
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
File: B75F3781BC9C2E7301754988659F92686704E570.cer (raw, json)
Hash identifier: aQYasCsOu/97LhggEk51hT1Qn3Z395R5iauHsVa4B4M=
Subject key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1808E9A66197E2676F2908492C40DA1AB59BDCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 08 Jul 2026 19:50:17 +0000
Certificate not after: Wed 07 Jul 2027 19:55:17 +0000
Subordinate resources: IP: 2a14:7583:4000::/36
IP: 2a14:7583:ef50:: -- 2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
IP: 2a14:7584:1000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:08:e9:a6:61:97:e2:67:6f:29:08:49:2c:40:da:1a:b5:9b:dc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 8 19:50:17 2026 GMT
Not After : Jul 7 19:55:17 2027 GMT
Subject: CN=B75F3781BC9C2E7301754988659F92686704E570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:4a:77:de:1c:07:6c:5d:57:72:73:50:76:
19:e2:13:2b:93:4e:61:9d:ad:25:6c:33:de:5d:81:
79:ab:df:70:33:de:dc:28:96:78:8c:66:df:5a:07:
c9:7b:0a:ec:74:b1:b4:a5:2d:74:0b:69:4a:7d:59:
e7:fc:28:26:44:b4:f6:10:d4:f0:d1:ea:ec:68:c7:
f7:fa:6b:b1:7c:9a:fc:fb:b1:e9:9a:2c:59:20:32:
20:fd:79:ae:eb:47:8e:b5:8a:f0:67:7b:78:32:0d:
26:1f:ad:ef:37:25:dc:0d:bf:d6:3e:3a:77:51:be:
74:7b:82:be:5a:c4:57:d5:b8:4b:de:21:58:b6:61:
07:be:39:3b:5e:9c:fe:be:52:1b:0c:7c:77:9a:fe:
14:44:fe:7e:1b:ae:7c:c5:70:83:50:9b:04:3d:1c:
02:b4:e6:b1:91:62:ad:f7:a3:bb:27:29:f6:fe:46:
fa:1b:3e:83:3f:b4:43:9c:40:6a:8b:35:ba:af:d1:
a9:ee:1c:d5:c9:c5:be:ac:41:c9:26:33:7d:24:52:
64:4e:0c:02:f6:a9:99:98:fd:71:02:bd:3f:83:df:
b6:13:9c:85:b7:f9:5b:e0:78:26:eb:dd:a4:4f:bf:
69:1c:41:5f:a6:f7:af:2d:4d:7e:87:0a:9f:ca:bd:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:4000::/36
2a14:7583:ef50::-2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
2a14:7584:1000::/36
Signature Algorithm: sha256WithRSAEncryption
84:38:4a:e4:68:58:54:6d:e6:38:ca:a8:ce:c1:9a:de:92:b8:
bd:5d:6d:27:ae:5b:99:3c:49:40:7d:97:80:32:8b:c4:ac:92:
ea:01:9d:2b:43:1a:e0:c0:aa:d6:17:ae:f7:15:bc:4d:b9:4a:
ba:c6:d2:d9:26:d0:d7:dd:1b:4a:5a:53:e0:f6:07:04:e3:09:
47:8e:ea:8e:66:aa:5d:2c:db:1e:f6:02:44:f8:b8:91:b4:34:
fa:39:cf:c5:d6:61:07:2f:96:f3:30:eb:e8:ea:8d:8e:aa:31:
6c:d7:4a:b0:2e:8c:7b:d5:e7:63:c3:77:3a:ec:34:3d:d1:8c:
6a:43:3d:06:3c:7b:23:9f:3b:6f:95:ce:17:07:84:ef:85:a5:
59:1f:1f:bb:f6:68:cb:6e:72:f2:9d:89:a9:20:fd:d1:9e:7b:
0f:f9:bd:55:e1:3a:8b:e1:bf:53:70:93:a3:93:dc:18:1f:1f:
c3:bd:47:9a:da:58:d9:3c:ab:c0:40:3b:b2:9b:8b:5d:79:ec:
a4:ac:6c:bc:43:6b:73:69:57:42:69:18:ca:a7:2c:ae:b0:af:
3e:a8:57:30:c2:db:d1:75:ad:8e:03:40:17:7b:4a:58:ae:fd:
13:46:08:1a:fb:96:0d:78:73:c8:7e:ee:1e:a1:ee:9d:36:13:
e0:60:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:19 2026 by rpki-client