Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer
File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (raw, json)
Hash identifier: cGuC/G8xkL/YmxloFW8S0xOES6Apz3n6B18bIhqXJ9k=
Subject key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 42AA551C165DA208E2EE6E2364AF513F7D577726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 17:36:42 +0000
Certificate not after: Mon 10 May 2027 17:41:42 +0000
Subordinate resources: IP: 2a11:f2c0:b100::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:aa:55:1c:16:5d:a2:08:e2:ee:6e:23:64:af:51:3f:7d:57:77:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 17:36:42 2026 GMT
Not After : May 10 17:41:42 2027 GMT
Subject: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:db:c5:1f:75:75:06:d2:82:e6:66:15:e3:
7e:3f:cf:c5:86:58:cf:8b:82:2b:02:2a:3c:f9:54:
35:eb:ef:40:89:e9:cb:ce:c0:0a:66:05:2f:ee:34:
9a:df:7c:6e:cd:f7:29:ad:20:28:17:59:65:3a:af:
84:40:6b:21:02:dc:3d:3e:9e:f5:61:86:f4:5d:74:
c6:b8:c9:d6:72:e3:c4:96:75:0e:67:7e:8c:b8:5f:
5f:db:3c:51:06:8e:97:90:b1:2e:37:ea:c8:1a:89:
71:78:ef:4f:c3:b4:5a:5d:20:70:2e:28:55:0e:fd:
db:12:be:ea:dd:75:ca:bd:e3:c5:ed:67:b2:3b:98:
51:9c:3a:c0:b6:5c:df:75:bb:da:a0:f6:cb:87:4e:
ff:a4:b0:bb:39:17:b1:e1:a2:66:c5:7c:fd:87:75:
b4:6e:dd:87:e1:62:c3:3d:a1:77:f1:18:0f:e2:84:
52:9f:67:8e:55:8d:7b:32:44:68:8d:49:ed:71:06:
2f:c5:ea:05:8a:4f:63:f7:f8:8e:62:74:a3:e0:01:
10:92:d0:d6:53:b7:8d:20:c9:69:b6:4c:17:f1:70:
fd:25:5a:4e:60:f2:4c:e1:48:e8:8f:6a:7a:0e:1c:
0d:ba:08:bf:e2:46:e2:92:11:1f:06:ca:ba:1f:3e:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:b100::/40
Signature Algorithm: sha256WithRSAEncryption
68:6e:11:2f:de:20:0a:17:11:4c:88:c5:ff:97:fb:07:a7:b6:
5b:0d:af:28:39:b9:7e:e4:ba:52:8a:57:8c:80:95:c5:f3:5d:
16:c1:ea:75:02:a1:3b:ba:66:54:3b:46:96:c5:2e:53:a4:b5:
d0:d4:d6:bd:98:06:18:8b:9d:7f:f5:f3:b1:24:fd:8f:29:e6:
7b:35:8e:3b:57:bb:b9:f2:32:93:3a:35:26:43:cc:2f:ce:17:
9c:48:91:4e:bd:84:1a:ca:2d:c8:e9:94:ad:ce:d0:60:4f:1b:
66:a0:2e:71:2c:5a:6f:98:b5:a9:70:0c:9f:59:a3:44:c2:8c:
6d:7b:6d:58:e6:3f:da:ff:46:d1:d9:cc:81:84:d7:43:79:22:
a3:ab:43:2f:79:24:21:67:a2:1e:75:ae:40:ca:e1:c4:5b:86:
40:33:0f:b5:7b:69:03:68:ac:40:8a:e3:07:d0:a8:f1:39:c0:
f2:7f:f6:8c:b8:fe:9d:85:31:63:55:71:de:16:21:1e:d6:a3:
f1:27:64:72:23:51:76:9c:93:59:9b:65:03:e1:c3:14:24:4a:
a2:a3:7f:92:ef:8d:f1:84:b0:1c:ad:2c:cb:e3:dc:49:61:07:
13:7e:27:fb:53:97:c7:03:24:e8:74:e9:36:83:ee:ef:f5:19:
b6:40:af:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:20 2026 by rpki-client