Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer (raw, json)
Hash identifier: oBI36MX6LSI9ychiV3b2VACKNZLGHnGZfsUf7Qn5TKw=
Subject key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7C005DE688DA0569EEB28910962ED7A48C7FDD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 16 Apr 2026 05:16:18 +0000
Certificate not after: Thu 15 Apr 2027 05:21:18 +0000
Subordinate resources: IP: 2a14:7580:d00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:00:5d:e6:88:da:05:69:ee:b2:89:10:96:2e:d7:a4:8c:7f:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 16 05:16:18 2026 GMT
Not After : Apr 15 05:21:18 2027 GMT
Subject: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:20:3e:3b:64:8b:16:1e:23:c3:fe:3b:54:
ab:36:f6:ea:b0:d1:3c:97:f0:81:b5:8d:74:e1:23:
b1:02:cb:75:ad:71:b1:53:b5:7e:68:a8:d2:b2:2d:
77:4d:bf:0f:4e:42:1e:0f:42:e6:d9:f0:6a:af:bd:
b6:3f:2f:4a:17:22:80:56:01:e9:90:5f:31:c3:29:
66:c4:a5:82:fd:29:22:4f:fd:49:77:92:d8:95:0f:
c2:08:fc:10:ff:29:db:0e:5e:4b:05:22:d3:37:9d:
79:48:43:4e:43:23:1e:d3:47:c5:1c:27:01:43:b9:
a8:82:f9:c6:29:ef:d7:05:e4:4e:e1:ee:84:6c:4d:
bc:e3:b2:bb:d5:2c:cf:6e:6f:c6:18:33:dd:61:61:
0b:e0:45:40:90:c5:9a:f5:bc:7c:6f:65:cf:93:49:
70:22:74:08:37:98:4b:18:33:a3:74:70:33:a6:de:
c5:39:bb:e5:8a:78:2d:bf:63:10:99:d2:78:cc:06:
89:a4:dd:26:c0:b5:e6:b9:9c:9a:3d:8b:37:f7:03:
5c:f0:f1:eb:03:11:a1:9f:fc:18:0a:f3:23:02:4c:
1d:2c:5f:a1:f9:66:07:9a:de:7e:3b:5f:06:32:59:
d1:d7:aa:e7:25:19:7a:5d:5b:97:f6:a6:b7:a2:9f:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:d00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:9d:41:4e:3c:85:5a:09:1e:f1:d3:aa:6e:68:f3:1c:4f:26:
a2:68:38:16:d8:05:cc:e2:76:2c:11:e8:2a:6c:82:94:6e:39:
d2:21:a0:a5:21:e6:25:ee:fe:ae:4c:68:88:6c:9e:19:c6:43:
5a:40:90:f3:90:a3:ef:4e:79:08:f3:38:3e:6e:73:ab:49:9f:
65:56:c7:95:6d:b8:71:88:84:bc:3a:7c:b2:c8:6f:11:c1:41:
58:98:be:dd:48:55:70:a1:ca:73:18:c1:bd:16:bd:17:3a:82:
f1:0f:01:9f:0e:78:39:c1:2b:2e:55:e7:fa:3b:76:5e:7c:5f:
75:9a:43:fa:3c:af:fa:08:af:79:f8:a7:97:f1:db:1e:86:38:
c6:b9:7c:33:d9:51:ac:9b:df:1a:f7:65:51:df:fe:92:f9:b3:
54:39:ad:d2:c1:d6:59:3c:ce:40:16:1b:7f:65:d4:1f:e9:48:
6f:75:39:99:9e:6b:16:0c:32:41:95:38:fd:0f:9b:5a:98:59:
8d:fe:16:d2:f7:80:46:5d:5b:5c:fd:e4:ae:d2:82:8b:df:42:
b8:74:64:58:3d:00:73:82:42:a9:63:14:54:f4:0b:7c:ad:a9:
b0:4e:54:99:fb:0f:c4:29:93:a9:9a:d3:93:05:b5:fd:2f:ad:
2b:3b:3a:b6
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUfABd5ojaBWnusokQli7XpIx/3UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA0MTYwNTE2MThaFw0yNzA0MTUwNTIxMThaMDMxMTAvBgNV
BAMTKDEzRTFBOTk4Rjc3RDdDMUZGMjk1NUMwQjY4OEZFQkZFMEY4MTk2RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2SA+O2SLFh4jw/47VKs29uqw
0TyX8IG1jXThI7ECy3WtcbFTtX5oqNKyLXdNvw9OQh4PQubZ8GqvvbY/L0oXIoBW
AemQXzHDKWbEpYL9KSJP/Ul3ktiVD8II/BD/KdsOXksFItM3nXlIQ05DIx7TR8Uc
JwFDuaiC+cYp79cF5E7h7oRsTbzjsrvVLM9ub8YYM91hYQvgRUCQxZr1vHxvZc+T
SXAidAg3mEsYM6N0cDOm3sU5u+WKeC2/YxCZ0njMBomk3SbAtea5nJo9izf3A1zw
8esDEaGf/BgK8yMCTB0sX6H5Zgea3n47XwYyWdHXquclGXpdW5f2prein4DTAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQT4amY9318H/KV
XAtoj+v+D4GW6zAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFmYWIyLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8wMTU3NjQ3Yy05MWQ2LTRhMDQtOGE5MS1kMTUzODVkMWZhYjIv
MS8xM0UxQTk5OEY3N0Q3QzFGRjI5NTVDMEI2ODhGRUJGRTBGODE5NkVCLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWADTANBgkqhkiG9w0BAQsFAAOCAQEADp1B
TjyFWgke8dOqbmjzHE8momg4FtgFzOJ2LBHoKmyClG450iGgpSHmJe7+rkxoiGye
GcZDWkCQ85Cj7055CPM4Pm5zq0mfZVbHlW24cYiEvDp8sshvEcFBWJi+3UhVcKHK
cxjBvRa9FzqC8Q8Bnw54OcErLlXn+jt2XnxfdZpD+jyv+givefinl/HbHoY4xrl8
M9lRrJvfGvdlUd/+kvmzVDmt0sHWWTzOQBYbf2XUH+lIb3U5mZ5rFgwyQZU4/Q+b
WphZjf4W0veARl1bXP3krtKCi99CuHRkWD0Ac4JCqWMUVPQLfK2psE5UmfsPxCmT
qZrTkwW1/S+tKzs6tg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:24 2026 by rpki-client