Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer
File: 62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer (raw, json)
Hash identifier: F2oIDijNJ6tN6huBljUacDQnOHzx3nHeG+XYi/GzlfU=
Subject key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 140F930B12049870611ADFDF36A3C241C0EC0B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 May 2026 08:24:09 +0000
Certificate not after: Sat 01 May 2027 08:29:09 +0000
Subordinate resources: IP: 2a14:7581:9900::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0f:93:0b:12:04:98:70:61:1a:df:df:36:a3:c2:41:c0:ec:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 2 08:24:09 2026 GMT
Not After : May 1 08:29:09 2027 GMT
Subject: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:e8:19:b8:c4:2b:5e:96:d0:fd:98:e4:17:
f9:e7:31:63:88:fc:ce:30:0e:bf:57:b2:6a:0d:c8:
23:26:25:96:6e:49:de:aa:8e:73:1e:f3:18:9f:91:
92:11:1c:ef:6f:ac:fd:20:20:54:50:05:ed:d6:1d:
06:c9:c6:00:86:29:60:b6:9e:82:3a:37:0e:0d:97:
1c:72:cb:10:77:1a:ac:6d:7d:8c:f6:e7:f3:dd:f8:
b1:ad:70:ef:ef:73:b2:ee:80:6a:e0:ef:82:fd:44:
12:72:b6:12:7a:43:e4:89:9c:6c:2f:bf:ef:92:dd:
46:d9:eb:77:c2:a0:9d:45:2e:eb:cd:81:e0:74:29:
22:09:6e:e2:e6:e1:3f:bf:3d:71:63:55:c9:ff:b4:
c3:3d:fb:83:e2:60:f1:f0:61:de:24:c9:3e:9c:0d:
8c:ce:16:43:eb:16:5c:20:a1:e0:8c:5c:34:a4:0c:
ee:4e:b1:4b:b5:c3:91:de:a6:2d:94:59:a8:43:c5:
e5:04:29:6f:0e:3d:51:dd:b7:0f:a5:12:8a:a5:15:
a6:fb:5e:08:3d:af:ef:f7:0f:61:73:48:33:af:ef:
5d:2e:aa:f8:1e:5b:13:f7:01:0f:70:6e:c2:e8:97:
4c:78:3d:22:fe:28:8c:9d:e2:3e:04:60:c0:71:4d:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9900::/40
Signature Algorithm: sha256WithRSAEncryption
11:b1:28:d1:eb:7a:7c:16:ed:7a:2c:9f:11:8b:cd:cd:e3:c6:
a6:c1:0b:a8:0f:b2:6c:3f:a8:2f:9d:6a:41:cd:8c:b2:01:53:
5a:24:7c:f9:3b:7a:61:06:b4:d4:28:15:57:27:86:79:ca:3d:
cd:7b:7a:c1:fd:b4:45:ac:5f:ca:1e:b2:7c:4f:10:97:1d:af:
6d:6e:42:9b:1d:88:5e:19:9d:b1:65:1b:33:5d:ad:c0:d0:1e:
b7:22:75:27:fd:14:35:8f:f0:c3:90:e4:2c:68:a3:38:15:53:
57:be:83:c0:5c:68:56:50:0b:25:38:e9:43:c5:97:fc:61:fa:
09:bf:2d:7b:97:34:ae:04:00:45:05:66:95:81:95:4d:c1:38:
1d:6c:a2:35:9c:af:d2:0b:93:28:32:79:e9:10:45:19:29:52:
b3:05:c0:63:e9:9d:0c:cf:3a:dc:40:be:e7:74:7d:c5:f4:12:
c2:fb:a5:2b:54:31:9b:e7:d7:dd:89:3f:b1:43:9b:d0:2c:2d:
5f:2b:b0:7d:39:e5:88:b5:1b:2b:f0:be:53:e8:91:c2:8f:32:
8b:dd:a5:4b:ec:10:ea:bb:cc:7f:ab:66:60:f1:fe:a1:0e:ae:
b1:a5:25:ef:5f:1e:a1:f4:47:1a:2a:9d:f7:82:d9:06:17:17:
94:7b:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:29 2026 by rpki-client