Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BNhWAsroYaFGaoWobO-1rLA4qxI.cer
File: BNhWAsroYaFGaoWobO-1rLA4qxI.cer (raw, json)
Hash identifier: wnBwF8Xi49AXsOsLX8cU4ccr7xuWgO1NPGG47CLrxlE=
Subject key identifier: 04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EBAAE9503443B332C4AFB2CB4B98223E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 12 Jun 2026 07:14:24 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 208459
IP: 45.135.140.0/22
IP: 2a09:9c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:ae:95:03:44:3b:33:2c:4a:fb:2c:b4:b9:82:23:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 07:14:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04d85602cae861a1466a85a86cefb5acb038ab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:b3:25:00:96:23:53:c5:7e:3a:5f:67:36:
25:72:2e:33:63:bc:6f:7e:ef:db:64:cd:a5:73:99:
96:15:2f:e5:87:e0:2f:87:97:10:f6:bc:12:48:01:
a9:cf:46:3e:1c:37:89:8f:67:61:ab:8c:fe:29:3a:
57:e5:18:6c:22:b1:13:41:a5:15:06:d9:9e:a6:37:
a7:4f:ad:6f:7a:54:1f:17:ac:0c:1e:3b:2e:d7:03:
a7:b8:6d:69:4a:2e:26:70:8d:a3:df:c1:f5:2e:46:
40:80:07:5d:7c:c7:3c:31:fa:cd:00:e3:99:cc:23:
ae:6b:a0:96:95:b7:9d:1e:32:93:aa:2c:d3:f2:fa:
8d:fb:82:d1:a0:b4:e6:19:82:d0:10:28:6d:5e:19:
36:6a:20:e7:c8:c6:3d:4a:c7:6d:ba:d6:60:9b:b5:
7a:39:ae:f6:e2:15:9a:b9:00:40:e7:20:cf:93:8e:
98:f1:61:98:ed:89:4c:c9:26:ee:4b:bf:1f:09:94:
4f:ca:25:f1:48:41:cc:69:8f:e6:1b:32:63:07:bb:
77:d5:6b:33:d3:b9:85:02:60:f3:b7:61:1f:6e:8f:
c9:90:ca:f7:70:65:d5:9f:28:19:cb:67:09:ee:a1:
0b:35:db:24:82:98:c6:19:cf:ac:c0:fc:35:82:1d:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:56:02:CA:E8:61:A1:46:6A:85:A8:6C:EF:B5:AC:B0:38:AB:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bf4eae-6ca9-4fb5-94ab-e5fffaf3a4f7/1/BNhWAsroYaFGaoWobO-1rLA4qxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.140.0/22
IPv6:
2a09:9c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208459
Signature Algorithm: sha256WithRSAEncryption
59:1f:e6:df:8d:ed:e7:eb:03:bf:29:0b:b8:7d:11:2b:f8:02:
dc:6d:d3:6b:e8:fd:4d:d9:df:86:0d:45:e9:93:39:ae:04:73:
e5:00:d7:63:87:90:5a:2d:0a:d0:d2:48:80:7a:46:ad:42:98:
05:68:bf:15:90:28:4b:16:b2:04:7f:1b:d2:60:79:61:f7:04:
08:50:c5:97:06:36:ca:b1:cc:9f:54:67:4e:75:3e:12:41:7b:
71:01:f1:ed:f9:95:23:15:4c:2f:ba:bc:40:14:65:c8:ed:62:
ba:51:f6:d1:e9:e2:8a:b8:22:94:fd:fe:21:8e:8b:f7:2c:fa:
67:a2:da:d5:fa:bf:53:ee:00:b5:17:ce:6e:40:cc:40:11:c0:
1f:b2:09:27:89:0f:c2:9f:e0:be:d6:17:80:36:2d:fd:4e:d0:
15:8a:91:ae:c5:fd:eb:c4:fc:eb:6d:53:8d:50:1f:d2:e3:62:
77:4c:d5:0b:ba:1b:96:97:d1:12:20:57:5c:f8:cf:5b:d9:3f:
89:c7:d5:65:db:3a:44:9e:09:bf:ae:ba:8d:48:60:60:50:3c:
83:c6:b2:95:41:a8:6d:a0:94:26:11:79:2e:8e:0a:3d:69:99:
eb:2c:04:2d:3f:c5:3c:8a:7a:7b:36:a8:91:e8:a1:42:d7:f6:
41:16:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:11:35 2026 by rpki-client