Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (raw, json)
Hash identifier: 1+AO6wsRJYBHcj6SRy9ykvqqrO1GdTejWNhrDLCPSHY=
Subject key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4C5E0F819187F587A1F87D748250EB04F90FF480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 22 Sep 2026 23:05:45 +0000
Certificate not after: Tue 21 Sep 2027 23:10:45 +0000
Subordinate resources: IP: 2a0f:1cc6::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:5e:0f:81:91:87:f5:87:a1:f8:7d:74:82:50:eb:04:f9:0f:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 22 23:05:45 2026 GMT
Not After : Sep 21 23:10:45 2027 GMT
Subject: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:6a:67:b5:55:38:7b:9a:20:5f:d6:b6:0c:
e4:a3:06:52:57:d4:c9:96:81:f9:e9:41:a2:a6:bf:
a4:9a:4e:75:c3:05:df:b9:95:c5:0c:86:9a:28:86:
10:78:82:5e:cf:e9:0e:6a:c5:c4:c1:d9:9e:95:b6:
39:a6:5c:52:60:7a:89:99:a0:98:90:cc:b4:fc:2c:
3d:6b:fe:5c:2c:ac:5e:6b:e6:12:5c:ae:7f:b3:62:
4f:9c:94:43:62:31:89:dc:0c:f9:72:c4:a5:e4:b9:
f9:c6:e5:6f:35:22:f4:9d:b9:bc:bc:6b:bc:8c:ae:
4b:05:70:ce:ee:68:28:4b:3b:93:3e:0c:92:e7:8c:
ed:f5:b8:68:2a:ec:f9:b2:3c:c5:44:37:d2:1a:90:
31:b5:5e:a3:68:22:4d:f3:9e:40:3a:46:24:94:7f:
7d:88:fe:e4:2b:e4:82:30:18:59:9b:ad:6e:da:b5:
d0:d5:95:75:87:cb:77:1e:4b:d0:7e:92:6b:c7:9a:
6e:52:29:c1:d2:1b:fb:34:dc:46:43:0d:77:9f:7d:
b7:0f:3d:fd:6b:27:a0:f8:be:7d:e5:cb:89:b6:3c:
64:07:1f:4d:6a:0d:8e:bc:82:75:ea:69:79:a8:20:
48:48:93:94:5d:4d:cb:92:8a:87:99:cc:d2:e3:24:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6::/32
Signature Algorithm: sha256WithRSAEncryption
28:2e:d1:bb:e0:93:28:dc:a6:d4:9d:0f:eb:36:15:38:3f:d0:
f5:02:b5:1f:38:e7:02:f5:43:aa:d5:d8:29:96:33:61:c8:e2:
fd:22:af:25:7b:66:2f:0a:37:7f:77:ae:13:b5:c7:a5:57:90:
08:7d:a7:83:9a:b7:69:e5:93:68:26:6f:d6:f3:78:14:c1:17:
4c:7a:fc:34:1f:f7:b3:71:2c:c4:1d:19:c2:6a:a4:ef:cf:78:
78:03:89:18:02:98:ad:eb:eb:10:b5:00:b8:17:a4:92:f2:1e:
da:75:4a:ce:5f:8b:99:ea:07:45:d3:0a:91:15:de:82:2d:7b:
f1:5a:9f:dd:8a:90:a4:1c:06:40:0e:1d:08:14:0b:d9:3c:06:
94:7e:2c:e6:81:0b:bf:41:0a:c9:09:aa:fe:c3:ca:2e:8e:76:
8d:c0:48:77:bc:38:a0:b8:d3:b6:c8:98:35:e4:f1:8b:9f:09:
84:8e:0f:b6:5d:a7:0a:60:93:89:8a:0e:ef:34:14:91:a8:2d:
93:48:cc:97:31:0f:60:21:10:aa:e5:96:9f:8d:02:9b:c4:81:
b6:45:f4:e5:0b:b8:62:33:95:9d:e5:7a:f4:d6:01:ee:da:e7:
a5:1c:34:86:87:d4:b9:c1:0a:2d:92:ca:77:41:3d:98:a5:a4:
ba:43:ff:0e
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUTF4PgZGH9Yeh+H10glDrBPkP9IAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA5MjIyMzA1NDVaFw0yNzA5MjEyMzEwNDVaMDMxMTAvBgNV
BAMTKDUyOUJGQzZERDMwNkIyQzQ5NjI5QUE2Q0VCMzEzMTk0Q0FBNUQzM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mGpntVU4e5ogX9a2DOSjBlJX
1MmWgfnpQaKmv6SaTnXDBd+5lcUMhpoohhB4gl7P6Q5qxcTB2Z6VtjmmXFJgeomZ
oJiQzLT8LD1r/lwsrF5r5hJcrn+zYk+clENiMYncDPlyxKXkufnG5W81IvSduby8
a7yMrksFcM7uaChLO5M+DJLnjO31uGgq7PmyPMVEN9IakDG1XqNoIk3znkA6RiSU
f32I/uQr5IIwGFmbrW7atdDVlXWHy3ceS9B+kmvHmm5SKcHSG/s03EZDDXeffbcP
Pf1rJ6D4vn3ly4m2PGQHH01qDY68gnXqaXmoIEhIk5RdTcuSioeZzNLjJKepAgMB
AAGjggLiMIIC3jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRSm/xt0wayxJYp
qmzrMTGUyqXTPzAfBgNVHSMEGDAWgBQb4kACGih/KYlz2eoo38gHNf1YADAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8xQkUyNDAwMjFBMjg3RjI5ODk3M0Q5RUEy
OERGQzgwNzM1RkQ1ODAwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRy1KQUFo
b29meW1KYzlucUtOX0lCelg5V0FBLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMDkyZDE2ZjItOWI0Ni00YTExLWFjNTktNDJiM2RkZWUxMTA2LzIv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8wOTJkMTZmMi05YjQ2LTRhMTEtYWM1OS00MmIzZGRlZTExMDYv
Mi81MjlCRkM2REQzMDZCMkM0OTYyOUFBNkNFQjMxMzE5NENBQTVEMzNGLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAqDxzGMA0GCSqGSIb3DQEBCwUAA4IBAQAoLtG7
4JMo3KbUnQ/rNhU4P9D1ArUfOOcC9UOq1dgpljNhyOL9Iq8le2YvCjd/d64Ttcel
V5AIfaeDmrdp5ZNoJm/W83gUwRdMevw0H/ezcSzEHRnCaqTvz3h4A4kYApit6+sQ
tQC4F6SS8h7adUrOX4uZ6gdF0wqRFd6CLXvxWp/dipCkHAZADh0IFAvZPAaUfizm
gQu/QQrJCar+w8oujnaNwEh3vDiguNO2yJg15PGLnwmEjg+2XacKYJOJig7vNBSR
qC2TSMyXMQ9gIRCq5ZafjQKbxIG2RfTlC7hiM5Wd5Xr01gHu2uelHDSGh9S5wQot
ksp3QT2YpaS6Q/8O
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:32:54 2026 by rpki-client