Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
File: D34606949D385DB42714FE71274FAC9948EF279C.cer (raw, json)
Hash identifier: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=
Subject key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 71096CA7D509C841175F767E8FA01B678DF807F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Manifest: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
caRepository: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Wed 15 Oct 2025 10:10:26 +0000
Certificate not after: Wed 14 Oct 2026 10:15:26 +0000
Subordinate resources: IP: 82.140.182.0/23
IP: 84.46.170.0/23
IP: 84.46.200.0/24
IP: 84.46.234.0 -- 84.46.255.255
IP: 86.38.4.0/23
IP: 86.38.7.0/24
IP: 86.38.24.0/24
IP: 86.38.32.0/24
IP: 86.38.37.0/24
IP: 86.38.151.0/24
IP: 86.38.156.0/24
IP: 86.38.175.0/24
IP: 86.38.177.0 -- 86.38.187.255
IP: 86.38.189.0 -- 86.38.190.255
IP: 86.38.200.0/24
IP: 86.38.202.0 -- 86.38.205.255
IP: 86.38.214.0/24
IP: 86.38.216.0 -- 86.38.221.255
IP: 86.38.225.0 -- 86.38.226.255
IP: 86.38.232.0/24
IP: 86.38.235.0/24
IP: 86.38.238.0/24
IP: 86.38.241.0 -- 86.38.243.255
IP: 86.38.246.0 -- 86.38.255.255
IP: 89.116.8.0/22
IP: 89.116.20.0 -- 89.116.39.255
IP: 89.116.44.0 -- 89.116.54.255
IP: 89.116.56.0/24
IP: 89.116.58.0 -- 89.116.70.255
IP: 89.116.72.0 -- 89.116.76.255
IP: 89.116.80.0 -- 89.116.89.255
IP: 89.116.91.0 -- 89.116.92.255
IP: 89.116.96.0/24
IP: 89.116.99.0 -- 89.116.100.255
IP: 89.116.102.0/23
IP: 89.116.106.0 -- 89.116.108.255
IP: 89.116.112.0/23
IP: 89.116.115.0/24
IP: 89.116.123.0/24
IP: 89.116.125.0 -- 89.116.128.255
IP: 89.116.130.0 -- 89.116.132.255
IP: 89.116.135.0/24
IP: 89.116.137.0/24
IP: 89.116.140.0/23
IP: 89.116.144.0/24
IP: 89.116.146.0 -- 89.116.150.255
IP: 89.116.153.0 -- 89.116.154.255
IP: 89.116.156.0/24
IP: 89.116.158.0/24
IP: 89.116.161.0/24
IP: 89.116.163.0 -- 89.116.166.255
IP: 89.116.168.0/23
IP: 89.116.171.0 -- 89.116.173.255
IP: 89.116.175.0/24
IP: 89.116.177.0/24
IP: 89.116.179.0 -- 89.116.186.255
IP: 89.116.189.0 -- 89.116.190.255
IP: 89.116.193.0/24
IP: 89.116.198.0/24
IP: 89.116.200.0/24
IP: 89.116.202.0/23
IP: 89.116.208.0/21
IP: 89.116.218.0/24
IP: 89.116.220.0/23
IP: 89.116.223.0 -- 89.116.231.255
IP: 89.116.233.0 -- 89.116.234.255
IP: 89.116.236.0/23
IP: 89.116.239.0/24
IP: 89.116.241.0 -- 89.116.244.255
IP: 89.116.246.0 -- 89.116.248.255
IP: 89.116.250.0/24
IP: 89.116.252.0/23
IP: 89.116.255.0 -- 89.117.3.255
IP: 89.117.5.0 -- 89.117.9.255
IP: 89.117.11.0 -- 89.117.13.255
IP: 89.117.15.0 -- 89.117.25.255
IP: 89.117.27.0 -- 89.117.33.255
IP: 89.117.35.0 -- 89.117.38.255
IP: 89.117.40.0 -- 89.117.68.255
IP: 89.117.70.0 -- 89.117.85.255
IP: 89.117.87.0 -- 89.117.91.255
IP: 89.117.94.0 -- 89.117.99.255
IP: 89.117.101.0 -- 89.117.107.255
IP: 89.117.109.0/24
IP: 89.117.111.0 -- 89.117.118.255
IP: 89.117.120.0 -- 89.117.124.255
IP: 89.117.126.0/24
IP: 89.117.129.0 -- 89.117.130.255
IP: 89.117.132.0 -- 89.117.136.255
IP: 89.117.139.0/24
IP: 89.117.142.0 -- 89.117.155.255
IP: 89.117.157.0 -- 89.117.164.255
IP: 89.117.167.0 -- 89.117.169.255
IP: 89.117.171.0 -- 89.117.175.255
IP: 89.117.188.0/24
IP: 89.117.190.0/24
IP: 89.117.215.0 -- 89.117.218.255
IP: 89.117.222.0/24
IP: 89.117.226.0 -- 89.117.229.255
IP: 89.117.245.0/24
IP: 89.117.250.0/24
IP: 89.117.254.0/24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:09:6c:a7:d5:09:c8:41:17:5f:76:7e:8f:a0:1b:67:8d:f8:07:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Oct 15 10:10:26 2025 GMT
Not After : Oct 14 10:15:26 2026 GMT
Subject: CN=D34606949D385DB42714FE71274FAC9948EF279C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:0e:d9:9c:35:ed:5c:9f:af:35:3a:4c:93:
c7:2f:83:e5:75:a3:de:5b:2a:b7:f8:d0:21:18:d4:
85:99:ad:3f:4c:89:64:75:d5:72:02:98:6d:23:15:
5b:7b:18:ed:c0:d9:40:08:4a:aa:3d:aa:5d:c3:6f:
b0:15:20:9f:ae:9a:26:88:0a:37:b3:aa:67:60:5a:
57:d1:15:c0:1d:ca:48:1c:a1:4a:12:98:57:93:47:
9e:72:2d:fb:0e:33:4f:83:5f:f1:91:ac:52:51:0a:
91:ce:db:d9:23:b8:b2:f7:a2:39:5a:19:54:4f:33:
6c:26:68:e1:15:f5:8c:31:54:d7:b4:d8:56:c7:fc:
5d:ec:a4:91:3c:ec:b3:e6:87:1b:61:3f:bc:5e:ea:
ae:c1:de:59:56:e4:36:2d:32:fa:66:47:4c:7e:f8:
6d:54:09:aa:42:45:7d:6c:28:be:9a:6b:88:1a:9f:
6b:9a:90:a9:ac:a5:10:70:fa:5b:dd:f1:97:07:f3:
83:3a:64:aa:1f:44:78:79:55:ba:c7:6d:9d:0d:ea:
73:55:4a:f8:f6:bf:4a:bd:21:49:65:a3:53:be:a4:
05:6f:4a:6f:97:be:3f:27:25:74:01:10:5a:da:e3:
5f:35:7e:5a:31:0d:41:d4:72:25:dd:4a:2f:a3:17:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.170.0/23
84.46.200.0/24
84.46.234.0-84.46.255.255
86.38.4.0/23
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.216.0-86.38.221.255
86.38.225.0-86.38.226.255
86.38.232.0/24
86.38.235.0/24
86.38.238.0/24
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.8.0/22
89.116.20.0-89.116.39.255
89.116.44.0-89.116.54.255
89.116.56.0/24
89.116.58.0-89.116.70.255
89.116.72.0-89.116.76.255
89.116.80.0-89.116.89.255
89.116.91.0-89.116.92.255
89.116.96.0/24
89.116.99.0-89.116.100.255
89.116.102.0/23
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.123.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.175.0/24
89.116.177.0/24
89.116.179.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/21
89.116.218.0/24
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0-89.116.234.255
89.116.236.0/23
89.116.239.0/24
89.116.241.0-89.116.244.255
89.116.246.0-89.116.248.255
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.15.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.35.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.107.255
89.117.109.0/24
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.155.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:5d:ed:44:b8:7f:7e:c0:0c:9a:b5:e6:7c:83:be:f9:bc:50:
49:a8:2f:da:ea:e0:67:17:d5:fa:5a:25:83:97:ba:54:a8:44:
3b:79:99:af:91:70:ae:01:a2:95:6c:79:e6:55:40:ce:13:cd:
f5:dc:55:d2:c6:10:74:e2:6a:fa:a6:ba:24:f1:cf:4e:06:08:
49:ec:db:72:7a:9e:51:b9:89:8d:29:10:ed:7b:4d:98:13:de:
1d:5c:b8:91:95:22:2f:61:f3:04:ff:b3:1a:c8:31:94:36:74:
45:ba:95:8d:7e:e2:33:ef:6a:b9:a1:7b:58:d9:d5:32:e4:50:
0d:b9:ec:4a:34:f6:42:29:bc:b2:3d:9c:a8:cf:c0:8f:12:75:
b7:ad:3f:01:5c:4a:c1:7f:82:6d:51:03:21:eb:87:f3:bc:15:
fa:e7:30:a9:ee:47:98:86:c1:82:cb:d9:91:0b:12:2d:0b:5b:
9f:20:80:42:f9:bb:65:9d:44:03:01:49:44:a2:b9:56:72:41:
bb:f7:b4:9f:11:4c:39:4a:4c:c4:bd:53:b5:b6:0b:37:98:cf:
38:7a:28:31:d4:45:db:99:4e:e4:c7:4b:03:14:c3:ae:48:ca:
81:c4:c8:46:17:c9:fc:2a:51:bc:26:6b:67:2d:27:44:fd:25:
38:82:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:44 2025 by rpki-client