Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
File: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (raw, json)
Hash identifier: l5s26U/2y3s9RGw68ui9C5Z8mFQEh3eV1APw2mGtlec=
Subject key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 4D2BDD432649590EA39067595591104E45AB19B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 03:01:27 +0000
Certificate not after: Tue 11 May 2027 03:06:27 +0000
Subordinate resources: IP: 2a11:f2c0:fff9::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2b:dd:43:26:49:59:0e:a3:90:67:59:55:91:10:4e:45:ab:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 12 03:01:27 2026 GMT
Not After : May 11 03:06:27 2027 GMT
Subject: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:2d:05:c4:ff:f9:32:53:00:04:a6:55:e8:
45:1a:e8:05:a8:76:2f:72:a6:fa:2a:bc:92:dd:16:
04:8a:31:34:df:42:20:75:0e:6e:2e:71:21:a8:a6:
41:35:58:01:de:67:77:2e:8b:02:9d:aa:25:95:05:
47:ca:31:5b:94:be:80:b6:e9:f1:82:44:e5:48:ae:
f3:cc:61:05:05:db:ca:2c:15:42:79:9b:b0:15:20:
45:8f:7a:e3:85:c3:81:fd:d6:55:33:76:f8:73:b2:
17:82:03:e2:7d:29:7a:26:8e:83:75:11:23:bc:ca:
fd:99:76:d4:70:a0:e3:be:af:c4:fe:ff:65:50:7e:
15:f3:0b:00:d3:46:8c:bb:92:bc:d9:e8:48:b2:1f:
12:cf:98:6d:3e:15:6b:6e:d7:28:bb:2f:c0:14:66:
42:88:6f:81:17:5e:0d:4c:82:a9:ca:e1:d1:fb:97:
24:a9:74:7e:6e:f9:17:d5:95:e6:9b:e8:4f:6a:26:
e9:ab:c2:3c:0f:90:76:bc:a5:e6:07:1b:59:0b:9b:
58:43:c7:c1:0b:73:53:08:a4:e6:bc:76:19:ab:b3:
80:f9:1c:1d:d1:cb:c5:7f:28:5b:0d:73:17:c1:72:
00:e8:d6:4e:3c:17:17:48:1b:cb:8a:2b:7c:be:d9:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff9::/48
Signature Algorithm: sha256WithRSAEncryption
15:71:3e:ef:06:51:af:a9:13:d3:a7:3f:45:59:28:04:27:60:
02:06:a3:da:3f:5c:6b:e2:86:57:88:24:4d:7c:e5:5f:28:e4:
50:13:6a:d9:ff:41:d8:bc:2e:8e:ac:1e:2e:9f:9d:28:06:8b:
fb:04:20:ec:86:5f:f5:c9:46:e2:8b:44:c7:6e:54:9f:01:ef:
55:54:52:29:67:0f:fd:b6:f2:74:0f:26:95:47:04:8e:df:ba:
26:7f:47:60:bf:c1:63:bc:39:f3:c9:85:99:c7:8e:02:d6:1d:
c4:58:a5:b6:08:2e:28:38:09:b7:8b:a6:3d:46:14:c3:55:b3:
e3:06:7f:e8:6b:49:5a:db:06:d7:d4:2c:32:b3:50:38:7f:c7:
1d:d0:f4:48:75:f4:e2:82:ed:dd:0b:fd:bf:ec:eb:2e:1d:a1:
e1:f1:e1:5b:1e:a7:c1:5b:9a:0f:57:e3:15:31:0f:3d:27:c9:
6e:da:31:06:9c:b5:a6:03:7f:fb:36:95:a7:4b:f7:2d:f2:c0:
fd:cd:d2:57:92:23:7a:57:fc:75:79:da:71:14:8b:ed:a8:24:
d2:ea:2a:7e:2c:a8:54:70:41:4c:a5:7e:7b:ee:e6:7f:59:3d:
36:f9:7c:49:7d:2b:48:0f:35:fb:dd:88:7a:14:85:66:3c:26:
92:c1:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:58:43 2026 by rpki-client