Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer (raw, json)
Hash identifier: YQIC4R3DaI9e45/bQI0A/L/PCnDJELihfQhcoy7bZ3A=
Subject key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 67295784ED6A7FA00180ADEB2083A70A35CFB60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 17 Jun 2025 14:42:37 +0000
Certificate not after: Tue 16 Jun 2026 14:47:37 +0000
Subordinate resources: IP: 2a14:7581:d00::/40
IP: 2a14:7584:7000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:29:57:84:ed:6a:7f:a0:01:80:ad:eb:20:83:a7:0a:35:cf:b6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 17 14:42:37 2025 GMT
Not After : Jun 16 14:47:37 2026 GMT
Subject: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:a3:08:a4:8a:fb:38:35:6e:f9:e1:2c:ca:
ef:b2:2e:ce:91:34:48:b3:f1:7d:b3:48:4c:66:82:
2b:8d:51:8b:7e:41:a3:04:7b:0d:ee:4f:4f:3b:7c:
2a:54:96:e6:38:06:24:df:0d:62:82:ff:1b:d8:06:
19:a0:49:b3:d5:65:6f:cd:31:3f:49:e7:9f:b3:c6:
6b:3c:e8:36:82:59:e1:7b:f1:99:76:d4:fa:23:87:
f2:ba:20:4c:f0:53:b7:40:e1:2d:22:52:c5:9d:93:
cc:98:d6:2c:c5:c2:8f:fd:aa:d4:26:d9:ef:b5:0b:
7a:c5:66:98:bf:a9:cb:98:02:fe:a1:c2:98:9a:3f:
38:d5:e9:39:e3:df:2f:c9:45:fb:0b:ec:33:fe:51:
6c:f1:51:b7:d1:99:c8:92:e8:c7:af:ff:ca:bc:9b:
38:f6:0f:0e:f0:71:86:de:0f:53:48:d9:70:04:4a:
6b:c8:5c:fd:52:1e:1b:c3:8f:7c:42:38:30:48:29:
51:6b:19:25:bf:bb:72:f8:99:64:db:55:b1:18:54:
36:18:89:25:f5:e2:2c:85:04:b9:be:b5:f8:d8:df:
10:c2:8e:cf:49:81:a2:07:87:e7:48:55:d9:f4:fc:
c4:e2:e2:94:87:cb:09:b0:6e:e9:18:af:b0:8c:b4:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d00::/40
2a14:7584:7000::/36
Signature Algorithm: sha256WithRSAEncryption
26:3e:b6:44:6e:8a:4f:d5:81:16:ec:e2:ba:a6:81:26:7a:1b:
e4:46:5e:45:d6:6d:08:dd:32:67:c1:9e:50:3d:ec:7b:ac:29:
c0:3d:71:f9:fd:24:6f:77:62:be:f9:2a:46:37:2e:ce:0f:ff:
5d:4f:7f:4d:fc:8e:1a:8a:83:41:6a:b6:d6:86:02:95:ea:b6:
df:16:fd:60:98:6b:6e:a1:7e:6b:a0:32:17:86:0e:ef:b3:9a:
7a:1c:b3:f0:26:9b:53:38:c3:ed:bd:a0:b7:87:66:38:31:72:
bf:a1:bc:64:fa:22:1e:04:7d:ed:ba:e2:ce:17:5b:ea:5e:c5:
42:3a:70:9e:84:a4:21:e3:77:60:22:6b:87:b5:63:3f:1a:0d:
95:98:4a:78:0d:c9:bd:7d:87:ac:ee:e3:09:3e:7a:8f:81:f9:
21:1c:d4:40:c7:f5:c7:9b:80:86:5b:3d:ea:ac:dd:63:f6:58:
ee:d7:db:82:9d:20:74:ad:26:cf:5a:64:f0:24:b1:1e:40:a0:
76:6c:e6:fc:cc:e7:54:a0:7b:f7:37:d3:e9:00:f5:b9:50:53:
28:38:66:e0:80:c4:06:53:ca:f7:28:2d:1b:5b:17:32:9c:3e:
96:cf:5d:fb:a2:53:2a:8f:e8:bb:ec:f0:7b:4c:47:76:76:e5:
ff:f2:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:19 2025 by rpki-client