Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (raw, json)
Hash identifier: a+dKv9L/qVDtFdlVOJvlrzYO4SeYmQxH2p+r8ZoIp1g=
Subject key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 06BD144B2297464221CB18FAAB5802AD99F51E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 11:18:09 +0000
Certificate not after: Mon 10 May 2027 11:23:09 +0000
Subordinate resources: IP: 2a11:f2c0:ffcc::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bd:14:4b:22:97:46:42:21:cb:18:fa:ab:58:02:ad:99:f5:1e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 11:18:09 2026 GMT
Not After : May 10 11:23:09 2027 GMT
Subject: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:3f:da:e2:9c:df:fa:60:3f:44:05:44:eb:
bc:3c:80:c0:15:89:3a:88:b7:e8:d5:ef:3e:1d:f5:
29:42:04:4a:ea:08:b8:be:7e:fe:b1:64:15:3d:94:
18:aa:e5:8b:ae:23:13:bc:87:f3:2a:52:13:ae:4d:
bf:5c:63:38:ef:cc:73:55:37:b4:ca:60:71:58:e5:
dd:3b:fa:ed:b8:40:40:56:3b:7c:2f:0e:e7:36:1f:
1f:1a:7d:87:80:27:38:55:ee:69:47:77:ca:4a:5e:
2c:38:ae:aa:94:31:a6:1c:36:30:fc:83:c0:11:12:
0c:13:98:98:46:0c:75:6b:06:cd:ed:77:8e:ac:a7:
b7:f3:b5:5b:cd:bf:c1:fc:15:5a:42:44:f4:59:09:
3d:67:7b:ad:99:7d:d4:48:bb:a9:ac:23:16:97:07:
5d:34:27:0d:7c:67:0e:b7:d3:48:53:05:77:9f:ac:
95:c3:2d:fe:0e:cc:ad:81:2b:b7:76:33:4a:5f:6c:
98:7c:e7:e5:c1:be:f5:dd:5e:83:fd:fe:14:a8:97:
73:cf:60:4a:4a:2b:ae:e0:4c:66:96:4e:f6:ba:05:
e8:42:ec:96:79:58:ce:ac:2f:b6:cc:50:ce:97:a5:
7b:5a:22:8e:a8:2c:e0:53:ee:bf:29:4f:68:aa:05:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcc::/48
Signature Algorithm: sha256WithRSAEncryption
65:62:87:b9:98:79:eb:14:df:60:78:3a:e0:43:29:75:0d:a3:
fa:db:9d:d2:2a:6f:2e:cb:61:4e:4f:33:94:c3:7b:83:e2:3c:
fe:e1:74:95:eb:a5:9b:6a:28:79:22:84:18:1b:be:c0:eb:db:
24:15:08:13:67:44:66:28:c2:11:b2:57:19:1e:da:34:bd:8c:
03:4e:04:cf:9d:4a:27:33:d3:fa:5b:c8:8f:15:7f:6d:21:64:
7b:2a:5e:0f:ba:e2:58:86:4f:0f:10:a2:34:d6:b0:82:f0:fb:
e9:81:a5:78:7c:4c:a3:21:5e:1d:0d:d4:a7:5b:33:25:79:ca:
c3:aa:6c:b0:ee:36:8c:4d:69:ba:91:18:81:85:86:1f:45:a2:
60:ff:c2:e4:58:33:a9:c2:47:7e:11:7f:7d:b0:4b:0a:16:8f:
8e:a4:e0:3b:11:41:3f:48:2d:67:f5:2f:ce:e5:6c:18:c2:f5:
0b:af:c0:fa:9a:a7:89:ed:14:18:3b:36:14:51:98:9d:ac:07:
6c:87:c7:1d:ff:e0:c7:5a:7e:85:f0:d7:67:13:d6:eb:49:ae:
b7:c0:4b:00:fb:0a:1b:2d:f3:8a:1b:bf:10:7f:10:70:ee:00:
5e:95:4f:bc:20:d8:0a:cd:73:d1:d6:0e:4a:25:d7:fe:eb:9e:
6a:76:8d:6a
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUBr0USyKXRkIhyxj6q1gCrZn1Hl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MTExMTE4MDlaFw0yNzA1MTAxMTIzMDlaMDMxMTAvBgNV
BAMTKEFGNUFFRTVBQzM4MzVEQURGRjUyRENFNkJFNzZGOTgzMkJDM0Q0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35z/a4pzf+mA/RAVE67w8gMAV
iTqIt+jV7z4d9SlCBErqCLi+fv6xZBU9lBiq5YuuIxO8h/MqUhOuTb9cYzjvzHNV
N7TKYHFY5d07+u24QEBWO3wvDuc2Hx8afYeAJzhV7mlHd8pKXiw4rqqUMaYcNjD8
g8AREgwTmJhGDHVrBs3td46sp7fztVvNv8H8FVpCRPRZCT1ne62ZfdRIu6msIxaX
B100Jw18Zw6300hTBXefrJXDLf4OzK2BK7d2M0pfbJh85+XBvvXdXoP9/hSol3PP
YEpKK67gTGaWTva6BehC7JZ5WM6sL7bMUM6XpXtaIo6oLOBT7r8pT2iqBThRAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSvWu5aw4Ndrf9S
3Oa+dvmDK8PUOTAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfYTg0MDVlYjUzZGU0NDZhOTk0ZDIxZjNjMjdlYTNmOTgvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVF
NUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/8wwDQYJKoZIhvcNAQELBQADggEBAGVih7mYeesU32B4
OuBDKXUNo/rbndIqby7LYU5PM5TDe4PiPP7hdJXrpZtqKHkihBgbvsDr2yQVCBNn
RGYowhGyVxke2jS9jANOBM+dSicz0/pbyI8Vf20hZHsqXg+64liGTw8QojTWsILw
++mBpXh8TKMhXh0N1KdbMyV5ysOqbLDuNoxNabqRGIGFhh9FomD/wuRYM6nCR34R
f32wSwoWj46k4DsRQT9ILWf1L87lbBjC9QuvwPqap4ntFBg7NhRRmJ2sB2yHxx3/
4MdafoXw12cT1utJrrfASwD7Chst84obvxB/EHDuAF6VT7wg2ArNc9HWDkol1/7r
nmp2jWo=
-----END CERTIFICATE-----
Generated at Wed May 13 07:50:15 2026 by rpki-client