Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer
File: 10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.cer (raw, json)
Hash identifier: Jl123P/u5McTQe9Cb5XkPeWzhmpFkdJZhpKfE+oYPNo=
Subject key identifier: 10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 687B9242F20C43D8C969AC29029615ED6A901311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 May 2026 08:26:07 +0000
Certificate not after: Sat 01 May 2027 08:31:07 +0000
Subordinate resources: IP: 2a14:7581:9c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7b:92:42:f2:0c:43:d8:c9:69:ac:29:02:96:15:ed:6a:90:13:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 2 08:26:07 2026 GMT
Not After : May 1 08:31:07 2027 GMT
Subject: CN=10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:7d:62:9b:ad:32:99:b9:61:7f:b9:94:d5:
82:ca:cf:ec:a9:74:a4:4d:24:41:55:34:46:7e:1c:
ec:a4:f8:4a:d9:8f:3a:45:0d:da:e3:4c:67:18:f2:
96:12:da:0f:98:83:22:b2:1f:38:ca:e7:be:1b:4a:
49:c2:cb:78:2b:aa:c4:66:1b:6c:fa:a0:0a:f7:15:
9c:46:97:5c:ab:bd:c5:75:81:39:78:ae:d4:8a:e2:
78:27:b8:4a:72:9c:4d:b0:53:d7:19:4b:a1:c3:10:
c4:2e:f5:28:d6:d2:f0:66:63:d6:9a:45:7f:8c:98:
17:87:2c:30:b4:cc:3b:91:06:f8:90:b8:2c:b8:44:
dc:8f:b0:ea:07:f3:eb:4d:14:c4:20:9d:a3:45:53:
3e:eb:5b:2e:76:0b:31:63:37:4e:c0:69:f3:4d:b2:
11:f5:43:d9:22:78:80:1f:2c:23:a6:10:d2:66:5e:
69:bf:35:8d:4d:2c:a1:b2:02:4b:86:e8:69:98:67:
24:c3:ae:03:fb:8f:e6:e2:8c:5d:94:dc:05:80:a5:
bf:95:86:98:c0:79:f7:2c:20:a9:50:36:c9:18:43:
3e:a5:22:21:74:f0:21:74:dd:ab:aa:df:e7:17:73:
b5:14:55:e4:74:53:c2:18:5f:e5:fb:f2:15:c8:5b:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
10:CA:62:35:CF:B2:F4:C5:BD:64:0B:2E:2E:11:9E:FB:95:E2:53:C8
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/3/10CA6235CFB2F4C5BD640B2E2E119EFB95E253C8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
4c:ed:5c:2b:81:39:46:24:f7:e6:47:ad:20:29:6a:c1:62:8a:
ac:e7:6a:43:34:c8:79:62:ac:81:04:02:64:ec:63:85:98:fb:
18:67:73:b0:37:a4:16:89:b6:2e:5f:2c:19:85:ea:6c:97:a7:
a6:7f:44:af:80:1b:e4:48:94:a4:01:69:81:60:7d:b3:e0:d6:
58:a9:c2:ad:3f:f3:be:d7:1a:13:0c:39:17:00:cd:81:3b:85:
d0:a2:2b:75:39:8c:b4:a1:95:ca:bc:d4:d7:c5:a0:16:85:2c:
2d:55:ce:10:7b:dc:fd:d2:fe:c8:38:ef:ec:c5:5d:02:e8:23:
d2:91:b7:cf:50:d5:96:6b:78:8f:15:b3:9e:b4:68:e5:17:c7:
89:aa:87:b0:20:ae:24:52:98:7c:aa:d2:ea:cd:9c:4b:19:e6:
03:e0:52:32:3a:61:fd:55:82:5b:30:7d:4b:75:d6:ad:e3:ba:
42:04:b1:53:58:b7:1d:72:60:a1:2f:8f:db:e9:ef:37:6a:bc:
9f:c9:43:21:1d:53:4c:cc:0c:4b:0d:96:aa:27:0f:ef:bb:14:
b3:65:69:4a:3d:2e:fe:af:10:d2:2b:bd:af:64:51:d5:c5:18:
61:19:87:f3:10:97:0a:16:21:9b:ff:91:8d:7a:81:8a:aa:42:
5a:ea:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:29 2026 by rpki-client