Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
File: 31586760843F668A816117EA02F6F30FE8F9C359.cer (raw, json)
Hash identifier: nUYYkhgPcD3KrSBVVNxAMd/aDSkEKffG09X8A/chbtc=
Subject key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1F8752F5FEBE5A2A13C0167A3A41CBD127500D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 06:21:36 +0000
Certificate not after: Mon 10 May 2027 06:26:36 +0000
Subordinate resources: IP: 2a11:f2c0:ff80::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:87:52:f5:fe:be:5a:2a:13:c0:16:7a:3a:41:cb:d1:27:50:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 06:21:36 2026 GMT
Not After : May 10 06:26:36 2027 GMT
Subject: CN=31586760843F668A816117EA02F6F30FE8F9C359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:2a:2a:2f:2c:14:6b:6b:87:2c:06:4d:c9:
20:ef:00:22:86:2d:3f:53:b2:d2:36:4a:88:09:d2:
d6:28:17:df:4c:85:a3:88:bf:21:b9:ae:07:45:6c:
25:1e:24:71:95:7c:72:7f:aa:a7:3e:c5:ce:7c:15:
06:bb:92:13:23:6b:b0:35:7f:38:fe:86:2f:50:ff:
46:7d:c6:2e:a3:67:f4:5e:04:f7:59:cf:57:17:2e:
00:b7:d5:04:43:95:9e:ff:c9:a2:60:f8:e4:ee:48:
1d:cc:fc:cf:51:2e:f4:7c:73:6b:d1:e0:db:c8:00:
b7:8f:bf:55:82:de:fe:8f:27:10:72:40:49:d5:21:
06:cb:f7:1d:19:ca:d8:3c:df:6c:f5:4d:83:cf:01:
91:9a:62:41:d2:2f:0d:a4:c6:37:5c:29:a1:8d:7d:
c1:9e:df:1d:0f:34:fb:a4:c2:dd:6c:33:f2:3e:17:
37:8d:fa:9d:aa:f8:cd:b7:2c:89:dd:ed:33:a4:c6:
99:d6:fa:cb:3e:da:60:c2:57:e8:4f:a8:17:e4:38:
30:19:39:27:f7:2b:e7:47:cf:66:2c:e3:bc:28:ab:
3d:85:46:54:64:28:d4:0b:86:64:d9:37:ca:53:4a:
fa:10:46:e5:81:b4:31:3a:d3:77:f9:18:63:0b:b3:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
aa:7c:94:84:0a:97:c2:c7:b1:26:1d:8b:02:71:91:e1:a4:46:
09:cc:4b:e2:5b:09:e9:b4:80:eb:5b:92:7b:a0:bc:e2:3b:44:
d8:18:fe:b4:f0:2a:15:fe:4f:e4:4a:10:d0:d4:c5:37:e0:64:
9b:97:ed:bb:b0:88:44:cb:05:b5:c5:40:a4:48:7d:63:e4:39:
38:44:28:a8:9f:74:92:e4:cc:14:4e:10:9d:25:8d:d1:32:14:
a1:5d:3c:3b:a0:72:c8:84:69:b1:47:fd:07:68:8e:6f:73:e3:
ca:aa:26:fe:91:9e:55:46:3f:b3:38:0e:24:c1:af:20:85:02:
4d:94:f4:7a:c3:3b:a7:96:b5:6e:db:8a:4c:78:31:cf:9c:8e:
3e:d9:b7:a8:8c:e3:23:e7:6f:8a:58:f6:eb:c3:73:94:9e:fa:
44:5a:bc:1e:7a:4e:50:ec:98:92:fd:20:66:df:c6:1d:28:00:
d9:6d:dc:b5:91:3f:68:12:ef:31:1e:90:59:68:5e:7a:07:4d:
b6:91:57:89:00:22:89:8f:7d:f4:f6:1d:45:90:37:d8:af:ba:
d9:10:12:0a:13:a7:4d:5b:ec:54:cb:12:08:4e:49:c2:ad:e4:
3e:fa:c6:e1:4a:df:92:c7:d8:1b:65:3e:4e:e0:3c:01:da:ef:
1f:bb:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:40 2026 by rpki-client