Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer
File: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer (raw, json)
Hash identifier: A8f0A5CfumK5FPxXOBZT21mKB9D2NyVULT9Ou0ZUjQo=
Subject key identifier: 0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 650A766A8F14B2E1C1C730232B45D386CA4945BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 15 Jul 2026 15:30:28 +0000
Certificate not after: Wed 14 Jul 2027 15:35:28 +0000
Subordinate resources: IP: 2a14:6f44:ca30::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0a:76:6a:8f:14:b2:e1:c1:c7:30:23:2b:45:d3:86:ca:49:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jul 15 15:30:28 2026 GMT
Not After : Jul 14 15:35:28 2027 GMT
Subject: CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:3e:b2:61:ab:2d:e0:7c:0a:9a:3e:b2:dd:
01:c6:25:05:d5:8b:ea:77:16:42:cc:81:6b:2a:01:
15:f1:1a:29:3f:fd:53:bb:b5:36:b5:fa:12:93:d6:
0e:8f:0d:a8:15:e2:58:89:1f:ca:b6:c2:65:a7:44:
d1:63:ea:40:16:4c:2a:48:1b:65:ab:5d:ba:d0:80:
1b:33:89:5e:44:0c:dd:1e:b5:1e:5d:59:1b:e8:49:
63:7d:b4:e6:bd:10:d9:ad:1c:7a:bb:57:f6:c8:62:
0a:05:ba:f8:c6:f0:c8:a3:f5:b1:73:29:99:c1:b9:
30:aa:18:3f:4c:6f:20:5f:2a:63:a2:61:e5:a2:f7:
00:61:be:cb:cf:b1:87:3a:c8:e1:3d:9d:5b:e6:a9:
3e:18:e4:28:97:11:23:4c:f6:aa:a6:7d:7c:ce:b2:
b8:2f:db:9c:e3:6b:b1:fd:b9:82:42:39:89:a3:8c:
9d:92:ec:0b:c9:48:45:c7:a5:02:a7:6b:9e:aa:23:
aa:b1:32:82:70:87:43:e7:b3:8a:83:c6:b5:20:4c:
08:a2:b4:6c:a3:e7:48:46:11:45:c2:9a:95:a8:86:
c0:bd:44:2f:0b:2d:18:2f:f0:3f:43:25:c4:0c:76:
05:5a:03:16:6e:22:64:88:1f:79:b7:74:03:d9:59:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:ca30::/44
Signature Algorithm: sha256WithRSAEncryption
2c:bf:bd:97:c2:c4:cd:bf:ec:79:e2:c1:d7:8d:dd:27:d9:ef:
e3:fa:11:6c:84:fd:10:aa:db:53:53:f8:28:c0:c1:64:35:aa:
c0:54:23:9e:45:70:8d:a6:c7:9a:6d:cc:e2:b7:0c:d9:f9:49:
d8:0b:78:d3:49:03:ed:42:36:fc:1d:26:38:d3:25:be:80:dc:
29:f4:c4:1b:ae:19:81:05:79:97:59:b3:d3:9d:31:00:d0:2d:
4f:4e:d6:26:a2:00:b9:af:e9:4b:7f:7b:3b:67:29:02:ef:53:
10:d0:ff:e4:47:35:0d:cd:ce:71:f1:9b:81:22:8e:7f:73:7e:
54:97:44:74:28:a9:25:71:2f:0c:0c:68:fe:87:24:4b:99:f2:
19:81:dd:0f:79:01:e8:d0:4a:55:02:ad:8f:a6:04:79:98:e2:
5a:70:01:76:39:7c:1f:0d:c7:32:e1:8f:ed:7f:07:d4:e1:ae:
48:b4:4f:00:11:88:d8:5b:c1:3b:84:5f:07:65:4b:40:95:63:
56:6c:5f:50:3a:2c:5f:79:f4:cc:21:e9:1b:d5:25:60:29:df:
8d:a1:3c:8d:10:7d:80:35:5b:89:68:02:19:66:09:05:cb:74:
6f:a1:ae:15:87:67:1f:b7:ff:dd:28:d5:78:75:f9:48:96:81:
f5:69:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:19 2026 by rpki-client