Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer
File: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (raw, json)
Hash identifier: LX41YwaaW8Xv/uTPdGvIVhnwQGD3IC9+3HwZwsA18+0=
Subject key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 633323EA9493EDA112DBD29750B8F1D4972AA6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 22:28:39 +0000
Certificate not after: Tue 11 May 2027 22:33:39 +0000
Subordinate resources: IP: 2a11:f2c0:ffc8::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:33:23:ea:94:93:ed:a1:12:db:d2:97:50:b8:f1:d4:97:2a:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 12 22:28:39 2026 GMT
Not After : May 11 22:33:39 2027 GMT
Subject: CN=1D570B984E9C5E382B0A879AA21F6518621F059F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:13:a3:be:96:07:ed:03:91:5d:25:b0:33:
fa:58:8a:68:c5:14:ef:a9:84:d0:a2:5d:ed:43:52:
12:6d:e3:93:f6:bc:a6:d6:63:e9:a9:06:c9:f5:a1:
f2:1c:c0:cc:9f:c1:0b:8b:70:bb:f8:df:9b:cf:f2:
4e:15:30:26:85:d2:df:06:25:ad:ea:67:47:7f:fa:
bc:cb:7f:9f:61:b3:ed:57:c2:f0:3e:ce:b7:30:8e:
de:27:a5:dc:b5:2e:1b:2f:82:60:06:6f:8d:79:09:
4b:1f:2b:94:ed:3d:d9:4c:32:62:06:b6:62:92:69:
d0:81:c5:30:d5:50:fc:a9:b3:a2:e4:c5:d0:90:77:
aa:f3:c1:4d:2d:f1:22:9e:e6:7c:79:9c:56:55:de:
6e:9e:33:d0:ef:52:dc:4b:4d:58:7b:66:77:d0:fe:
a6:35:ad:bd:44:4c:7f:92:01:a0:8a:1b:da:c2:d3:
eb:b4:e5:64:2b:09:a1:98:3d:fe:61:3d:df:35:04:
21:e8:e3:b2:d4:4d:0f:46:55:3b:68:84:8f:c9:65:
82:5b:1b:f8:1a:30:83:75:f7:51:00:ed:80:be:7d:
d8:1b:b1:6e:ac:44:ae:85:dd:ac:cb:39:b7:7b:db:
52:47:15:27:36:68:ea:3a:b9:b1:ac:c2:ab:c0:03:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc8::/48
Signature Algorithm: sha256WithRSAEncryption
a6:65:45:1e:9d:4e:9e:c4:97:9a:9b:95:72:ec:ff:9b:81:e8:
08:4b:4f:90:9b:d1:2a:13:17:f6:93:d2:b6:33:45:0c:6e:88:
34:1b:b7:cb:8e:bf:24:0e:11:89:a9:ff:29:66:79:53:7f:79:
ee:e6:2c:1a:bf:71:c5:9c:c1:39:c4:32:9c:a0:8c:49:05:df:
e4:3c:11:82:68:a5:aa:3b:b7:7a:4a:f4:43:c7:1b:f9:aa:9c:
8f:cc:8b:0d:db:b9:67:e0:61:ea:52:d5:a0:9c:e8:d0:6b:00:
df:3f:90:07:e0:c3:f4:0e:81:a4:ac:3b:1e:97:b0:8f:73:d2:
a7:d2:79:19:d5:9e:08:44:87:7b:78:25:a2:23:37:75:bf:3c:
d9:b0:41:1b:d1:51:87:1f:7c:af:d2:52:0d:1d:ef:d3:bc:fb:
8b:a6:dc:d2:e3:8b:db:79:8b:6f:b7:49:d9:d7:cc:51:8e:de:
eb:a2:36:11:98:8b:98:9d:c8:5e:00:14:bf:03:5b:d7:4f:da:
14:ce:91:41:bc:cc:cb:d6:12:a2:bf:10:a9:ad:8d:16:a2:a7:
f1:3f:16:02:ec:f3:49:7f:bd:ea:7a:b8:e2:56:f1:18:30:4a:
c3:47:75:bc:29:11:58:b9:ef:81:72:dd:cf:50:d4:a7:05:9d:
c0:f8:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:59 2026 by rpki-client