Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
File: BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer (raw, json)
Hash identifier: tXTx6uF/As1+VCkh2FX9/MuvBnzfxi81V4CTJvCtp2w=
Subject key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E877021216350B086DB6BE9795740A289
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 08:25:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 45.151.68.0/22
IP: 85.137.24.0/22
IP: 185.173.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:70:21:21:63:50:b0:86:db:6b:e9:79:57:40:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 08:25:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=054ab196a5b113660d401f806b32be66625afbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:08:a3:8c:62:ef:17:37:5f:42:2e:56:a2:
87:fc:76:c7:53:9c:94:05:f0:8e:74:b2:d5:36:5b:
9a:3e:39:30:f8:a5:3e:8c:ce:36:a2:70:9b:7e:da:
a4:64:db:5e:21:d8:3d:f9:56:56:41:61:fa:25:2f:
ae:cb:15:12:5d:e2:62:50:41:2b:83:df:49:8f:dd:
44:14:5d:15:ff:e0:99:48:ef:1a:e7:7e:8b:fd:6b:
ae:27:5a:e7:91:89:2a:5c:16:9d:5e:fd:82:7e:06:
c1:a7:1f:7b:f5:9f:6d:bf:07:04:87:ed:69:e0:21:
70:a9:e6:f2:23:77:43:4b:ef:b2:26:8e:77:9f:da:
7f:18:6d:a9:00:19:7f:64:4e:8a:36:f4:6a:5f:71:
d5:26:a5:e7:2b:ea:e4:41:28:1c:1c:b9:2b:e5:ae:
f7:4d:b9:54:c6:09:08:8f:b0:ba:b0:f3:bc:26:6f:
95:5f:3f:2e:7d:50:20:ce:fd:9a:36:dd:7e:32:93:
52:6b:2d:10:32:b2:76:c1:bd:7c:5f:89:f9:b7:18:
ea:b5:ca:0f:90:81:b6:40:3c:66:84:16:93:80:07:
03:f5:fa:7b:47:8b:4d:02:2d:8e:54:a0:fc:5b:2c:
3e:17:aa:df:19:38:8a:90:8a:e1:18:0a:0d:14:48:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.68.0/22
85.137.24.0/22
185.173.144.0/22
Signature Algorithm: sha256WithRSAEncryption
02:dc:c9:29:4f:e5:3e:03:50:72:89:eb:f4:ba:1f:90:1c:3c:
ec:33:f9:08:90:4c:81:5f:0d:96:1f:20:07:98:c7:ba:92:f8:
d1:a1:e0:15:fa:c2:62:f2:7e:66:97:58:a8:10:ca:19:cf:85:
33:70:e4:83:6c:51:e6:0d:9e:20:e8:96:cc:f4:da:ff:a5:88:
ed:43:9b:b5:ed:ac:27:78:2a:a9:46:4e:47:e6:81:39:bf:cd:
08:76:81:82:2b:7c:c0:5b:43:23:60:4b:ad:ca:40:d4:e4:e5:
65:d0:65:e0:67:0d:a2:24:10:67:5e:76:ae:0b:78:f2:c8:92:
ad:3d:81:74:41:21:b1:03:2b:4a:af:8b:13:cf:6f:40:b0:54:
93:e5:1c:89:18:17:73:ab:9f:db:96:21:72:ab:95:17:4b:06:
69:a4:a3:e7:ca:0d:01:41:44:30:23:fe:bc:a0:ac:52:4e:3f:
51:d6:df:45:cc:af:2d:48:f1:27:f1:46:fa:59:9f:ca:52:93:
a0:52:e3:9e:95:c8:66:9c:d8:42:60:bb:d9:0c:d1:ba:d7:dc:
10:27:fb:7c:66:cf:f5:71:88:8f:34:36:22:9f:2c:da:24:ab:
84:62:cf:56:71:98:6b:f2:e6:14:6d:10:0a:6e:fe:b3:22:9a:
0b:e7:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:51:32 2026 by rpki-client