Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
File: 27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer (raw, json)
Hash identifier: a/xwxXjujAW2rrjBdQ/90EOWHq/B1PIVLk4p0F6nqjQ=
Subject key identifier: 27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 36713050D31200B41C6726AA974FE106A0B522D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 14 Aug 2026 13:25:35 +0000
Certificate not after: Fri 13 Aug 2027 13:30:35 +0000
Subordinate resources: IP: 2a14:6f44:7f00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:71:30:50:d3:12:00:b4:1c:67:26:aa:97:4f:e1:06:a0:b5:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Aug 14 13:25:35 2026 GMT
Not After : Aug 13 13:30:35 2027 GMT
Subject: CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:b5:a6:58:e7:4d:cf:56:00:22:48:76:e3:
29:cd:81:ce:53:65:c1:c6:0b:e6:95:89:8a:34:f8:
08:3b:eb:0a:10:9c:23:c4:90:89:8a:9d:74:00:00:
f8:6c:37:fc:c8:cd:23:b8:9b:33:1b:8c:b0:07:4d:
79:5c:88:2b:d0:53:4b:e9:3c:ac:0e:d8:e3:45:58:
14:f7:80:51:7e:21:7c:62:f9:bc:6e:d3:d1:8c:e0:
c3:e5:07:f5:24:dc:1a:3c:f0:12:24:53:23:8b:d4:
7b:6a:29:9f:63:c4:e8:d8:ba:29:e4:e0:9a:ec:43:
c6:3c:8b:b9:d1:68:e5:90:a4:e9:a7:cb:29:a3:3d:
42:44:be:11:c0:46:b8:d6:35:ed:17:71:4b:3c:61:
73:dd:17:8f:67:be:69:af:98:c1:86:93:43:31:83:
59:40:23:a4:a9:a1:6e:c9:97:8b:43:fe:09:fb:e0:
92:f4:a1:44:77:f3:cd:e8:96:86:bf:94:20:0d:1b:
71:df:c0:5c:b5:24:3d:50:e5:b5:1a:bf:f7:46:45:
df:c3:fc:78:9a:7b:70:2d:2c:ff:c9:61:c0:92:f3:
6c:a3:7e:fb:c5:66:33:01:ce:e2:86:b7:50:c1:58:
03:23:60:de:18:dc:2e:ad:86:2a:65:5d:34:49:11:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:7f00::/40
Signature Algorithm: sha256WithRSAEncryption
4d:9d:1e:2c:c0:92:f8:9b:36:48:1e:b3:44:4e:9e:22:c7:02:
39:c6:1a:11:bf:8e:06:3c:21:1f:f3:ba:41:d8:3f:60:44:ee:
dc:a5:2a:25:10:3a:d5:d4:ed:03:78:d8:fc:bf:0b:a4:2e:94:
b2:5b:ec:3a:95:e8:ed:3c:3b:92:89:d3:13:06:e4:29:1a:5a:
e4:88:2e:fa:e5:df:ac:26:6a:c9:a1:48:9a:5a:4b:4f:67:f0:
dd:7d:a4:02:67:83:97:a1:26:01:2f:3b:98:d8:ea:dd:67:97:
90:c9:12:21:3b:1a:83:f7:ff:5b:27:15:5a:95:08:73:4a:db:
c8:85:03:b4:b9:97:0e:14:73:41:ba:b0:f3:8d:0a:c2:66:f0:
44:9d:ac:a1:7a:29:d0:cc:8d:4f:1e:bf:7b:c4:88:b3:9d:38:
2e:cf:f3:25:06:49:07:34:bb:8a:70:b7:27:66:57:a8:85:ba:
c7:51:fb:84:51:ab:70:46:54:e9:a0:53:06:0c:9b:8f:99:98:
fa:ed:74:1e:ce:f1:34:84:b3:b1:14:84:35:b1:8e:59:ed:42:
61:31:20:cd:47:04:7d:82:28:6e:8d:ec:1b:c8:53:b1:83:af:
fa:ca:4f:d6:86:8d:c1:65:db:2b:a1:14:c1:72:94:bc:91:e5:
11:8b:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:27:06 2026 by rpki-client