Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
File: 51917E722DB03952D9056BED2F6BD4BF98B78976.cer (raw, json)
Hash identifier: Cx2TCXaSErlGrDzahl42yHxS/OZQzU//B0x38sakzec=
Subject key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 59A62690283C38919D8DC2EC9964052B58E5380F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 May 2026 14:29:25 +0000
Certificate not after: Sat 01 May 2027 14:34:25 +0000
Subordinate resources: IP: 2a14:7580:500::/40
IP: 2a14:7580:ff50::/44
IP: 2a14:7581:9f70::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a6:26:90:28:3c:38:91:9d:8d:c2:ec:99:64:05:2b:58:e5:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 2 14:29:25 2026 GMT
Not After : May 1 14:34:25 2027 GMT
Subject: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:f1:c4:b2:15:4c:11:fb:09:e9:10:a6:0b:
f9:24:d8:99:bd:a3:86:8d:80:22:33:0e:98:0a:6f:
bb:8e:51:ab:3d:8c:6e:f8:da:f0:6c:eb:16:50:d1:
aa:23:9c:d1:a5:7b:35:3a:86:a2:6e:82:db:92:ff:
ea:ba:51:fa:72:0f:81:37:1b:00:3f:43:90:45:38:
d9:f5:29:53:91:84:23:f4:fe:b7:35:1f:d0:59:c7:
2e:7c:68:ad:1c:e0:ea:7e:a2:85:54:d8:f4:c9:cd:
bb:9d:d1:33:14:4a:4c:6b:a9:32:07:38:bc:5e:4b:
18:4a:25:13:ca:99:3e:5c:7d:4f:18:df:9c:32:ea:
69:07:23:27:5f:ff:0f:3f:ad:ce:3e:9c:16:ed:9c:
d6:7e:86:75:0b:e7:a1:35:0b:c6:9c:8a:5a:3e:4e:
35:06:1d:b1:dd:a4:49:f1:3d:72:5d:c2:d4:0d:64:
9a:b5:9b:51:83:36:e0:ea:1c:b9:e7:ed:4b:74:17:
00:cd:10:41:b6:33:57:c3:bd:b1:5b:d5:19:75:37:
9a:be:26:f5:96:d6:c8:54:1d:2a:c6:ce:5d:83:3d:
11:f8:d1:8d:0e:44:1b:4f:16:03:14:6a:76:1e:85:
8f:90:53:31:c0:f9:98:ff:4c:86:13:93:50:a4:e3:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:500::/40
2a14:7580:ff50::/44
2a14:7581:9f70::/44
Signature Algorithm: sha256WithRSAEncryption
61:af:91:c0:5b:f8:90:7f:8d:7d:08:70:6c:9e:92:fe:47:0b:
a0:d6:af:d0:53:54:5e:56:5a:66:b1:1b:07:82:a4:73:98:60:
3d:c2:40:eb:44:8e:27:b8:13:18:5f:30:4e:fb:2d:33:37:70:
cf:53:22:fc:1b:ec:5f:a0:6c:13:4f:61:a2:11:50:6a:e0:37:
3a:78:cb:c4:ba:1e:d4:f5:91:79:2c:fd:35:79:09:bd:e4:35:
b7:aa:db:1e:f0:10:82:f2:51:3b:46:44:2a:e9:2a:30:60:b5:
36:fc:6f:70:28:32:00:b6:9e:24:e2:2d:c5:ac:0c:5f:94:35:
a6:d5:7e:c9:2f:23:8a:2e:42:45:a1:19:b6:9d:d6:60:08:0d:
9c:12:b1:ef:19:d2:08:92:5a:14:46:b6:41:8c:40:51:c9:84:
10:29:93:f5:45:75:ff:44:ae:50:61:8b:58:5a:c9:c0:ea:73:
c7:cc:2d:ca:d9:ea:cf:58:b7:15:7e:16:40:5a:92:f9:bb:20:
9c:4c:7f:0d:94:f6:f8:57:60:2a:c5:9c:e6:29:91:dd:ab:bb:
4a:8f:ed:e7:56:a7:1e:b7:32:a2:14:66:3c:99:16:d9:af:f4:
21:96:d7:1e:8a:c7:7d:aa:84:ed:8b:d5:b9:6b:1a:4e:cf:ba:
83:7c:d4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:32 2026 by rpki-client