Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
File: bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer (raw, json)
Hash identifier: +pXPQ2yEL+2Sv2QMOfwyy0fuinHCfmqJjTezIvEpT3Q=
Subject key identifier: 6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0C7E3CFE21B38C5B0775402B03DDA4FB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 06:53:10 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.37.225.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e3:cf:e2:1b:38:c5:b0:77:54:02:b0:3d:da:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 22 06:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:78:b9:cf:04:ae:0b:b6:1b:ea:7c:68:3b:
36:29:17:a8:37:ef:34:af:55:52:52:bb:18:61:c9:
29:fc:76:fa:63:ed:1d:cb:0a:76:51:e4:c2:75:9e:
57:18:10:e5:41:43:46:ac:3e:72:31:0a:f8:e7:e1:
94:df:8f:41:b9:6d:6b:19:fe:aa:fd:09:93:ff:fe:
16:6b:86:06:02:b5:ce:2a:5a:05:ce:9e:d8:7f:9a:
87:d6:8f:dc:4f:c8:34:18:7b:d6:b3:e2:d6:01:ec:
a5:03:2a:b0:85:d7:2f:cd:55:41:7d:a7:f4:9c:da:
c3:79:87:d3:09:f5:1d:25:a2:3e:f9:ef:d7:85:f4:
48:75:85:71:76:da:7e:8e:25:25:52:69:33:60:b4:
6b:0c:98:80:1a:d7:b0:ba:53:0f:ca:df:9d:9c:53:
c0:75:94:a1:97:bc:85:0f:89:69:0f:1c:90:74:7d:
5c:95:8f:e8:8d:33:a7:7a:c2:f9:81:3d:7f:23:e6:
78:0a:f0:e1:89:69:07:03:e4:36:9b:80:ec:80:91:
fc:71:f2:d6:7a:d0:b9:8f:79:92:69:ff:fd:20:a1:
65:63:e5:0e:77:52:c1:75:20:0e:d2:97:c3:70:43:
6d:30:96:c8:2e:18:29:c2:2d:51:75:57:e5:5d:7e:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.225.0/24
Signature Algorithm: sha256WithRSAEncryption
64:19:74:b5:9f:fb:f3:53:a3:b7:a4:19:de:cb:2a:2f:bf:0e:
fa:ae:ac:ea:ed:70:7c:fa:37:de:5a:9b:e2:6a:5c:6e:31:dd:
cf:c5:90:23:88:1f:3a:c8:45:e4:46:66:5a:4d:66:d8:1f:b7:
34:94:37:e4:ad:89:2c:8b:65:d4:8e:ee:e7:d7:4b:54:04:e9:
7b:87:a5:8e:c9:36:f2:2b:e7:36:fa:4d:12:ac:e5:49:38:29:
59:f0:b2:9e:f7:22:5d:3c:fe:05:44:87:e8:df:dc:8a:20:d1:
49:a5:df:d1:a5:0d:93:86:2a:a9:44:7f:ce:5c:a7:fa:ec:a7:
ee:32:00:2f:d7:c2:ba:fc:6d:4e:a0:f7:0a:5f:10:79:36:53:
a9:ba:a2:21:e2:6a:e6:df:32:f8:6a:b7:fc:5d:58:6a:41:90:
93:d6:f6:f5:29:c7:6c:0c:a4:4e:4f:9d:7a:4e:54:2d:71:4c:
68:a8:e9:4b:5c:a4:bb:19:70:fd:51:25:eb:8c:01:45:60:35:
84:dd:f0:be:b5:6a:2f:a9:c7:4a:b5:13:23:3c:a4:73:1b:78:
18:e1:4d:1b:7c:7a:9e:13:1b:f7:a5:42:86:38:e5:ed:25:b5:
a8:6c:45:bc:2f:67:b8:dd:33:be:4d:72:68:c8:bf:79:fd:6b:
50:44:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:44:56 2026 by rpki-client