1c:20:96:d1:6a:87:44:4f:a0:e1:66:e6:53:c6:36:
8b:5b:be:b0:5c:46:d8:97:2e:91:4f:db:99:37:20:67:8a:3b:
12:17:82:e7:60:64:f8:fa:eb:ba:df:87:cf:84:8a:9e:31:42:
43:8c:4d:cb:94:6d:a3:20:f9:e1:82:bd:d5:1c:c6:4a:42:61:
af:bc:34:64:0b:ac:39:e2:9c:47:a8:c4:1d:91:04:83:dc:29:
65:91:43:85:4b:80:79:26:80:61:b8:f9:aa:c9:59:18:f5:c9:
53:f3:f4:77:ad:0f:79:07:6e:f2:d4:6e:52:c1:e8:77:f9:75:
a1:dd:2e:b6:f5:e9:ec:63:fe:db:7c:d1:e1:1f:6a:1d:dd:80:
43:c5:da:97:89:df:8e:a2:58:ae:f8:0e:20:0f:ba:95:70:a9:
67:25:17:6d:21:30:29:02:19:cc:17:29:a0:e3:82:ca:92:bd:
3d:45:94:43:44:30:e5:19:85:f9:e9:4e:eb:df:34:6f:82:fb:
32:db:2d:2d:a5:95:42:84:84:68:3f:a4:da:7f:ca:be:24:84:
ca:1b:37:10:b5:b1:a6:27:93:c0:81:1e:d1:18:53:f7:d3:ee:
81:41:fa:bd:44:ff:34:9e:fa:48:a2:90:1c:7f:dc:4d:e8:b9:
56:86:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:27 2026 by rpki-client