Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
File: B149F23A3E99C4760297DD7104B400C835D86D19.cer (raw, json)
Hash identifier: bNqwcYD1LCNHEGMKXkT0CFhIMZ1nzhiz6ceUScRPgsg=
Subject key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0ADCD9EC5E25892384A524E4E75A37A04046AC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 11 Oct 2026 12:51:19 +0000
Certificate not after: Sun 10 Oct 2027 12:56:19 +0000
Subordinate resources: IP: 2a14:7583:f400::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:dc:d9:ec:5e:25:89:23:84:a5:24:e4:e7:5a:37:a0:40:46:ac:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 11 12:51:19 2026 GMT
Not After : Oct 10 12:56:19 2027 GMT
Subject: CN=B149F23A3E99C4760297DD7104B400C835D86D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:aa:63:c9:1b:dd:90:e4:01:29:1e:9d:78:
e6:93:51:39:a4:b9:87:45:15:1d:70:84:64:8e:6a:
7f:18:c3:48:41:24:b0:71:0c:9b:6b:93:20:36:23:
d9:0a:49:74:f7:48:40:6a:a2:e8:bb:08:3d:98:c6:
be:2e:77:e1:55:64:f1:0e:32:0d:9c:00:a8:be:72:
c6:2e:33:e4:38:df:27:7c:c4:5b:3e:04:cd:60:d3:
0c:67:1d:86:e3:4c:ba:32:4d:77:87:80:7c:32:33:
a9:c1:a4:28:d4:b5:8b:ff:5a:7a:22:49:be:40:41:
2e:2d:42:a3:e5:fe:d5:8a:08:21:d6:77:33:e8:37:
d1:01:02:b7:fd:38:8e:cd:ab:58:ef:30:97:4f:f2:
ba:3e:06:5c:53:66:28:77:05:27:5b:01:e4:51:bc:
02:32:a7:c9:7e:00:c2:52:36:9a:2c:3f:b7:d4:0b:
49:b3:4d:73:5f:e0:a8:4a:4c:30:a4:88:74:12:d6:
6b:92:5d:ed:97:f7:b4:07:a8:1a:18:c2:c0:1f:18:
a8:3c:56:0d:e9:b9:6d:6c:25:cb:24:f9:76:e8:8c:
6e:cb:f7:c3:46:4d:d6:12:18:8e:d2:e7:25:a3:59:
77:c1:0f:d6:8a:00:61:85:9b:00:ff:5b:0d:23:84:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f400::/40
Signature Algorithm: sha256WithRSAEncryption
26:dc:6f:27:37:50:65:f4:dc:16:48:30:f8:d8:e1:e1:61:a0:
73:3a:a1:a9:f4:df:91:e1:63:69:94:dc:74:b5:f8:28:ca:a1:
5c:44:4b:d8:f6:a5:14:84:f6:dc:5c:8f:e4:fe:04:24:7b:37:
ef:fb:08:e8:44:b1:65:33:be:89:a3:9b:96:75:7e:a2:d5:4b:
d4:eb:ac:ed:1e:f0:9b:e1:f5:fa:50:73:06:7c:d9:01:1d:d7:
a9:81:49:10:5d:83:a1:4d:a8:b2:a9:35:52:94:fb:12:db:5f:
d4:b3:2f:9b:97:b2:ec:81:bd:cb:e1:30:45:87:e0:bd:4b:a4:
ce:88:8c:b4:ed:f0:99:75:a4:19:b0:67:81:eb:ec:8f:b2:24:
43:25:5d:d0:e1:05:db:37:5d:2f:e3:9a:fd:53:83:2d:a0:1d:
bf:20:d2:ce:b2:05:cd:15:8a:af:d3:28:40:52:72:79:b9:ad:
68:04:75:aa:f7:5e:91:9c:25:b4:df:0a:d1:57:73:fa:ad:79:
2a:f1:09:fa:84:6e:9d:a1:5b:ba:1e:be:ee:47:e7:12:4b:87:
be:69:19:af:2b:da:95:2a:51:78:fb:48:76:8f:d3:15:b0:6f:
b1:1f:02:a8:1c:b3:29:99:05:f9:61:5f:24:e4:4e:a3:20:40:
91:d8:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:21:20 2026 by rpki-client