Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bh_Imnvbkbgl-KzOsdPAigLMhro.cer
File: bh_Imnvbkbgl-KzOsdPAigLMhro.cer (raw, json)
Hash identifier: a8JSrEJvTlymVGlB7Gnh41bHvdEfT2cdcLjhTMPI3l8=
Subject key identifier: 6E:1F:C8:9A:7B:DB:91:B8:25:F8:AC:CE:B1:D3:C0:8A:02:CC:86:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A11BA560D752731BCE6E2ECDC38884120A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/bb4453-d7af-4e19-a88f-988593acfea7/1/bh_Imnvbkbgl-KzOsdPAigLMhro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/bb4453-d7af-4e19-a88f-988593acfea7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 Oct 2026 13:13:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.169.224.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:a5:60:d7:52:73:1b:ce:6e:2e:cd:c3:88:84:12:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 13:13:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e1fc89a7bdb91b825f8acceb1d3c08a02cc86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:74:03:9a:ae:97:20:9b:8c:5e:8c:ab:06:
4b:d0:56:0e:56:ad:1b:fb:78:f4:6d:a2:0b:c5:2c:
09:00:72:ba:b5:e8:55:f7:04:e6:2a:f1:86:cd:33:
6c:3e:3a:f8:98:3d:c3:9d:89:7c:74:3b:30:3b:2b:
1c:ee:11:7c:b4:1d:3c:6e:ff:97:4a:2d:3b:e8:c1:
f3:67:0b:30:b5:3e:79:c1:f7:2f:4a:b6:c4:e1:42:
b3:1c:f4:b1:b1:90:1a:fc:4d:6d:d4:17:52:08:e8:
e9:67:48:c2:d3:e0:99:26:72:c3:c6:2c:ef:f0:46:
23:10:a0:28:c4:0b:a8:8f:16:f4:6a:e7:fc:7d:3b:
2c:d7:ff:04:1d:dc:13:d6:2b:da:ac:2d:2b:34:34:
5d:99:4c:e1:ef:47:b9:2c:c7:bf:b2:8c:65:e2:f2:
36:8d:79:c9:17:b4:7d:f1:b6:74:a8:eb:7f:d7:97:
62:bd:74:77:65:a7:e6:12:14:1a:69:c6:8c:40:10:
f7:d2:1b:8b:c1:41:e7:01:73:55:6d:23:38:6f:e6:
06:cf:d3:d0:3f:92:0d:6a:ea:ec:29:25:5b:c0:f6:
4d:d7:1b:f6:6a:1d:57:89:d9:8d:0d:a5:0c:e0:2b:
e0:86:db:a0:d3:85:cf:a9:28:80:ca:ed:b1:f9:78:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:C8:9A:7B:DB:91:B8:25:F8:AC:CE:B1:D3:C0:8A:02:CC:86:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/bb4453-d7af-4e19-a88f-988593acfea7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/bb4453-d7af-4e19-a88f-988593acfea7/1/bh_Imnvbkbgl-KzOsdPAigLMhro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.224.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:79:11:ed:5e:8d:c4:c1:23:03:a8:a1:39:da:51:2c:b1:2f:
74:f9:c8:93:a0:63:3a:78:27:e0:ee:62:a0:c9:0a:fd:33:11:
a8:ef:d2:bf:64:a3:af:a4:6b:7a:fd:f5:1a:5d:a5:8c:a2:7b:
ef:b1:76:c0:a2:72:15:40:37:17:16:fd:d5:54:bd:6d:6d:9b:
c8:ea:62:c7:c7:2e:26:a5:6d:fd:8f:3d:d3:c2:c3:65:16:4a:
d5:fe:f3:07:fd:c3:c2:5c:8f:d5:16:93:79:ff:cc:88:e8:08:
6e:2d:3e:e1:3c:6b:aa:f2:8b:e7:f9:e8:8e:c4:30:b9:f3:77:
28:be:45:37:10:d5:c7:2b:91:c3:93:98:94:70:97:cb:50:87:
11:4c:63:41:13:2f:15:9e:6a:6e:32:82:13:0e:1e:ae:a7:6e:
b2:0b:00:38:21:56:b6:a5:a1:15:85:8f:cb:7f:b6:ad:85:e2:
fd:b3:6a:77:0a:ca:3f:06:ed:0b:cf:f9:b2:5c:c0:da:0f:a6:
94:1c:5e:7b:01:ca:6c:15:ef:e9:1b:8a:12:3e:b7:d3:fa:51:
c1:9a:90:e3:11:c5:72:e6:fd:0d:ca:77:57:e5:db:81:cc:29:
30:c7:bb:ac:a4:02:d6:ef:ad:b0:44:07:e6:18:27:4a:c6:4b:
16:4d:d2:3e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaEbpWDXUnMbzm4uzcOIhBIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYxMDA4MTMxMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTFmYzg5YTdiZGI5MWI4MjVmOGFjY2ViMWQzYzA4YTAyY2M4NmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ld0A5qulyCbjF6MqwZL0FYOVq0b
+3j0baILxSwJAHK6tehV9wTmKvGGzTNsPjr4mD3DnYl8dDswOysc7hF8tB08bv+X
Si076MHzZwswtT55wfcvSrbE4UKzHPSxsZAa/E1t1BdSCOjpZ0jC0+CZJnLDxizv
8EYjEKAoxAuojxb0auf8fTss1/8EHdwT1ivarC0rNDRdmUzh70e5LMe/soxl4vI2
jXnJF7R98bZ0qOt/15divXR3ZafmEhQaacaMQBD30huLwUHnAXNVbSM4b+YGz9PQ
P5INaursKSVbwPZN1xv2ah1XidmNDaUM4Cvghtug04XPqSiAyu2x+XjZMQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFG4fyJp725G4JfiszrHTwIoCzIa6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzL2JiNDQ1
My1kN2FmLTRlMTktYTg4Zi05ODg1OTNhY2ZlYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvYmI0NDUz
LWQ3YWYtNGUxOS1hODhmLTk4ODU5M2FjZmVhNy8xL2JoX0ltbnZia2JnbC1Lek9z
ZFBBaWdMTWhyby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwqngMA0GCSqGSIb3DQEBCwUAA4IBAQCceRHt
Xo3EwSMDqKE52lEssS90+ciToGM6eCfg7mKgyQr9MxGo79K/ZKOvpGt6/fUaXaWM
onvvsXbAonIVQDcXFv3VVL1tbZvI6mLHxy4mpW39jz3TwsNlFkrV/vMH/cPCXI/V
FpN5/8yI6AhuLT7hPGuq8ovn+eiOxDC583covkU3ENXHK5HDk5iUcJfLUIcRTGNB
Ey8VnmpuMoITDh6up26yCwA4IVa2paEVhY/Lf7atheL9s2p3Cso/Bu0Lz/myXMDa
D6aUHF57AcpsFe/pG4oSPrfT+lHBmpDjEcVy5v0NyndX5duBzCkwx7uspALW762w
RAfmGCdKxksWTdI+
-----END CERTIFICATE-----
Generated at Tue Nov 10 17:19:52 2026 by rpki-client