Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer (raw, json)
Hash identifier: yyWRZ46pa+G2/MVS5IdWtfIEUNHKmRSeEZwan1iTpU8=
Subject key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 269B7E1BDD7C950B21B56A1169323280CF8BE47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 12 Jun 2026 06:27:21 +0000
Certificate not after: Fri 11 Jun 2027 06:32:21 +0000
Subordinate resources: IP: 2a14:7581:3000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9b:7e:1b:dd:7c:95:0b:21:b5:6a:11:69:32:32:80:cf:8b:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 12 06:27:21 2026 GMT
Not After : Jun 11 06:32:21 2027 GMT
Subject: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:63:c5:23:31:b3:08:19:57:aa:02:8a:f1:
24:b6:45:cb:80:aa:93:4c:82:02:e3:19:78:b6:db:
4f:1f:5d:e7:58:52:2f:9f:3d:48:db:06:36:de:67:
c9:61:81:e6:ad:18:b1:f7:cb:f2:71:9e:0b:a1:93:
7c:65:ca:58:e0:6a:a0:a8:eb:fd:42:b6:52:ce:a3:
86:a3:8b:05:4f:7e:39:62:5c:0f:2f:d4:4b:3f:9c:
f0:34:4d:74:ce:92:69:26:ef:4c:8e:ee:e4:53:ad:
d7:b0:4c:e8:bd:b7:6c:72:fa:ac:e1:c1:02:06:d0:
34:78:c0:3d:f9:ed:92:9c:29:83:b6:3f:4e:b7:f3:
1f:74:74:29:5a:15:0d:e9:c3:e5:54:6b:70:10:23:
84:79:fb:9f:da:bc:96:2d:98:b6:e9:96:9b:f0:df:
f6:44:8d:80:d3:93:3e:a4:d6:81:21:29:ef:79:90:
ac:a6:ba:4f:23:43:94:f5:51:9e:db:d4:ac:24:f5:
c5:35:db:2e:dc:51:fc:6a:16:0d:cb:98:14:2b:4f:
7c:a8:92:74:ef:cc:06:47:48:0c:72:58:d5:02:71:
32:3e:a0:4f:2e:9a:89:62:64:7a:94:b4:20:83:5a:
3f:fd:b1:79:ac:eb:ce:b5:7f:da:af:b9:68:ee:8a:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3000::/40
Signature Algorithm: sha256WithRSAEncryption
35:15:7f:12:58:95:5a:43:6d:03:da:a8:1a:a7:7b:a2:04:56:
40:61:73:e1:39:03:bd:00:65:d9:26:a7:cd:c3:4a:ee:b6:9f:
f8:aa:87:8d:14:1f:23:07:1f:00:76:db:c5:d7:ec:c3:83:63:
a7:96:15:35:1b:d5:a0:03:5d:1a:5b:7d:ed:6d:26:3d:c0:1c:
09:37:09:4f:59:cd:df:b3:de:b5:93:73:4f:81:25:b1:af:ad:
13:9d:92:f9:f3:d3:9e:a5:67:f8:14:3f:1f:5b:29:5d:98:ca:
57:6a:68:3d:46:cc:2f:d0:cc:4a:5e:5a:16:5a:8b:ec:a6:ed:
5c:d0:77:31:1b:7a:d7:e7:67:db:0b:ae:cd:b9:fa:e8:33:46:
78:32:9f:3f:70:9e:0a:55:38:89:8d:16:f2:b5:d1:0b:1e:1f:
03:85:ff:49:33:ed:08:6b:3b:aa:c4:c6:93:1e:d6:9b:bb:af:
f3:d5:50:59:76:4c:23:7a:76:75:70:67:a1:a2:33:f0:b2:81:
88:a4:cd:71:03:39:e1:24:02:77:01:82:34:dc:85:a8:46:29:
84:16:c2:be:9b:11:a5:64:47:e5:10:a0:79:30:95:3b:3a:4b:
b9:1b:df:1e:b6:22:8f:e6:b3:ba:49:d7:6a:33:d4:c0:ea:a0:
d0:1c:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:38 2026 by rpki-client