Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (raw, json)
Hash identifier: O7WKvfNyLCBFSFELimyJd7opvApTgsjRS4TvUAMRyxc=
Subject key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 64F002DD66569E9C830222241D2B8CC625A880A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 05:23:22 +0000
Certificate not after: Mon 10 May 2027 05:28:22 +0000
Subordinate resources: IP: 2a11:f2c0:ffc7::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f0:02:dd:66:56:9e:9c:83:02:22:24:1d:2b:8c:c6:25:a8:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 11 05:23:22 2026 GMT
Not After : May 10 05:28:22 2027 GMT
Subject: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:ac:5d:f1:1a:a9:6b:d9:e7:43:9e:4c:be:
c6:06:4d:b0:26:2b:4c:b4:e5:93:16:3e:07:a2:42:
8a:d0:f6:5e:e5:01:b3:8b:06:c1:a4:11:18:52:5d:
d6:82:bc:39:1c:9e:ef:c4:7f:f4:0e:e2:57:41:8b:
c3:d5:ce:c7:a3:eb:d1:d5:a9:fe:3f:fc:e9:77:49:
f5:8f:b5:b6:7b:bb:c5:fe:00:ac:ee:e2:5e:32:c6:
34:1d:d4:52:f7:72:53:b6:a7:42:1a:4d:79:15:78:
82:3b:fb:9d:fa:64:46:0a:a8:92:e9:6b:c2:5f:eb:
a6:0d:9b:c5:28:5d:8c:c8:2b:1c:c6:3c:d5:79:0f:
dc:7c:1a:63:69:eb:aa:3e:6b:91:ac:61:13:f6:3d:
b1:be:53:1b:e1:28:e5:ca:c3:14:77:0d:8f:cb:ff:
e1:08:d4:1d:d6:3a:bf:c7:0d:7b:e5:58:a2:a4:91:
ec:23:a6:07:ca:1d:5c:bd:b2:6f:08:27:2f:67:31:
8b:b3:6a:27:76:71:d0:5c:21:e5:d4:0e:57:99:d9:
01:94:fd:07:b8:75:75:1b:15:08:12:0b:6f:4a:3e:
5a:a7:3d:78:f2:0e:c4:53:4c:b8:5d:49:ee:93:7b:
f1:7d:11:96:c4:4f:09:c3:cf:34:aa:fd:d0:cd:34:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc7::/48
Signature Algorithm: sha256WithRSAEncryption
4d:76:77:f9:99:f4:41:ae:2e:bd:82:15:0f:ba:ef:e3:39:e8:
68:35:a8:20:b6:20:80:81:b7:05:4a:2f:cf:a8:b1:76:46:a3:
df:af:21:05:b6:a1:4e:03:5e:8f:0c:9c:95:2d:40:fc:fe:91:
f2:cd:7d:8c:88:f9:4a:45:0c:09:e8:95:c2:89:4e:ca:43:b4:
b6:e3:0b:9d:11:72:07:0f:74:2e:ed:ab:96:d9:81:5b:1e:2e:
3f:cf:c8:08:6f:4e:f0:49:89:ac:6b:24:76:64:96:dc:5e:08:
af:09:e6:55:9b:50:00:b6:47:c8:28:8f:90:ea:3a:1a:e7:ef:
a5:4e:d4:4d:cc:6a:51:40:7f:8b:16:ac:35:9e:f3:d8:eb:e3:
6a:a4:be:16:a1:2a:eb:b8:86:00:41:88:4e:04:50:e0:54:c7:
dd:0e:65:a2:43:1e:1f:20:0b:d2:d9:ce:8f:76:0e:54:50:4f:
e9:78:a8:6d:71:83:af:03:68:fe:9a:b9:78:80:58:40:83:44:
81:05:f8:db:8c:0a:79:b7:d7:9d:ca:7c:f8:a7:a1:f5:c5:91:
e3:e0:20:4c:26:fd:61:67:cc:a6:bf:bf:65:6a:87:22:f3:c7:
ff:f5:65:71:65:11:97:90:9e:e3:c4:b7:8e:27:2f:f2:8f:eb:
c8:c5:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:33 2026 by rpki-client