Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer
File: 570E7848A3284582CD6F0F0C035F7D9B41631EA2.cer (raw, json)
Hash identifier: Jj0ctCA5mMDihzlTjcHdvnNKZJHoGd/WXnAD/GugUmo=
Subject key identifier: 57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 739DCFC2FA2DE168593C23AAE604A6FBD3CEBFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 15 Jul 2026 15:29:41 +0000
Certificate not after: Wed 14 Jul 2027 15:34:41 +0000
Subordinate resources: IP: 2a14:6f44:ca30::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:9d:cf:c2:fa:2d:e1:68:59:3c:23:aa:e6:04:a6:fb:d3:ce:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jul 15 15:29:41 2026 GMT
Not After : Jul 14 15:34:41 2027 GMT
Subject: CN=570E7848A3284582CD6F0F0C035F7D9B41631EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:42:91:8e:36:e9:c7:38:c4:de:5d:d2:c3:
9b:11:37:10:01:bc:ae:b6:1c:aa:50:7e:84:ed:3e:
f4:92:39:5d:ee:11:24:36:21:8f:6e:39:fb:96:dc:
d2:39:ba:ad:ad:c5:ea:f1:31:81:0c:c6:44:71:af:
35:ce:a2:85:cc:41:80:67:f8:35:4a:32:37:5c:e3:
5b:e2:ed:ea:cc:d7:de:f8:10:66:fe:1b:62:fc:50:
7b:e1:d8:cf:9c:82:2e:d4:7f:a8:54:74:80:c4:27:
51:03:1f:94:c6:55:7e:c6:66:88:a1:f4:08:a6:b4:
4d:96:b8:90:66:c5:9a:7e:f9:9e:0f:6e:c8:85:8a:
f3:15:47:d2:fd:04:8d:b1:79:76:b6:26:a2:03:51:
71:58:1a:ec:a4:ea:75:e7:9c:9c:ad:26:f5:0e:1f:
1e:26:33:d4:d4:51:fc:8f:9d:f4:73:78:6e:b1:d2:
81:c7:c8:53:d8:b3:d0:6c:cd:33:11:6a:f7:ae:f2:
02:6f:70:2b:fa:f7:fa:c3:cb:6c:05:e1:77:42:21:
30:e4:ec:a2:41:a9:42:1b:20:7b:88:ae:51:b5:8a:
11:54:5c:8d:4e:f3:56:7f:2f:f2:30:d1:d9:2e:8e:
f7:d7:2b:fb:76:39:b2:ab:8f:2d:31:8f:25:72:af:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
57:0E:78:48:A3:28:45:82:CD:6F:0F:0C:03:5F:7D:9B:41:63:1E:A2
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0b6545fc-9eac-4fdc-a2ec-c702d74d3622/1/570E7848A3284582CD6F0F0C035F7D9B41631EA2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:ca30::/44
Signature Algorithm: sha256WithRSAEncryption
2d:31:1f:68:65:e1:fe:d0:3a:61:3c:e0:e5:b0:2a:74:59:73:
bd:75:97:61:87:76:53:ad:d5:d6:62:66:fd:ed:c8:3f:24:29:
60:a6:1f:9d:94:dd:32:02:6c:c3:84:07:9b:42:68:1e:a8:36:
79:a8:20:a6:2b:a5:93:fb:bc:40:45:1d:21:24:83:d7:77:c3:
85:47:b5:ac:56:08:42:31:57:f6:ce:a2:24:09:13:df:47:90:
8d:b5:4b:dc:62:63:f8:73:45:58:02:6e:4f:0d:35:e4:f7:ca:
e8:a0:33:63:63:e0:e2:24:29:ec:3d:5b:91:43:63:77:f1:82:
2f:ce:3e:65:80:7a:ad:81:6d:40:20:51:1d:51:40:9c:b2:7d:
29:a3:ae:79:7f:72:61:6f:7f:98:e3:98:f6:47:5b:d4:8d:24:
e4:0a:05:e3:2f:e2:5e:84:60:c6:09:a3:d7:ee:68:02:61:fe:
38:dc:99:c9:64:b9:82:f2:46:ad:2b:f6:36:b7:c1:79:38:d2:
16:96:c4:16:d0:36:ac:3c:54:4f:ba:d9:ac:8e:e3:54:d5:50:
45:21:c7:88:dd:60:50:7f:a2:96:3c:48:4f:4f:c9:1f:67:26:
a5:93:a2:a9:99:6a:90:b5:98:43:a5:e2:39:1a:f8:85:3e:66:
4f:93:aa:ef
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUc53Pwvot4WhZPCOq5gSm+9POv/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNjA3MTUxNTI5NDFaFw0yNzA3MTQxNTM0NDFaMDMxMTAvBgNV
BAMTKDU3MEU3ODQ4QTMyODQ1ODJDRDZGMEYwQzAzNUY3RDlCNDE2MzFFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBkKRjjbpxzjE3l3Sw5sRNxAB
vK62HKpQfoTtPvSSOV3uESQ2IY9uOfuW3NI5uq2txerxMYEMxkRxrzXOooXMQYBn
+DVKMjdc41vi7erM1974EGb+G2L8UHvh2M+cgi7Uf6hUdIDEJ1EDH5TGVX7GZoih
9AimtE2WuJBmxZp++Z4PbsiFivMVR9L9BI2xeXa2JqIDUXFYGuyk6nXnnJytJvUO
Hx4mM9TUUfyPnfRzeG6x0oHHyFPYs9BszTMRaveu8gJvcCv69/rDy2wF4XdCITDk
7KJBqUIbIHuIrlG1ihFUXI1O81Z/L/Iw0dkujvfXK/t2ObKrjy0xjyVyr6MdAgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRXDnhIoyhFgs1v
DwwDX32bQWMeojAfBgNVHSMEGDAWgBQ+7ruUao0h1Ag8k9wJzuVXuyrDLjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz
ZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgzQzkzREMw
OUNFRTU1N0JCMkFDMzJFLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUHU2N2xH
cU5JZFFJUEpQY0NjN2xWN3Nxd3k0LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMGI2NTQ1ZmMtOWVhYy00ZmRjLWEyZWMtYzcwMmQ3NGQzNjIyLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8wYjY1NDVmYy05ZWFjLTRmZGMtYTJlYy1jNzAyZDc0ZDM2MjIv
MS81NzBFNzg0OEEzMjg0NTgyQ0Q2RjBGMEMwMzVGN0Q5QjQxNjMxRUEyLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQqFG9EyjAwDQYJKoZIhvcNAQELBQADggEBAC0x
H2hl4f7QOmE84OWwKnRZc711l2GHdlOt1dZiZv3tyD8kKWCmH52U3TICbMOEB5tC
aB6oNnmoIKYrpZP7vEBFHSEkg9d3w4VHtaxWCEIxV/bOoiQJE99HkI21S9xiY/hz
RVgCbk8NNeT3yuigM2Nj4OIkKew9W5FDY3fxgi/OPmWAeq2BbUAgUR1RQJyyfSmj
rnl/cmFvf5jjmPZHW9SNJOQKBeMv4l6EYMYJo9fuaAJh/jjcmclkuYLyRq0r9ja3
wXk40haWxBbQNqw8VE+62ayO41TVUEUhx4jdYFB/opY8SE9PyR9nJqWToqmZapC1
mEOl4jka+IU+Zk+Tqu8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:31 2026 by rpki-client