Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer
File: 0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.cer (raw, json)
Hash identifier: KzweEGcBit/vVvaZNvFhzJwvwu/519nlrv8NpJNpIxU=
Subject key identifier: 0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 3E903FE3F62E5614B654B370BF6F7B280BFFE8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 21:19:03 +0000
Certificate not after: Tue 11 May 2027 21:24:03 +0000
Subordinate resources: IP: 2a14:6f44:ca30::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:90:3f:e3:f6:2e:56:14:b6:54:b3:70:bf:6f:7b:28:0b:ff:e8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: May 12 21:19:03 2026 GMT
Not After : May 11 21:24:03 2027 GMT
Subject: CN=0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:3e:b2:61:ab:2d:e0:7c:0a:9a:3e:b2:dd:
01:c6:25:05:d5:8b:ea:77:16:42:cc:81:6b:2a:01:
15:f1:1a:29:3f:fd:53:bb:b5:36:b5:fa:12:93:d6:
0e:8f:0d:a8:15:e2:58:89:1f:ca:b6:c2:65:a7:44:
d1:63:ea:40:16:4c:2a:48:1b:65:ab:5d:ba:d0:80:
1b:33:89:5e:44:0c:dd:1e:b5:1e:5d:59:1b:e8:49:
63:7d:b4:e6:bd:10:d9:ad:1c:7a:bb:57:f6:c8:62:
0a:05:ba:f8:c6:f0:c8:a3:f5:b1:73:29:99:c1:b9:
30:aa:18:3f:4c:6f:20:5f:2a:63:a2:61:e5:a2:f7:
00:61:be:cb:cf:b1:87:3a:c8:e1:3d:9d:5b:e6:a9:
3e:18:e4:28:97:11:23:4c:f6:aa:a6:7d:7c:ce:b2:
b8:2f:db:9c:e3:6b:b1:fd:b9:82:42:39:89:a3:8c:
9d:92:ec:0b:c9:48:45:c7:a5:02:a7:6b:9e:aa:23:
aa:b1:32:82:70:87:43:e7:b3:8a:83:c6:b5:20:4c:
08:a2:b4:6c:a3:e7:48:46:11:45:c2:9a:95:a8:86:
c0:bd:44:2f:0b:2d:18:2f:f0:3f:43:25:c4:0c:76:
05:5a:03:16:6e:22:64:88:1f:79:b7:74:03:d9:59:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:EF:0C:23:EE:A2:58:4B:77:F7:E7:4F:3C:6F:A1:95:07:A2:5D:6E
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b235a60-c756-43f9-9f4a-b2e3e0db19fc/1/0AEF0C23EEA2584B77F7E74F3C6FA19507A25D6E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:ca30::/44
Signature Algorithm: sha256WithRSAEncryption
74:82:d7:6a:06:d1:f9:46:10:de:c1:63:7a:94:94:2e:8a:70:
e2:ea:8f:ad:c9:3e:bc:48:11:7d:19:7a:0f:e3:06:3c:73:ab:
e3:31:43:7b:bb:91:bb:4d:43:05:3f:0c:43:b4:21:4f:bc:d0:
67:1c:cd:34:32:94:f0:a9:a3:69:c9:48:99:27:5f:ba:38:75:
0d:d5:26:a6:67:ce:3e:17:f9:51:d4:63:6d:96:a7:e9:59:e2:
16:bd:21:59:20:1a:64:58:30:95:ae:1d:a6:91:74:e8:fb:7a:
a3:1a:da:2a:37:3e:5e:f7:d7:ec:93:ee:80:8e:40:ab:32:1e:
2d:01:ba:37:2e:52:5e:87:ed:aa:a1:e2:16:84:49:d5:a9:0f:
18:39:f2:5b:90:ab:1a:6b:9d:36:67:d1:0d:39:91:2f:04:a7:
56:8f:bd:af:1f:73:fb:b5:f1:65:ad:23:38:0c:97:c1:64:f2:
5d:1c:a4:26:a0:6e:ff:80:19:0c:2a:0c:e8:36:ca:6a:72:38:
f2:f4:f6:df:7e:ad:ca:b6:b8:98:e6:73:3c:90:34:9e:b8:e0:
af:3e:23:9f:f8:b1:e1:ba:60:e2:a6:93:a5:a3:30:64:b1:02:
3a:5a:30:91:51:c5:10:21:06:59:be:c0:5c:d1:cd:34:f4:39:
69:54:37:62
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUPpA/4/YuVhS2VLNwv297KAv/6KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNjA1MTIyMTE5MDNaFw0yNzA1MTEyMTI0MDNaMDMxMTAvBgNV
BAMTKDBBRUYwQzIzRUVBMjU4NEI3N0Y3RTc0RjNDNkZBMTk1MDdBMjVENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugj6yYast4HwKmj6y3QHGJQXV
i+p3FkLMgWsqARXxGik//VO7tTa1+hKT1g6PDagV4liJH8q2wmWnRNFj6kAWTCpI
G2WrXbrQgBsziV5EDN0etR5dWRvoSWN9tOa9ENmtHHq7V/bIYgoFuvjG8Mij9bFz
KZnBuTCqGD9MbyBfKmOiYeWi9wBhvsvPsYc6yOE9nVvmqT4Y5CiXESNM9qqmfXzO
srgv25zja7H9uYJCOYmjjJ2S7AvJSEXHpQKna56qI6qxMoJwh0Pns4qDxrUgTAii
tGyj50hGEUXCmpWohsC9RC8LLRgv8D9DJcQMdgVaAxZuImSIH3m3dAPZWeL9AgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQK7wwj7qJYS3f3
5088b6GVB6JdbjAfBgNVHSMEGDAWgBQ+7ruUao0h1Ag8k9wJzuVXuyrDLjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz
ZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgzQzkzREMw
OUNFRTU1N0JCMkFDMzJFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUHU2N2xH
cU5JZFFJUEpQY0NjN2xWN3Nxd3k0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvNWIyMzVhNjAtYzc1Ni00M2Y5LTlmNGEtYjJlM2UwZGIxOWZjLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS81YjIzNWE2MC1jNzU2LTQzZjktOWY0YS1iMmUzZTBkYjE5ZmMv
MS8wQUVGMEMyM0VFQTI1ODRCNzdGN0U3NEYzQzZGQTE5NTA3QTI1RDZFLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQqFG9EyjAwDQYJKoZIhvcNAQELBQADggEBAHSC
12oG0flGEN7BY3qUlC6KcOLqj63JPrxIEX0Zeg/jBjxzq+MxQ3u7kbtNQwU/DEO0
IU+80GcczTQylPCpo2nJSJknX7o4dQ3VJqZnzj4X+VHUY22Wp+lZ4ha9IVkgGmRY
MJWuHaaRdOj7eqMa2io3Pl731+yT7oCOQKsyHi0BujcuUl6H7aqh4haESdWpDxg5
8luQqxprnTZn0Q05kS8Ep1aPva8fc/u18WWtIzgMl8Fk8l0cpCagbv+AGQwqDOg2
ympyOPL09t9+rcq2uJjmczyQNJ644K8+I5/4seG6YOKmk6WjMGSxAjpaMJFRxRAh
Blm+wFzRzTT0OWlUN2I=
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:34 2026 by rpki-client