$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer File: 26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.cer (raw, json) Hash identifier: uAZliNindAQ1tF3EECAdi8HwluQXkoCxyKIaQm+HQaE= Subject key identifier: 26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 6129C2EB332B2433FC821489871D7E037DD1496D Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 23 Jun 2025 14:53:28 +0000 Certificate not after: Mon 22 Jun 2026 14:58:28 +0000 Subordinate resources: IP: 2a0a:6044:ba00::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 08:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:29:c2:eb:33:2b:24:33:fc:82:14:89:87:1d:7e:03:7d:d1:49:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: Jun 23 14:53:28 2025 GMT Not After : Jun 22 14:58:28 2026 GMT Subject: CN=26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:f7:e2:c8:45:f0:dd:8b:41:97:51:54:6c: e5:de:4d:ae:89:6c:3c:6a:6f:63:2a:c4:8d:25:05: a1:70:c9:91:f1:04:c6:53:ba:4a:22:4c:84:6a:6a: 68:08:62:57:fa:2c:99:31:7f:16:64:28:86:b5:a4: b7:b6:8d:8a:6b:6c:e9:4d:15:9c:10:81:df:41:de: 87:eb:bf:af:40:86:e4:db:d2:92:d6:6c:fd:0e:2b: 8d:cb:26:21:b7:b0:de:01:9e:62:84:65:3c:9f:87: 75:5f:f8:86:e0:96:1d:c2:de:bc:5c:4d:a0:b5:7e: 05:60:78:27:df:b8:52:7b:94:07:95:0e:2e:65:22: 2a:d8:a8:8f:0e:3d:fe:8a:64:3b:39:f5:85:bf:5a: 0b:81:1f:07:75:57:37:35:b2:14:d4:dd:ec:15:3d: cc:07:47:b1:3c:05:d3:12:cf:34:ab:c1:55:68:d8: f9:e1:58:3a:21:a0:92:c9:db:a3:70:56:ba:ac:0e: c0:59:c2:76:15:30:36:28:ab:a6:0d:14:68:80:ae: 2d:e1:8f:69:15:c9:69:a1:db:3c:14:87:ec:89:51: ad:12:49:d6:17:07:38:d8:05:96:b8:b8:69:ab:b6: ee:92:db:f1:49:6d:00:5d:e3:bf:5c:7b:0b:ef:1c: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:86:0E:EE:FB:78:34:ED:15:DC:9B:A7:F2:CA:8C:8B:A4:FA:05:32 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/4/26860EEEFB7834ED15DC9BA7F2CA8C8BA4FA0532.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ba00::/40 Signature Algorithm: sha256WithRSAEncryption 9f:f4:5d:93:47:7b:a8:f5:b9:06:92:ee:96:ce:45:63:fd:f5: fe:2a:06:8e:d3:54:0b:9c:34:bb:60:bd:40:24:63:9b:48:24: a4:13:c7:80:a2:5e:24:bf:c8:45:72:6b:fa:9e:5d:1f:bc:9c: a9:54:8e:ad:b0:68:3a:9d:86:e4:eb:02:66:bf:0b:2b:7e:96: 79:55:d2:60:01:31:61:c6:f3:5d:e1:bb:dd:20:44:7f:89:c0: a3:fa:24:1e:e0:bc:81:b4:29:6b:d5:0a:4c:7b:17:b3:79:03: 49:32:de:8d:8e:ed:cb:ff:52:8a:06:3d:18:f1:92:88:9e:2c: e2:c2:9a:1d:05:45:4a:ed:db:13:a3:44:de:1f:c1:1d:9e:23: a0:b6:fa:28:3a:20:96:a6:e7:71:ef:0b:90:27:df:1a:c5:1e: 58:7f:32:a6:d1:ec:45:96:b3:75:d3:1e:60:bf:80:61:3b:c1: 33:80:14:08:e8:cb:62:4a:d4:f3:b6:44:98:7c:70:0d:e1:84: fd:3a:e1:18:ab:a1:06:ef:81:be:c4:aa:44:3e:13:f0:ac:cc: 50:f7:88:59:79:e8:69:b4:62:41:46:25:b9:31:fa:68:f2:52: 9f:40:e2:7d:1d:33:59:f8:00:25:c7:86:1f:c4:01:c8:57:e6: 15:d1:5f:e4 -----BEGIN CERTIFICATE----- MIIGCTCCBPGgAwIBAgIUYSnC6zMrJDP8ghSJhx1+A33RSW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx OEMyM0IzNjAeFw0yNTA2MjMxNDUzMjhaFw0yNjA2MjIxNDU4MjhaMDMxMTAvBgNV BAMTKDI2ODYwRUVFRkI3ODM0RUQxNURDOUJBN0YyQ0E4QzhCQTRGQTA1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzffiyEXw3YtBl1FUbOXeTa6J bDxqb2MqxI0lBaFwyZHxBMZTukoiTIRqamgIYlf6LJkxfxZkKIa1pLe2jYprbOlN FZwQgd9B3ofrv69AhuTb0pLWbP0OK43LJiG3sN4BnmKEZTyfh3Vf+Ibglh3C3rxc TaC1fgVgeCffuFJ7lAeVDi5lIirYqI8OPf6KZDs59YW/WguBHwd1Vzc1shTU3ewV PcwHR7E8BdMSzzSrwVVo2PnhWDohoJLJ26NwVrqsDsBZwnYVMDYoq6YNFGiAri3h j2kVyWmh2zwUh+yJUa0SSdYXBzjYBZa4uGmrtu6S2/FJbQBd479cewvvHJQdAgMB AAGjggMTMIIDDzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQmhg7u+3g07RXc m6fyyoyLpPoFMjAfBgNVHSMEGDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAy OUM4ODZGMzE4QzIzQjM2LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhC NzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl cG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4M2U3LzQv MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9kN2U0NTkyZS0yM2MwLTRjY2MtOTRkYS02Yzk1ODA3ZjgzZTcv NC8yNjg2MEVFRUZCNzgzNEVEMTVEQzlCQTdGMkNBOEM4QkE0RkEwNTMyLm1mdDA8 BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBEujANBgkqhkiG9w0BAQsFAAOCAQEAn/Rd k0d7qPW5BpLuls5FY/31/ioGjtNUC5w0u2C9QCRjm0gkpBPHgKJeJL/IRXJr+p5d H7ycqVSOrbBoOp2G5OsCZr8LK36WeVXSYAExYcbzXeG73SBEf4nAo/okHuC8gbQp a9UKTHsXs3kDSTLejY7ty/9SigY9GPGSiJ4s4sKaHQVFSu3bE6NE3h/BHZ4joLb6 KDoglqbnce8LkCffGsUeWH8yptHsRZazddMeYL+AYTvBM4AUCOjLYkrU87ZEmHxw DeGE/TrhGKuhBu+BvsSqRD4T8KzMUPeIWXnoabRiQUYluTH6aPJSn0DifR0zWfgA JceGH8QByFfmFdFf5A== -----END CERTIFICATE-----Generated at Sun Jun 29 19:27:21 2025 by rpki-client