Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer (raw, json)
Hash identifier: DBTRUpeilZ3BJWJcNun/jfUAsSEny/HEj5LYtRP4sPw=
Subject key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2A578FB2E50E40C11203F312CAE863295D0FA503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 19 Jul 2026 20:23:29 +0000
Certificate not after: Sun 18 Jul 2027 20:28:29 +0000
Subordinate resources: IP: 2a14:7581:3000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:57:8f:b2:e5:0e:40:c1:12:03:f3:12:ca:e8:63:29:5d:0f:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 19 20:23:29 2026 GMT
Not After : Jul 18 20:28:29 2027 GMT
Subject: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:63:c5:23:31:b3:08:19:57:aa:02:8a:f1:
24:b6:45:cb:80:aa:93:4c:82:02:e3:19:78:b6:db:
4f:1f:5d:e7:58:52:2f:9f:3d:48:db:06:36:de:67:
c9:61:81:e6:ad:18:b1:f7:cb:f2:71:9e:0b:a1:93:
7c:65:ca:58:e0:6a:a0:a8:eb:fd:42:b6:52:ce:a3:
86:a3:8b:05:4f:7e:39:62:5c:0f:2f:d4:4b:3f:9c:
f0:34:4d:74:ce:92:69:26:ef:4c:8e:ee:e4:53:ad:
d7:b0:4c:e8:bd:b7:6c:72:fa:ac:e1:c1:02:06:d0:
34:78:c0:3d:f9:ed:92:9c:29:83:b6:3f:4e:b7:f3:
1f:74:74:29:5a:15:0d:e9:c3:e5:54:6b:70:10:23:
84:79:fb:9f:da:bc:96:2d:98:b6:e9:96:9b:f0:df:
f6:44:8d:80:d3:93:3e:a4:d6:81:21:29:ef:79:90:
ac:a6:ba:4f:23:43:94:f5:51:9e:db:d4:ac:24:f5:
c5:35:db:2e:dc:51:fc:6a:16:0d:cb:98:14:2b:4f:
7c:a8:92:74:ef:cc:06:47:48:0c:72:58:d5:02:71:
32:3e:a0:4f:2e:9a:89:62:64:7a:94:b4:20:83:5a:
3f:fd:b1:79:ac:eb:ce:b5:7f:da:af:b9:68:ee:8a:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3000::/40
Signature Algorithm: sha256WithRSAEncryption
50:00:85:30:f2:e9:23:b1:13:ab:80:08:c4:41:22:99:34:14:
e2:68:12:42:95:9f:27:af:01:53:ff:74:11:7f:ef:ce:31:0f:
a7:8f:2e:5b:d1:e5:4f:81:85:f2:27:7b:f9:07:d0:20:f6:68:
cb:f7:5e:30:68:78:c4:a5:01:ac:d1:27:98:5a:d8:c1:92:70:
de:2d:5f:f1:7c:d4:99:e5:73:4e:2c:d4:50:14:0f:91:62:8d:
34:49:08:00:5a:f2:a4:ff:5a:a1:40:e9:84:ee:ed:1c:07:9a:
0b:d4:b4:64:36:88:84:08:bd:37:0c:29:b6:3d:79:31:d8:ac:
30:4f:d7:ae:50:c9:0e:2b:e3:b8:3d:f5:d1:fc:5b:43:48:64:
90:69:34:91:ba:c9:9f:4b:2d:83:f6:63:b4:f6:b5:5f:00:e5:
c0:8f:6e:79:fb:9a:91:b0:0f:1b:9c:3c:a2:d1:62:5b:ec:d6:
d8:75:b4:e0:34:a4:d2:90:bf:f5:b4:20:dd:38:63:14:1d:c3:
70:5d:43:f8:53:11:73:4a:cc:88:50:3a:af:ba:22:8b:d7:ea:
fc:07:15:3b:62:fe:2e:85:5a:01:e6:37:f2:cc:f2:d1:cd:89:
80:7c:fc:c4:1a:00:17:0d:d9:0e:b3:d5:fc:20:d1:b5:f9:59:
20:19:4d:e7
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUKlePsuUOQMESA/MSyuhjKV0PpQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA3MTkyMDIzMjlaFw0yNzA3MTgyMDI4MjlaMDMxMTAvBgNV
BAMTKDIwMkE4MkRBNkU3M0NFNDI2MkUxOEJBRUQ2MEEzRkE2Qzg4OTIzRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZbWPFIzGzCBlXqgKK8SS2RcuA
qpNMggLjGXi2208fXedYUi+fPUjbBjbeZ8lhgeatGLH3y/Jxnguhk3xlyljgaqCo
6/1CtlLOo4ajiwVPfjliXA8v1Es/nPA0TXTOkmkm70yO7uRTrdewTOi9t2xy+qzh
wQIG0DR4wD357ZKcKYO2P0638x90dClaFQ3pw+VUa3AQI4R5+5/avJYtmLbplpvw
3/ZEjYDTkz6k1oEhKe95kKymuk8jQ5T1UZ7b1Kwk9cU12y7cUfxqFg3LmBQrT3yo
knTvzAZHSAxyWNUCcTI+oE8umoliZHqUtCCDWj/9sXms6861f9qvuWjuiq3/AgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgKoLabnPOQmLh
i67WCj+myIkj8DAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZDliZDM4ODgtOTMwMi00YjZmLWEwMTctMmI0YmJhNWU1N2JiLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRiYmE1ZTU3YmIv
MS8yMDJBODJEQTZFNzNDRTQyNjJFMThCQUVENjBBM0ZBNkM4ODkyM0YwLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWBMDANBgkqhkiG9w0BAQsFAAOCAQEAUACF
MPLpI7ETq4AIxEEimTQU4mgSQpWfJ68BU/90EX/vzjEPp48uW9HlT4GF8id7+QfQ
IPZoy/deMGh4xKUBrNEnmFrYwZJw3i1f8XzUmeVzTizUUBQPkWKNNEkIAFrypP9a
oUDphO7tHAeaC9S0ZDaIhAi9Nwwptj15MdisME/XrlDJDivjuD310fxbQ0hkkGk0
kbrJn0stg/ZjtPa1XwDlwI9uefuakbAPG5w8otFiW+zW2HW04DSk0pC/9bQg3Thj
FB3DcF1D+FMRc0rMiFA6r7oii9fq/AcVO2L+LoVaAeY38szy0c2JgHz8xBoAFw3Z
DrPV/CDRtflZIBlN5w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:30 2026 by rpki-client