Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer
File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer (raw, json)
Hash identifier: D+dIzcyv9oaxtQZ0KD0a2LEy4KmQXi37YQyTUxRJeV0=
Subject key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7A0C9E9C90D4EE71EFC56BC5E80D6345155B0A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 13 Mar 2026 15:36:11 +0000
Certificate not after: Fri 12 Mar 2027 15:41:11 +0000
Subordinate resources: IP: 2a14:7580:900::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:0c:9e:9c:90:d4:ee:71:ef:c5:6b:c5:e8:0d:63:45:15:5b:0a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 13 15:36:11 2026 GMT
Not After : Mar 12 15:41:11 2027 GMT
Subject: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:82:0d:84:2f:3c:4c:1d:7e:e3:87:df:5b:
ac:79:a2:10:b6:93:6b:68:09:ca:42:34:bf:ec:66:
b3:7f:cf:ae:0c:b2:ca:ca:50:19:e3:95:0b:b6:1b:
c7:7c:04:ad:a3:31:e7:3a:fa:18:2d:d5:0b:7d:11:
c6:e7:c8:28:7f:b9:0f:4b:1d:0b:87:1e:42:8b:95:
b1:9a:d8:fb:e2:32:f2:11:13:d0:eb:9b:a9:e4:98:
85:9f:b5:32:ae:2d:19:4a:ed:db:66:da:df:1d:0a:
08:dd:fa:55:e4:35:d6:2b:a6:01:92:34:b3:63:5c:
0f:bf:91:79:00:db:5c:6f:60:3b:7c:c0:a7:84:c9:
19:32:61:da:6b:dc:9d:98:7a:eb:af:92:ec:cc:10:
01:93:48:d0:df:39:0a:80:1e:28:6d:b7:56:10:05:
26:a7:78:35:c5:51:4e:ed:04:05:98:6a:34:66:ec:
17:1f:2e:61:24:da:2e:a1:ab:56:98:a0:f4:7c:e8:
8d:b4:2b:ac:64:d5:e8:73:19:7e:cc:35:23:ff:c4:
84:72:38:e8:ce:c2:27:8a:de:27:44:e4:58:cd:ff:
9f:29:be:81:c7:b5:e3:11:5b:41:21:b4:20:0e:3e:
65:56:22:ea:99:8c:33:af:10:aa:7e:af:c7:ba:33:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:900::/40
Signature Algorithm: sha256WithRSAEncryption
98:d8:b0:12:94:a3:c1:95:05:23:85:50:e6:be:12:32:93:06:
8e:8f:52:e9:23:e7:c2:84:31:69:0c:97:c9:5e:36:9f:62:69:
d4:26:21:07:4a:67:00:96:dc:31:b8:d3:2e:9c:59:0f:99:e8:
c0:68:b1:dd:45:75:8e:bb:16:f6:a6:14:f0:26:10:15:a0:f4:
25:48:d3:50:b7:41:2a:90:c2:67:c9:a0:f8:ee:44:c9:2c:05:
bb:51:bd:0a:d7:e8:58:b8:b7:5b:2d:ab:d4:22:02:a8:f3:53:
5a:46:82:28:85:8a:74:6a:77:50:8e:1c:e8:11:b5:ca:f0:ba:
8b:65:7b:72:44:a8:72:7d:ee:ea:77:9d:40:a3:a4:05:db:4a:
0e:d2:c8:c2:a2:4b:21:59:dc:5b:fc:3d:55:66:11:b6:6c:b6:
12:e1:27:c9:e1:84:c2:15:52:a8:cc:f1:ee:4f:73:09:0f:b6:
bd:4f:13:f3:67:df:4d:28:c4:d7:d6:c3:41:ce:0a:81:d8:cd:
2e:dd:68:4c:7b:5b:16:8e:ab:ef:aa:7b:ae:c0:d8:0e:17:82:
1c:79:10:f2:b2:a7:bf:51:8a:79:51:05:00:7e:0c:60:88:8f:
d5:55:a5:03:06:6f:98:e9:99:fb:b0:09:0b:f4:bb:e6:fc:64:
3b:a1:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:45:17 2026 by rpki-client