Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
File: bI0-HD8Fey_LtJrgMEReEurgsw0.cer (raw, json)
Hash identifier: QuUGzCVJnkrnAPY7hSGUoXI3lRpT5CrfWrxfAcePcBs=
Subject key identifier: 6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FA1112508F7661B16E22A97BFDEB02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:41:09 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.8.181.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fa:11:12:50:8f:76:61:b1:6e:22:a9:7b:fd:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:41:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:02:27:bb:8b:e4:1f:c8:fc:76:dc:c4:6c:
a5:fb:59:9e:ea:d0:1b:9d:ad:5c:89:bd:56:9e:e0:
6e:7e:43:c1:db:47:77:2d:3e:a1:6d:4d:d8:3d:7a:
18:2a:0f:b1:3e:c3:da:7e:40:4b:b8:c4:2f:c1:48:
7e:74:55:ef:32:b0:90:93:49:56:ba:21:46:9f:91:
d7:81:cb:31:98:e2:c7:f3:d7:f6:fd:e2:a1:de:c3:
76:33:58:2a:b2:c4:3f:db:b5:d6:46:4f:29:11:11:
45:ef:93:c0:95:0b:c4:ca:97:c5:0f:5b:c0:5a:d0:
7c:22:dd:02:97:5e:e4:96:ed:58:82:af:2f:4d:32:
6b:58:f4:f9:40:da:e6:c5:b8:65:b1:8d:13:f0:2e:
8e:2c:40:3c:cf:e4:50:e3:02:df:3a:7d:b9:df:6e:
14:35:dd:8c:80:d5:1f:28:30:59:75:e5:9e:9e:71:
b1:6f:0c:27:d9:13:30:94:ea:87:a6:06:83:a3:5b:
3b:b2:b6:97:37:25:93:96:ea:da:09:06:d3:fd:5a:
5a:07:4f:bd:36:9c:48:42:3b:e3:79:82:3c:92:35:
3c:24:e7:70:61:0e:ae:aa:d0:2c:47:de:f9:d4:00:
22:35:10:45:ad:ff:8c:d7:c0:2a:96:1a:a6:3b:92:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.181.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8c:0e:64:2e:a3:f2:2d:d7:b1:87:b5:b0:09:0a:16:d9:fb:
fb:f8:e8:a9:8d:82:29:27:2a:07:27:77:a5:25:cb:45:6e:3c:
68:0a:e5:68:be:c8:9c:67:b7:ac:e2:86:b3:49:35:86:3f:5f:
8c:2f:4e:24:5c:2d:ca:3b:45:3a:23:96:98:83:5a:40:28:92:
06:ce:29:8e:2e:cd:7d:b6:83:ad:c4:09:1d:62:ee:59:8a:5e:
1d:09:75:3d:3c:22:d6:89:7c:31:7f:24:fe:4c:f9:75:42:04:
d8:00:54:ee:49:b5:1e:98:76:8c:55:14:7f:23:87:22:b3:b8:
16:35:be:eb:72:e2:a8:d2:90:9c:8f:53:ea:46:40:eb:2c:bd:
6b:9d:54:b4:c4:15:6d:66:19:af:06:89:43:45:a0:bf:ef:76:
73:91:9f:2c:8e:77:e5:54:3a:0a:f0:ab:ae:74:7b:b1:e8:5e:
eb:a5:20:b7:92:fd:e4:ef:6b:0d:ed:b2:75:2e:b4:ef:71:aa:
53:4a:64:b1:54:78:75:c6:36:2e:b5:b8:6c:71:1b:67:f5:05:
54:40:41:a4:dd:fe:df:ae:f2:9f:50:cb:2e:0a:04:9d:4e:0d:
cf:43:0b:fc:47:7f:7b:dc:d5:36:41:32:e0:a0:39:fa:9b:a6:
e9:c1:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:32 2026 by rpki-client