Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (raw, json)
Hash identifier: LkVI0g9oUcn8PRw8FEApkrg5rpAzBoVZqwCrKqCmnZs=
Subject key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 586DDAB47690E2EB6430CF571DA9BDA821639E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 22 Jul 2026 23:04:19 +0000
Certificate not after: Wed 21 Jul 2027 23:09:19 +0000
Subordinate resources: IP: 2a0f:1cc6::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6d:da:b4:76:90:e2:eb:64:30:cf:57:1d:a9:bd:a8:21:63:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 22 23:04:19 2026 GMT
Not After : Jul 21 23:09:19 2027 GMT
Subject: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:6a:67:b5:55:38:7b:9a:20:5f:d6:b6:0c:
e4:a3:06:52:57:d4:c9:96:81:f9:e9:41:a2:a6:bf:
a4:9a:4e:75:c3:05:df:b9:95:c5:0c:86:9a:28:86:
10:78:82:5e:cf:e9:0e:6a:c5:c4:c1:d9:9e:95:b6:
39:a6:5c:52:60:7a:89:99:a0:98:90:cc:b4:fc:2c:
3d:6b:fe:5c:2c:ac:5e:6b:e6:12:5c:ae:7f:b3:62:
4f:9c:94:43:62:31:89:dc:0c:f9:72:c4:a5:e4:b9:
f9:c6:e5:6f:35:22:f4:9d:b9:bc:bc:6b:bc:8c:ae:
4b:05:70:ce:ee:68:28:4b:3b:93:3e:0c:92:e7:8c:
ed:f5:b8:68:2a:ec:f9:b2:3c:c5:44:37:d2:1a:90:
31:b5:5e:a3:68:22:4d:f3:9e:40:3a:46:24:94:7f:
7d:88:fe:e4:2b:e4:82:30:18:59:9b:ad:6e:da:b5:
d0:d5:95:75:87:cb:77:1e:4b:d0:7e:92:6b:c7:9a:
6e:52:29:c1:d2:1b:fb:34:dc:46:43:0d:77:9f:7d:
b7:0f:3d:fd:6b:27:a0:f8:be:7d:e5:cb:89:b6:3c:
64:07:1f:4d:6a:0d:8e:bc:82:75:ea:69:79:a8:20:
48:48:93:94:5d:4d:cb:92:8a:87:99:cc:d2:e3:24:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6::/32
Signature Algorithm: sha256WithRSAEncryption
1f:a3:75:65:dc:8b:13:fd:89:27:12:4e:d3:57:4a:20:62:53:
09:f0:13:5e:09:da:35:34:7e:f2:e8:4e:3f:a9:28:4a:06:d2:
a2:fa:33:2e:11:5b:f5:14:74:41:17:b0:e0:27:6c:2b:15:25:
2f:b3:c2:96:7c:1d:c8:40:db:30:f4:05:57:f2:ae:4f:dd:a1:
2d:4d:1c:b0:ee:5b:ec:59:b9:9a:0b:3b:53:4b:d1:74:72:72:
06:6f:8c:34:03:97:c1:26:f1:d3:dc:9f:52:bc:da:64:a8:41:
bc:ea:1b:08:69:89:ea:b6:2f:9b:74:5b:e6:a1:c4:40:31:0e:
55:86:d3:03:d0:3f:e6:8e:a0:51:82:e1:a8:cb:6f:41:c4:9d:
f3:51:18:0d:74:64:4c:e1:88:8a:98:e4:48:5f:c4:81:53:c8:
fe:2e:82:d7:dc:7f:f6:29:b6:d9:f8:97:da:9c:41:d0:66:a0:
0d:e2:41:fc:e4:c0:18:62:16:9d:f2:24:37:a9:94:02:af:34:
8d:5f:ae:08:ac:7c:78:82:98:68:14:3e:28:30:b1:2b:f8:50:
88:e3:78:30:ed:e5:a8:76:31:1d:d9:ed:d6:d7:3f:0c:29:31:
83:be:0d:1f:34:d7:0b:1d:a6:9d:7a:d8:88:40:59:25:14:5e:
c8:1f:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:46 2026 by rpki-client