Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_BirNMWiEorErlXBr23vZTSzgR0.cer
File: _BirNMWiEorErlXBr23vZTSzgR0.cer (raw, json)
Hash identifier: Ew0vKTrT9xwie3eYwYS/QKAosl00+tnzGxFBtx7BePs=
Subject key identifier: FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B79ECEB62A1881B348A87D274CFCF1A3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 14:18:48 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 203742
IP: 185.125.132.0/22
IP: 2a06:bb00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:eb:62:a1:88:1b:34:8a:87:d2:74:cf:cf:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc18ab34c5a2128ac4ae55c1af6def6534b3811d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:5a:20:15:0b:54:4f:2f:28:a6:fe:4f:00:
0c:fc:6f:c9:4b:d4:cf:ed:46:77:66:d9:85:7d:73:
e4:cf:97:ea:7f:1a:28:42:5f:3b:80:19:bf:dc:ef:
12:94:01:88:f5:3b:ee:e0:e7:be:87:ea:e6:29:83:
08:41:0d:00:81:6c:25:b9:33:ec:36:da:09:a7:5e:
eb:72:da:9f:22:94:65:70:15:52:a3:ad:70:0e:e6:
35:bc:cc:c7:60:49:20:e5:3a:71:f3:82:3a:a2:83:
03:5f:12:9d:fc:98:ed:16:67:ed:8c:bd:a0:34:22:
fd:fb:f0:76:da:46:d3:4e:63:6a:7d:36:ff:92:2b:
e0:9d:d1:04:4e:b0:b2:15:6b:1f:05:67:b1:df:17:
39:a6:ee:34:76:c6:f5:2e:b6:9b:36:f4:26:e2:9c:
e3:13:30:28:8f:47:3b:d5:6b:bb:dc:b2:97:c7:7e:
52:3d:27:2b:3e:c6:69:5f:b8:bd:c4:17:97:7f:f7:
68:b0:1c:61:23:8c:5d:99:ef:10:09:a3:2c:57:d0:
fd:f3:93:fa:83:d9:e2:14:f6:20:94:0a:8d:75:69:
02:fd:68:73:21:d1:41:97:94:be:9b:67:42:19:dc:
fa:13:0f:ec:53:ab:53:3d:8e:79:39:08:8d:9b:19:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:18:AB:34:C5:A2:12:8A:C4:AE:55:C1:AF:6D:EF:65:34:B3:81:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7667be-9670-4701-99f0-a7814fc46e65/1/_BirNMWiEorErlXBr23vZTSzgR0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.132.0/22
IPv6:
2a06:bb00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203742
Signature Algorithm: sha256WithRSAEncryption
35:0a:81:6b:c5:7b:66:c8:48:a8:fc:70:a8:a6:8e:0f:fa:41:
05:47:e8:49:ce:fd:24:68:3b:ed:ee:85:18:dd:30:be:8d:22:
0d:3e:27:00:29:40:f6:e6:d2:b3:60:a4:1c:bd:de:47:6b:b9:
53:cd:d5:36:97:60:63:7c:9d:c8:b6:3c:ff:02:63:a3:a6:1a:
33:af:f7:6a:6c:51:41:88:0f:df:f9:23:02:f8:73:83:ab:05:
17:9b:41:ec:07:02:01:0d:06:fb:55:02:e7:a4:4e:33:f6:03:
1c:ec:95:69:1a:3b:0b:2c:9e:e4:93:26:c3:87:5c:93:f3:33:
34:56:69:a1:f5:d4:fb:90:54:7b:ff:08:0d:98:a7:2f:97:0f:
e8:76:9a:26:9b:0d:a1:41:c4:6c:b7:a8:64:a7:f2:8a:ca:f7:
07:d8:7d:e1:0e:89:27:76:78:5a:6a:64:7e:e4:a5:b5:0e:d3:
be:88:24:b6:41:cd:c7:14:2c:23:b3:f1:34:75:7c:5d:0f:ac:
b7:d5:11:4e:18:a5:8c:bc:d4:fe:81:23:69:51:af:8c:19:09:
5c:4f:74:5d:8d:7c:da:c1:8e:86:d0:df:2e:ec:ad:8c:03:80:
35:dc:fb:fc:7e:f3:37:1f:58:3d:a6:6f:a8:cd:9b:27:d6:d4:
68:9b:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:30 2026 by rpki-client