$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.cer File: BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.cer (raw, json) Hash identifier: 7Db+GU6ZlFtEB8TVO/cH59mI4RjccbfX/uKVLg78Oqo= Subject key identifier: BD:69:A2:AC:88:B3:D0:42:9D:23:5D:FE:EF:33:C7:D2:62:E4:E8:B3 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 1666A8C32A727C766FDCE87EFCB8344CA57BF47F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer CRL Distribution Point: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 01 Nov 2026 02:03:09 +0000 Certificate not after: Sun 31 Oct 2027 02:08:09 +0000 Subordinate resources: IP: 2a0a:d685:500::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 08:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:66:a8:c3:2a:72:7c:76:6f:dc:e8:7e:fc:b8:34:4c:a5:7b:f4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Nov 1 02:03:09 2026 GMT Not After : Oct 31 02:08:09 2027 GMT Subject: CN=BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:e6:da:b2:85:b4:2e:7a:e4:83:98:9a:c9: 8f:e2:02:d5:e4:f2:70:8b:af:6a:bf:ee:19:03:3f: 83:b7:62:c6:58:36:a6:88:ac:75:dc:bf:6d:22:68: b5:a1:b8:8a:3d:81:22:50:52:fc:da:4b:5e:d6:b8: 5c:37:28:4e:6e:9f:02:37:47:a6:45:6f:c1:5d:3e: 85:c2:5c:e6:f2:9e:8c:cf:dc:af:54:24:48:43:a8: bd:18:f1:bd:69:af:8e:45:75:f8:91:fe:e9:f9:24: 10:15:8a:1b:30:14:13:bb:6a:d3:4e:38:10:4c:17: f8:f2:e4:97:69:01:50:a9:ff:15:8f:db:b5:9c:71: b5:7b:1a:33:26:e6:e1:84:47:0a:08:90:9e:a0:d4: d6:16:d8:6d:5c:3b:58:db:38:c1:31:3e:7d:1b:52: 78:0e:af:dc:f3:b5:f6:21:1c:80:d6:97:3c:48:b1: 96:88:98:97:c2:7d:08:0b:77:9c:9d:63:7e:f3:5c: 39:b9:05:36:2a:51:01:61:e9:29:b7:7d:5d:c3:f1: 8b:ec:0d:51:58:78:4c:3b:3c:8c:8e:6f:99:dc:a0: c5:6b:be:66:35:18:c7:35:90:7e:25:a6:6a:23:d4: 1d:da:5c:3c:7a:de:b5:0e:4c:ea:4d:47:cf:a8:2b: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:69:A2:AC:88:B3:D0:42:9D:23:5D:FE:EF:33:C7:D2:62:E4:E8:B3 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5d8ba04d-c788-4f87-839f-4fdb7f473c5d/2/BD69A2AC88B3D0429D235DFEEF33C7D262E4E8B3.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:500::/40 Signature Algorithm: sha256WithRSAEncryption 69:6b:88:fb:a0:2d:7b:50:df:7e:51:2c:f3:85:89:57:d8:80: aa:5a:22:29:c1:fe:05:47:54:d5:45:cb:33:6d:0f:f2:b9:28: 8d:53:71:98:60:11:47:6f:08:c4:4e:97:42:42:4d:3e:8b:bb: a0:89:b5:cb:36:86:2b:f5:da:1d:a6:33:d6:bc:31:d3:04:18: 93:93:42:2e:7c:de:8e:18:79:b5:e1:09:88:01:ce:35:84:5d: e4:b6:dc:36:16:84:a7:f9:40:61:38:8f:eb:4a:cb:c2:4a:27: 73:77:bf:3e:eb:be:df:79:d9:b6:fe:d5:79:1c:9c:8f:f2:f0: da:0b:76:a9:46:cf:01:99:07:3b:b6:75:58:1f:89:ef:b4:16: f9:bb:ad:2d:78:70:ed:a8:b8:ad:10:c1:c0:42:5b:88:23:8f: 56:e5:1c:b6:c7:a0:fa:3e:53:d2:18:cc:3e:9e:8b:b6:8b:83: 85:ca:aa:51:b3:61:af:26:8f:67:ee:28:e5:7c:76:47:67:67: b0:75:78:64:3b:5f:75:c1:26:fe:88:68:b2:1a:d3:bc:56:2b: 3e:05:57:de:29:86:d3:34:b4:a0:40:01:ef:41:ca:db:1a:88: 07:bf:eb:97:1b:ab:63:47:60:1d:0d:54:f7:5b:87:cd:8a:c5: db:e0:fd:00 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUFmaowypyfHZv3Oh+/Lg0TKV79H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjExMDEwMjAzMDlaFw0yNzEwMzEwMjA4MDlaMDMxMTAvBgNV BAMTKEJENjlBMkFDODhCM0QwNDI5RDIzNURGRUVGMzNDN0QyNjJFNEU4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bObasoW0Lnrkg5iayY/iAtXk 8nCLr2q/7hkDP4O3YsZYNqaIrHXcv20iaLWhuIo9gSJQUvzaS17WuFw3KE5unwI3 R6ZFb8FdPoXCXObynozP3K9UJEhDqL0Y8b1pr45FdfiR/un5JBAVihswFBO7atNO OBBMF/jy5JdpAVCp/xWP27WccbV7GjMm5uGERwoIkJ6g1NYW2G1cO1jbOMExPn0b UngOr9zztfYhHIDWlzxIsZaImJfCfQgLd5ydY37zXDm5BTYqUQFh6Sm3fV3D8Yvs DVFYeEw7PIyOb5ncoMVrvmY1GMc1kH4lpmoj1B3aXDx63rUOTOpNR8+oK0iHAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9aaKsiLPQQp0j Xf7vM8fSYuToszAfBgNVHSMEGDAWgBQjihGuJFNX5y/rOXhce8A6lzpE4TAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS81ZDhiYTA0ZC1jNzg4LTRmODctODM5Zi00ZmRi N2Y0NzNjNWQvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzVkOGJhMDRkLWM3ODgtNGY4Ny04MzlmLTRm ZGI3ZjQ3M2M1ZC8yL0JENjlBMkFDODhCM0QwNDI5RDIzNURGRUVGMzNDN0QyNjJF NEU4QjMubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoK1oUFMA0GCSqGSIb3DQEB CwUAA4IBAQBpa4j7oC17UN9+USzzhYlX2ICqWiIpwf4FR1TVRcszbQ/yuSiNU3GY YBFHbwjETpdCQk0+i7ugibXLNoYr9dodpjPWvDHTBBiTk0IufN6OGHm14QmIAc41 hF3kttw2FoSn+UBhOI/rSsvCSidzd78+677fedm2/tV5HJyP8vDaC3apRs8BmQc7 tnVYH4nvtBb5u60teHDtqLitEMHAQluII49W5Ry2x6D6PlPSGMw+nou2i4OFyqpR s2GvJo9n7ijlfHZHZ2ewdXhkO191wSb+iGiyGtO8Vis+BVfeKYbTNLSgQAHvQcrb GogHv+uXG6tjR2AdDVT3W4fNisXb4P0A -----END CERTIFICATE-----Generated at Sun Nov 15 18:28:07 2026 by rpki-client