Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
File: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (raw, json)
Hash identifier: lvZWdW+MxVJ5P7Tj2Kleo2DFg7TSY9I5Qg3B/V5PwkY=
Subject key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 16B18D2A781B7B11BECB665648D8AB3CA75AAC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 15:24:41 +0000
Certificate not after: Tue 11 May 2027 15:29:41 +0000
Subordinate resources: IP: 2a11:f2c0:ffc0::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b1:8d:2a:78:1b:7b:11:be:cb:66:56:48:d8:ab:3c:a7:5a:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: May 12 15:24:41 2026 GMT
Not After : May 11 15:29:41 2027 GMT
Subject: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:b3:5e:78:a7:88:78:9f:2b:f6:c5:82:b0:
b5:fd:b7:96:f7:0a:d0:46:d4:76:9b:61:12:3b:e7:
af:70:47:e5:90:80:df:6c:40:e1:b9:98:da:28:a3:
e3:68:c0:ab:b4:fb:0a:c5:2c:0e:b3:d8:af:ff:e4:
00:cd:93:fc:27:b6:8b:fd:c9:6a:53:3e:2c:01:c7:
4c:a3:08:33:f7:20:7f:46:40:73:3f:37:d8:f4:e6:
db:a4:77:29:b1:85:d3:80:23:29:4e:66:aa:73:2b:
ce:f0:8a:72:eb:01:d9:cf:01:96:fb:44:75:bd:a4:
28:4f:f7:18:16:97:ba:54:ff:44:df:2a:5d:23:fe:
5d:5e:4a:6e:00:ac:f3:f6:c0:4c:43:bb:a8:dd:81:
d0:d4:8e:7a:d7:d0:64:41:c1:c2:e9:6b:27:e7:3e:
5f:ee:9e:db:a9:98:1f:a9:8d:46:b1:c5:d9:f1:af:
ce:14:55:89:fe:05:0d:f1:d9:3e:6e:31:04:95:cd:
93:89:83:52:a4:fe:08:70:12:86:2e:5b:ec:29:53:
c8:d2:68:3d:86:5d:ba:81:76:06:a6:d9:37:a9:69:
55:6d:f0:50:ec:01:1e:ba:8f:ce:ec:16:49:01:d2:
38:cd:a7:27:9c:10:44:67:7d:bb:bd:7c:29:2f:2f:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
65:30:a8:a3:07:f6:df:9e:e7:78:7f:7b:33:28:86:cc:24:69:
9b:36:67:b5:4c:59:27:a2:70:79:d4:04:a2:ed:e9:93:fc:27:
55:d9:63:c5:b0:2d:de:78:41:9c:8b:dc:24:c8:c0:3e:9f:79:
55:a8:04:24:46:02:ee:df:24:1a:ce:d0:10:e9:03:bf:59:4e:
25:5b:37:ae:ff:61:d5:63:c5:4f:ac:2d:3f:8d:cc:e2:31:4a:
7d:62:c3:f6:7e:0e:93:0a:ff:46:55:13:d9:99:56:38:9a:d6:
20:ca:be:92:1c:7e:55:3d:24:dd:3d:0f:86:f9:d7:a9:0a:c2:
ae:e1:67:2a:a7:c5:cb:47:27:49:bc:ae:16:51:45:ca:69:6f:
08:6e:8d:64:5f:2c:91:50:55:93:1c:bd:2a:10:cd:51:88:1f:
de:53:9a:df:17:01:5f:d1:8f:72:ef:38:4d:50:7a:ec:9a:3e:
42:50:78:45:c3:82:62:b8:7c:47:e3:60:b2:05:8d:55:16:d5:
58:96:57:97:32:52:ce:4d:2a:a5:2b:0a:e9:cf:f6:87:1e:38:
9a:89:2b:ea:19:49:75:36:7c:62:dc:ba:0b:68:66:a5:b7:4f:
2a:78:02:8a:bb:42:3c:31:34:18:01:1a:50:99:d7:09:73:c6:
3a:7b:e0:65
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUFrGNKngbexG+y2ZWSNirPKdarIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjA1MTIxNTI0NDFaFw0yNzA1MTExNTI5NDFaMDMxMTAvBgNV
BAMTKEJCRUQxNEU5NzkzOTA1RUMxRUE1Q0UxMEFBMDNDNDk3RDczN0IxMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJw7NeeKeIeJ8r9sWCsLX9t5b3
CtBG1HabYRI7569wR+WQgN9sQOG5mNooo+NowKu0+wrFLA6z2K//5ADNk/wntov9
yWpTPiwBx0yjCDP3IH9GQHM/N9j05tukdymxhdOAIylOZqpzK87winLrAdnPAZb7
RHW9pChP9xgWl7pU/0TfKl0j/l1eSm4ArPP2wExDu6jdgdDUjnrX0GRBwcLpayfn
Pl/untupmB+pjUaxxdnxr84UVYn+BQ3x2T5uMQSVzZOJg1Kk/ghwEoYuW+wpU8jS
aD2GXbqBdgam2TepaVVt8FDsAR66j87sFkkB0jjNpyecEERnfbu9fCkvL9ddAgMB
AAGjggLbMIIC1zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS77RTpeTkF7B6l
zhCqA8SX1zexFTAfBgNVHSMEGDAWgBQIOak9q1RMKW/6FDRWhEqLKBix0DAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQx
YjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZGQTE0MzQ1
Njg0NEE4QjI4MThCMUQwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0RtcFBh
dFVUQ2x2LWhRMFZvUktpeWdZc2RBLmNlcjCCATYGCCsGAQUFBwELBIIBKDCCASQw
WwYIKwYBBQUHMAWGT3JzeW5jOi8vcnBraS1yZXBvLmFzMjA3OTYwLm5ldC9yZXBv
L3Jwa2lfY2FfM2E5N2Y3NjE4MDM4NGQyM2E3MjFkNDZhZTBlNTA2OGYvMC8wgYcG
CCsGAQUFBzAKhntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9y
cGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAvQkJFRDE0
RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5tZnQwOwYIKwYBBQUH
MA2GL2h0dHBzOi8vcnBraS5hczIwNzk2MC5uZXQvcnJkcC9ub3RpZmljYXRpb24u
eG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA/8AwDQYJKoZIhvcNAQELBQADggEBAGUwqKMH9t+e53h/
ezMohswkaZs2Z7VMWSeicHnUBKLt6ZP8J1XZY8WwLd54QZyL3CTIwD6feVWoBCRG
Au7fJBrO0BDpA79ZTiVbN67/YdVjxU+sLT+NzOIxSn1iw/Z+DpMK/0ZVE9mZVjia
1iDKvpIcflU9JN09D4b516kKwq7hZyqnxctHJ0m8rhZRRcppbwhujWRfLJFQVZMc
vSoQzVGIH95Tmt8XAV/Rj3LvOE1QeuyaPkJQeEXDgmK4fEfjYLIFjVUW1ViWV5cy
Us5NKqUrCunP9oceOJqJK+oZSXU2fGLcugtoZqW3Typ4Aoq7QjwxNBgBGlCZ1wlz
xjp74GU=
-----END CERTIFICATE-----
Generated at Wed May 13 14:18:59 2026 by rpki-client