Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer
File: 77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.cer (raw, json)
Hash identifier: JdOwSwFMw2nGTIThsV98WDDz9hKTTDI9rXFoXLo5GHY=
Subject key identifier: 77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3A2EBC0EA3D841C25C1C5B1EAECC4586F966C99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 02 May 2026 08:22:08 +0000
Certificate not after: Sat 01 May 2027 08:27:08 +0000
Subordinate resources: IP: 2a14:7580:fa00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2e:bc:0e:a3:d8:41:c2:5c:1c:5b:1e:ae:cc:45:86:f9:66:c9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 2 08:22:08 2026 GMT
Not After : May 1 08:27:08 2027 GMT
Subject: CN=77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:13:d6:ef:e1:8f:16:9a:02:26:e8:33:cb:d2:
99:a9:b6:fe:10:46:01:30:94:ab:26:b2:5e:9b:76:
00:de:86:8b:4e:22:9d:38:97:eb:a5:93:81:7d:e5:
66:e4:5a:c1:8c:9e:5d:94:33:8d:1c:e4:67:c1:9d:
6b:e1:b7:03:89:50:fc:e5:7e:cd:66:93:54:8b:8d:
aa:21:a3:3c:91:47:17:0c:1b:40:2c:b0:21:ec:43:
e4:64:6b:c6:fd:65:ca:ef:dd:62:52:12:ca:fd:cc:
14:df:64:57:5a:0a:00:d7:b3:30:c3:40:00:5f:b2:
e2:9c:0d:5f:f6:e9:ec:36:4f:8e:02:12:ba:d3:83:
a8:11:f3:56:0a:c9:08:e2:c0:04:38:b3:67:8f:c2:
9c:88:52:6a:d8:f0:c3:5a:45:dd:ef:e3:3d:e4:de:
e6:b3:cf:65:3f:0c:f6:bd:63:0b:53:f6:e1:72:0a:
96:9b:99:d1:0f:24:aa:9f:10:bb:26:ec:48:ab:5e:
b7:fb:b0:8e:e6:58:ac:b2:3c:34:34:63:68:69:38:
a2:11:30:b3:48:9c:b0:31:95:af:f2:45:85:11:01:
d5:82:69:bd:25:38:b8:35:d6:77:e6:79:26:e0:67:
06:ac:19:08:60:a0:38:54:13:df:4a:c5:95:c5:22:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
77:E4:D2:3D:0F:DA:CE:E2:93:3D:9A:6D:30:33:CD:F5:EF:C3:ED:A5
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/1/77E4D23D0FDACEE2933D9A6D3033CDF5EFC3EDA5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
5b:0b:ed:58:f4:e7:e4:da:55:a0:1b:d4:6a:d8:5a:f4:5c:fc:
5d:6f:10:8e:3e:16:78:5b:cb:0c:77:57:02:de:d1:18:73:ea:
63:c8:a5:d4:f5:8c:83:07:26:19:24:f7:e2:a1:ec:d1:60:56:
b4:67:aa:68:64:6d:94:0b:a0:8f:35:66:03:c7:0e:9d:57:fc:
c4:79:b8:bf:62:98:73:a3:dd:23:c6:c6:bc:7d:12:f1:b8:34:
52:7d:8c:91:c8:57:ea:48:f6:ad:fa:65:35:b5:e2:2d:1c:06:
bf:be:bc:c7:39:d4:19:96:bd:6e:d9:6c:9f:f8:1b:c1:80:4a:
14:bb:6d:43:e4:4b:cd:71:27:b6:33:28:d4:72:a9:9a:a6:14:
91:2b:a5:5c:b1:15:e3:f3:c4:c8:96:c6:f6:54:46:3f:af:68:
b3:7f:88:36:bf:c6:46:ce:f2:dc:c0:01:44:81:c4:81:69:4e:
94:ba:32:5b:d9:0a:10:07:8b:3d:f2:6c:cc:6e:a1:06:70:18:
8f:5c:12:bb:c9:03:a0:4c:7e:6d:ad:a2:55:a2:84:d7:44:46:
c1:9e:1f:36:3b:57:24:8f:fe:53:97:7b:dc:04:2b:8c:de:39:
65:0d:df:c7:fd:9b:c5:63:21:57:dc:e9:34:7a:94:fc:2b:33:
32:36:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:47 2026 by rpki-client