Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer (raw, json)
Hash identifier: EKKZ56aOu7a73dyzMusaxwUM/Pildy+f96gUnV3fXZk=
Subject key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2E93FF40CF8EBCDF549808A255C6F05EABB622C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 08:37:30 +0000
Certificate not after: Tue 11 May 2027 08:42:30 +0000
Subordinate resources: IP: 2a14:7581:4000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:93:ff:40:cf:8e:bc:df:54:98:08:a2:55:c6:f0:5e:ab:b6:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 12 08:37:30 2026 GMT
Not After : May 11 08:42:30 2027 GMT
Subject: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:8c:a6:0b:53:f3:e3:6f:5b:4d:7f:83:43:
31:17:81:1b:08:9c:7f:cf:5c:5b:00:98:8d:ab:37:
c1:ae:b0:56:29:c2:87:53:4a:27:83:00:d3:fa:62:
9d:4a:b8:21:67:49:b3:4d:8a:dd:4f:86:49:5c:63:
b3:ff:d7:a3:27:53:63:97:37:b2:27:9f:1b:9d:71:
5d:98:42:e8:e7:83:a0:28:95:92:76:99:29:be:45:
c1:32:e6:60:e9:7e:1a:3a:06:e5:0d:34:be:bd:24:
c9:3d:bf:0d:d8:dc:bb:06:d7:91:f0:ec:88:72:8a:
78:46:e4:8d:6c:b5:68:1f:f0:b1:95:dd:93:1e:78:
a3:b9:ef:0e:0b:b1:d5:9c:25:a3:4c:ad:e6:6d:21:
d1:e1:83:41:48:a4:af:dc:d3:cf:04:fc:71:7d:d1:
13:0c:bd:24:65:7b:08:2d:65:5d:2d:ab:fb:90:96:
78:65:9f:79:3c:42:6d:d7:5c:ff:08:0a:b1:b7:33:
74:b2:4f:4b:09:e7:be:7b:d8:73:61:c4:28:26:3b:
ff:e6:51:16:cc:52:e2:f8:86:e3:de:f2:ba:c1:35:
e5:42:60:4e:d6:76:5e:63:64:4b:26:5c:54:5a:3b:
52:d4:62:c3:c5:71:ca:3c:a3:eb:71:6c:c3:82:47:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:4000::/36
Signature Algorithm: sha256WithRSAEncryption
82:a4:4b:33:0e:fa:52:60:5d:11:6c:41:b3:7f:e1:4d:56:99:
bc:9e:0a:44:69:48:f7:35:f6:a0:4a:28:3d:41:df:f6:b0:9b:
c1:80:9b:44:c1:d4:13:1b:66:78:80:94:d6:59:55:0e:e4:d7:
98:fe:19:15:67:f1:7b:7c:1b:2c:dc:f9:3e:56:f9:85:53:c1:
60:af:b4:db:13:ac:75:46:da:c5:c0:0f:03:be:a4:ca:dd:1a:
f6:3f:d1:e3:e7:e1:50:85:9e:75:2d:df:6f:55:e1:d2:88:fc:
7a:e6:a9:84:d1:68:b1:2d:10:67:ba:d0:6d:76:1f:0d:8f:a4:
b3:31:9f:27:2e:d7:3e:46:f0:47:45:ff:98:bf:cf:b7:2c:72:
66:d2:64:c2:c9:a5:ba:6c:71:66:de:d1:71:03:98:d8:ad:7b:
0f:1e:77:a8:db:8e:d6:da:09:3d:e2:84:76:e8:75:2b:6c:4b:
aa:a0:32:8a:7c:7e:e4:40:2b:b7:18:02:dc:67:2f:97:d3:de:
6b:16:7d:d2:f7:0f:91:b4:19:fe:8d:28:57:df:5f:13:32:68:
1f:56:63:42:7d:27:96:5c:48:9a:fd:b2:88:17:f8:30:61:21:
36:5f:a7:67:68:bf:a6:66:ab:85:d5:48:6b:d2:80:0d:d3:9e:
f0:d1:80:56
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIULpP/QM+OvN9UmAiiVcbwXqu2IskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA1MTIwODM3MzBaFw0yNzA1MTEwODQyMzBaMDMxMTAvBgNV
BAMTKDhFMDdEMzFDNjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5K4ymC1Pz429bTX+DQzEXgRsI
nH/PXFsAmI2rN8GusFYpwodTSieDANP6Yp1KuCFnSbNNit1PhklcY7P/16MnU2OX
N7InnxudcV2YQujng6AolZJ2mSm+RcEy5mDpfho6BuUNNL69JMk9vw3Y3LsG15Hw
7IhyinhG5I1stWgf8LGV3ZMeeKO57w4LsdWcJaNMreZtIdHhg0FIpK/c088E/HF9
0RMMvSRlewgtZV0tq/uQlnhln3k8Qm3XXP8ICrG3M3SyT0sJ57572HNhxCgmO//m
URbMUuL4huPe8rrBNeVCYE7Wdl5jZEsmXFRaO1LUYsPFcco8o+txbMOCR1w7AgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOB9McZFL3prJO
Y83cSQ4S4K+zjDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4NzU1LzQv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUv
NC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0REQzQ5MEUxMkUwQUZCMzhDLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWBQDANBgkqhkiG9w0BAQsFAAOCAQEAgqRL
Mw76UmBdEWxBs3/hTVaZvJ4KRGlI9zX2oEooPUHf9rCbwYCbRMHUExtmeICU1llV
DuTXmP4ZFWfxe3wbLNz5Plb5hVPBYK+02xOsdUbaxcAPA76kyt0a9j/R4+fhUIWe
dS3fb1Xh0oj8euaphNFosS0QZ7rQbXYfDY+kszGfJy7XPkbwR0X/mL/PtyxyZtJk
wsmlumxxZt7RcQOY2K17Dx53qNuO1toJPeKEduh1K2xLqqAyinx+5EArtxgC3Gcv
l9PeaxZ90vcPkbQZ/o0oV99fEzJoH1ZjQn0nllxImv2yiBf4MGEhNl+nZ2i/pmar
hdVIa9KADdOe8NGAVg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:58:23 2026 by rpki-client