$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer File: 2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.cer (raw, json) Hash identifier: 6XhDRuiWw4NEJswuwSARnWGpWeU8JUvaviHx6CrucDE= Subject key identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 Certificate issuer: /CN=A912092CFA11F378852F52266C793AB678233205 Certificate serial: 620F437B74E5907E00D2E1AA515AC482002C9015 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 19 Apr 2026 19:27:49 +0000 Certificate not after: Sun 18 Apr 2027 19:32:49 +0000 Subordinate resources: IP: 2a09:54c3:9000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0f:43:7b:74:e5:90:7e:00:d2:e1:aa:51:5a:c4:82:00:2c:90:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912092CFA11F378852F52266C793AB678233205 Validity Not Before: Apr 19 19:27:49 2026 GMT Not After : Apr 18 19:32:49 2027 GMT Subject: CN=2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:3e:73:81:1b:09:df:e1:38:99:a2:09:3a: 1b:f2:c7:d1:20:e3:30:11:77:cb:ca:a0:0d:1c:23: bf:78:d4:ac:53:06:5a:8c:f2:3c:1a:a2:89:bb:46: 23:0e:98:de:01:02:14:8f:8b:93:68:19:18:0b:dc: 2c:ba:a1:fe:32:1b:08:7c:9e:7d:11:c2:1a:3d:91: d2:1b:0d:78:8f:23:93:c3:ab:19:f0:f5:5c:d5:ef: fc:f5:cd:29:ae:90:e7:13:c9:91:6e:16:32:c5:42: e6:f9:44:2c:85:4a:85:a8:70:22:1d:ad:be:3f:b4: 8e:93:37:4a:dd:08:62:66:92:f4:d2:04:2f:c7:b3: e1:47:95:bb:48:6c:4a:31:72:6c:25:ca:d2:ad:23: 85:16:ba:cd:b2:ed:a7:10:5d:e0:b3:93:6f:f1:15: 06:5f:33:1e:89:87:e0:4e:69:1e:f2:e7:69:5e:c8: b1:9c:a8:84:cd:52:a0:dc:29:bb:35:45:a4:ef:cf: 8d:ab:f1:19:40:f4:ac:2c:62:50:51:15:6f:c8:bc: 73:e8:ae:fa:ce:07:f9:0c:db:32:8b:c5:ac:b8:77: fa:09:b7:80:a7:0a:10:db:00:b4:32:3e:60:06:f7: 25:d1:4c:10:b3:d1:17:c4:e6:78:d5:1b:ce:3e:1c: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:09:C9:CB:05:33:3E:7A:D0:7D:65:1D:85:EA:5D:D7:FC:06:F4:B7 X509v3 Authority Key Identifier: keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/3/2009C9CB05333E7AD07D651D85EA5DD7FC06F4B7.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c3:9000::/36 Signature Algorithm: sha256WithRSAEncryption 78:73:8c:22:ec:d6:9e:2f:a8:74:b1:53:40:77:38:0e:06:3e: fb:81:dd:24:0b:ce:2b:67:af:5f:24:cf:64:b6:53:db:ee:58: be:b4:48:3a:bd:99:ac:81:bf:18:1a:ca:ef:41:14:eb:82:32: f5:30:a0:fa:c8:ef:e7:91:b4:30:23:c2:7a:c0:c4:21:ac:e6: d2:5d:97:a4:a6:c6:d0:85:20:8b:2c:d4:dc:19:56:d6:57:03: 5c:0f:20:a5:71:5b:1c:71:8d:c7:7d:07:4d:7b:84:0b:0f:da: 20:96:14:af:81:56:d8:b3:5c:58:3d:bc:65:7d:1c:56:2c:f4: b2:d1:0d:cc:a0:f5:48:16:cb:6a:76:5e:e1:f7:41:2b:bf:1b: 01:41:33:fc:d3:03:91:2d:15:03:df:58:e9:0b:e9:1f:15:d0: 25:27:b5:a1:c7:4c:8d:8b:b0:c7:1c:b9:3e:7e:55:9f:e7:72: bd:69:80:af:b1:67:60:78:ae:b1:2b:c9:2b:c8:80:8b:3f:75: b8:00:11:22:40:48:fa:30:2b:2e:6f:4c:d4:b0:1e:9f:86:50: 0e:64:70:c3:12:1c:45:5f:02:29:e7:5a:c9:ab:41:3a:f0:eb: bb:cc:c0:64:ef:9b:76:a7:b4:3a:df:2e:3e:93:91:c0:b2:1a: 5c:25:8f:49 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUYg9De3TlkH4A0uGqUVrEggAskBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkxMjA5MkNGQTExRjM3ODg1MkY1MjI2NkM3OTNBQjY3 ODIzMzIwNTAeFw0yNjA0MTkxOTI3NDlaFw0yNzA0MTgxOTMyNDlaMDMxMTAvBgNV BAMTKDIwMDlDOUNCMDUzMzNFN0FEMDdENjUxRDg1RUE1REQ3RkMwNkY0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zD5zgRsJ3+E4maIJOhvyx9Eg 4zARd8vKoA0cI7941KxTBlqM8jwaoom7RiMOmN4BAhSPi5NoGRgL3Cy6of4yGwh8 nn0Rwho9kdIbDXiPI5PDqxnw9VzV7/z1zSmukOcTyZFuFjLFQub5RCyFSoWocCId rb4/tI6TN0rdCGJmkvTSBC/Hs+FHlbtIbEoxcmwlytKtI4UWus2y7acQXeCzk2/x FQZfMx6Jh+BOaR7y52leyLGcqITNUqDcKbs1RaTvz42r8RlA9KwsYlBRFW/IvHPo rvrOB/kM2zKLxay4d/oJt4CnChDbALQyPmAG9yXRTBCz0RfE5njVG84+HH0RAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgCcnLBTM+etB9 ZR2F6l3X/Ab0tzAfBgNVHSMEGDAWgBSpEgks+hHzeIUvUiZseTq2eCMyBTAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS9BOTEyMDkyQ0ZBMTFGMzc4ODUyRjUyMjY2 Qzc5M0FCNjc4MjMzMjA1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9BOTEyMDkyQ0ZBMTFGMzc4ODUy RjUyMjY2Qzc5M0FCNjc4MjMzMjA1LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvNzc5YTc5MDMtMmVkYi00OGFkLWFiZWItZWUzOWE3OWY4NTA3LzMv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS83NzlhNzkwMy0yZWRiLTQ4YWQtYWJlYi1lZTM5YTc5Zjg1MDcv My8yMDA5QzlDQjA1MzMzRTdBRDA3RDY1MUQ4NUVBNUREN0ZDMDZGNEI3Lm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQqCVTDkDANBgkqhkiG9w0BAQsFAAOCAQEAeHOM IuzWni+odLFTQHc4DgY++4HdJAvOK2evXyTPZLZT2+5YvrRIOr2ZrIG/GBrK70EU 64Iy9TCg+sjv55G0MCPCesDEIazm0l2XpKbG0IUgiyzU3BlW1lcDXA8gpXFbHHGN x30HTXuECw/aIJYUr4FW2LNcWD28ZX0cViz0stENzKD1SBbLanZe4fdBK78bAUEz /NMDkS0VA99Y6QvpHxXQJSe1ocdMjYuwxxy5Pn5Vn+dyvWmAr7FnYHiusSvJK8iA iz91uAARIkBI+jArLm9M1LAen4ZQDmRwwxIcRV8CKedayatBOvDru8zAZO+bdqe0 Ot8uPpORwLIaXCWPSQ== -----END CERTIFICATE-----Generated at Wed May 13 07:36:19 2026 by rpki-client