Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
File: 808DAC70271F8080A22C1AEE42EFAF98E1776954.cer (raw, json)
Hash identifier: CN45Ez+M2vYahrL4T9F4S9FbNKE4AsSthOsRoXNZFZM=
Subject key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Certificate issuer: /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial: 09A1C1613A73085F468DD28BD4DE23120858AD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Manifest: rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
caRepository: rsync://rpki.axivora.net/repo/Axivora-Net/3/
Notify URL: https://rpki.axivora.net/rrdp/notification.xml
Certificate not before: Wed 18 Mar 2026 16:38:21 +0000
Certificate not after: Wed 17 Mar 2027 16:43:21 +0000
Subordinate resources: IP: 2a0f:1cc5:e00::/40
IP: 2a0f:1cc5:ffff::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a1:c1:61:3a:73:08:5f:46:8d:d2:8b:d4:de:23:12:08:58:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
Validity
Not Before: Mar 18 16:38:21 2026 GMT
Not After : Mar 17 16:43:21 2027 GMT
Subject: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:55:e0:23:ac:e8:24:78:90:9e:bc:0c:0f:
96:97:a8:73:6c:c8:58:4f:d0:c0:ea:18:50:cb:28:
1b:85:e7:38:f3:d7:ba:d7:a4:83:51:ee:1e:49:05:
73:22:03:c2:f4:1c:de:e8:08:d4:b3:f0:e9:9a:07:
3f:20:14:44:b5:8a:c5:25:42:ea:33:85:1b:fd:73:
18:43:9a:44:4f:3e:1c:3e:97:35:b6:05:f1:11:b1:
0e:da:e8:56:a3:14:8c:96:0f:db:4d:c0:06:a9:92:
72:b4:04:a6:cc:d7:15:a0:91:45:39:51:87:b4:55:
2b:05:c8:a1:c0:3b:b6:5f:9d:bf:4d:56:e2:fc:db:
85:8e:98:73:76:5c:04:36:5c:89:ac:12:39:9a:78:
c8:a5:bb:2a:c5:11:04:b9:22:85:02:51:e8:3f:d9:
94:35:09:92:a0:e7:d6:13:11:cd:c6:8b:df:25:f8:
bb:86:8f:f3:8d:f8:29:28:ff:8c:61:6c:d9:83:29:
0c:87:47:6f:3a:9a:d2:51:bd:01:17:cd:38:1f:2a:
28:76:31:ac:8a:66:b0:b7:05:8c:cf:b0:68:47:2a:
c9:4d:1a:69:31:fd:78:b6:53:ee:b2:ac:02:90:eb:
56:8b:8b:90:81:57:04:ca:40:6b:cf:5f:10:2c:85:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
X509v3 Authority Key Identifier:
keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/
RPKI Manifest - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
RPKI Notify - URI:https://rpki.axivora.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:e00::/40
2a0f:1cc5:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
75:1c:bb:d9:29:a8:58:78:21:db:2b:a8:00:a5:db:bf:6e:d6:
21:e1:c2:eb:99:bc:7c:76:29:b1:ef:f9:06:ff:31:72:d7:42:
b5:5d:c6:4c:2c:df:53:9a:5f:2f:9c:39:9d:09:99:68:bd:4f:
b3:39:a4:e4:6f:da:cb:5c:b2:9d:2b:15:0c:6f:00:58:cd:23:
ca:a2:46:37:a9:e7:a9:66:a2:a5:85:df:f7:42:37:a5:c7:dd:
e3:c6:f0:a3:ea:ad:68:f6:ec:6f:38:2b:a6:d7:86:c9:a7:dd:
56:f9:88:d7:fd:d2:5a:e2:b6:2e:2c:6c:bb:48:21:82:2f:0e:
30:d1:73:fa:5b:ff:70:59:d8:da:df:1d:ed:56:d8:b3:e6:b7:
73:48:42:41:c9:23:19:ef:59:7f:b2:d2:f0:7e:54:bb:a9:49:
e6:75:90:18:a4:c8:b8:4f:a1:0d:21:24:8b:2e:98:18:00:ba:
7e:fa:b5:1c:05:af:f7:86:d3:72:93:9c:1d:3b:2f:d2:3d:77:
d7:e3:e7:be:2c:d4:c2:24:45:aa:8b:fb:0f:e1:48:7f:2f:ef:
78:00:89:50:22:60:6b:1e:5c:9f:a9:c4:26:0d:f5:2f:98:3d:
5c:80:95:ad:31:ee:05:70:5b:76:e7:6a:10:c4:7e:91:07:7d:
0d:b0:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:14 2026 by rpki-client