Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (raw, json)
Hash identifier: y9zM1c6B1w6ZHayzP3cukXcwz/NrLwnsV2c+ymhCHPc=
Subject key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 12D33311D443B02F54A424A2E8E61391034DE3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 14:02:49 +0000
Certificate not after: Tue 11 May 2027 14:07:49 +0000
Subordinate resources: IP: 2a11:f2c0:fff0::/48
IP: 2a11:f2c0:fff2::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d3:33:11:d4:43:b0:2f:54:a4:24:a2:e8:e6:13:91:03:4d:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 12 14:02:49 2026 GMT
Not After : May 11 14:07:49 2027 GMT
Subject: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:7d:53:a1:a1:ab:74:e4:16:39:1e:a6:a5:
9c:9d:1a:8c:db:9c:5b:64:c9:42:c5:96:b1:91:7b:
63:7b:85:93:19:c5:ea:9e:c7:fd:4c:1f:4a:84:1d:
86:a6:60:94:ee:8a:6c:af:1e:29:54:fc:6c:37:2f:
9c:f9:9c:07:e5:b8:cb:d3:b2:00:63:c0:f1:29:67:
ce:5a:46:a4:00:db:43:07:49:7a:0f:fe:2d:7a:2f:
3f:36:a4:c5:6b:b8:11:56:f7:79:74:a8:45:a1:50:
ca:1f:7c:76:86:8e:ba:3e:2d:bb:05:48:a6:49:5d:
47:3b:93:89:76:00:2a:87:4b:e7:d4:58:d6:12:60:
23:69:73:a5:d8:5b:98:98:9e:7e:23:8e:0f:8e:22:
79:1a:26:93:5d:04:8b:53:07:f5:87:57:a1:8b:de:
87:ad:34:3b:01:2b:f6:15:02:3a:f0:3a:13:86:9e:
65:68:4d:6f:79:9d:90:03:66:d1:ba:95:44:16:58:
a2:d3:ca:cc:f6:95:bc:7c:58:ee:c1:45:a8:f8:24:
10:d6:1f:54:ce:62:45:12:37:28:01:ac:c3:63:5c:
9d:95:4e:47:05:cb:bc:30:7a:af:37:a0:3a:32:da:
96:53:73:d1:8f:83:e2:64:9e:6f:68:20:f1:3a:a8:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff0::/48
2a11:f2c0:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
9b:5a:60:06:9b:4d:1a:1f:3c:09:db:3d:70:76:3b:c4:7c:f3:
e3:5d:35:85:51:8c:a1:d5:69:55:bb:bc:5f:83:14:26:2d:df:
1a:a4:a5:26:5e:df:2d:f0:24:94:5a:6e:d2:27:e8:2c:58:a2:
cc:af:cf:37:22:7c:42:44:2d:a6:d5:cf:f9:18:cd:99:97:07:
47:96:38:c5:69:7b:0e:2c:70:5e:6c:04:75:1f:fa:dd:13:7d:
c9:d9:dc:97:2f:08:b6:89:25:be:a6:47:e1:9e:af:0f:12:99:
a2:ed:39:2e:0e:5d:66:f7:7f:f0:91:c0:68:2b:d3:ff:d7:02:
d9:98:25:76:26:f9:62:8a:22:87:e1:e2:91:e2:a7:49:70:99:
cf:8f:86:a1:af:0c:3c:8c:46:89:d4:a7:77:5b:80:b1:df:65:
d8:39:ec:a6:7b:3f:3c:90:49:02:76:9e:eb:90:7d:75:5a:1e:
57:57:9e:ff:03:ff:d3:49:78:b4:60:02:60:78:39:50:fc:31:
d1:63:e7:18:a5:f8:0c:72:69:8b:4c:ea:af:20:46:6e:9f:e1:
c0:98:93:f3:0c:fb:6b:16:2b:3f:b2:d4:68:03:47:1e:5f:64:
87:c9:83:9a:02:97:93:2c:07:0d:78:3c:9c:74:be:28:3e:bd:
d7:28:80:35
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUEtMzEdRDsC9UpCSi6OYTkQNN4+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MTIxNDAyNDlaFw0yNzA1MTExNDA3NDlaMDMxMTAvBgNV
BAMTKDEwQjUxMzM5QzVCQ0NFNzA5Q0I2RDZBMTQ5MjFBQUY0QzZCQTZBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+X1ToaGrdOQWOR6mpZydGozb
nFtkyULFlrGRe2N7hZMZxeqex/1MH0qEHYamYJTuimyvHilU/Gw3L5z5nAfluMvT
sgBjwPEpZ85aRqQA20MHSXoP/i16Lz82pMVruBFW93l0qEWhUMoffHaGjro+LbsF
SKZJXUc7k4l2ACqHS+fUWNYSYCNpc6XYW5iYnn4jjg+OInkaJpNdBItTB/WHV6GL
3oetNDsBK/YVAjrwOhOGnmVoTW95nZADZtG6lUQWWKLTysz2lbx8WO7BRaj4JBDW
H1TOYkUSNygBrMNjXJ2VTkcFy7wweq83oDoy2pZTc9GPg+Jknm9oIPE6qATfAgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQtRM5xbzOcJy2
1qFJIar0xrpqQjAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfZWNiMzRiMDQ2OTFlNDk5NWE2MDY5NTJlODM2YjRlY2MvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEz
MzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAa
MBgEAgACMBIDBwAqEfLA//ADBwAqEfLA//IwDQYJKoZIhvcNAQELBQADggEBAJta
YAabTRofPAnbPXB2O8R88+NdNYVRjKHVaVW7vF+DFCYt3xqkpSZe3y3wJJRabtIn
6CxYosyvzzcifEJELabVz/kYzZmXB0eWOMVpew4scF5sBHUf+t0TfcnZ3JcvCLaJ
Jb6mR+Gerw8SmaLtOS4OXWb3f/CRwGgr0//XAtmYJXYm+WKKIofh4pHip0lwmc+P
hqGvDDyMRonUp3dbgLHfZdg57KZ7PzyQSQJ2nuuQfXVaHldXnv8D/9NJeLRgAmB4
OVD8MdFj5xil+AxyaYtM6q8gRm6f4cCYk/MM+2sWKz+y1GgDRx5fZIfJg5oCl5Ms
Bw14PJx0vig+vdcogDU=
-----END CERTIFICATE-----
Generated at Wed May 13 11:10:59 2026 by rpki-client