Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
File: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer (raw, json)
Hash identifier: 7IT5ozL3Xes9r/D+oSEg1Aj7MD6O2lHgSTC47VxGuig=
Subject key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7B28AEA3DC2606EBDEAAE7C826E4D47BC2C3DFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 27 Mar 2026 03:52:14 +0000
Certificate not after: Fri 26 Mar 2027 03:57:14 +0000
Subordinate resources: IP: 2a14:7580:a00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:28:ae:a3:dc:26:06:eb:de:aa:e7:c8:26:e4:d4:7b:c2:c3:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 27 03:52:14 2026 GMT
Not After : Mar 26 03:57:14 2027 GMT
Subject: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:10:7d:a6:15:25:d1:26:9e:a1:1d:a9:5b:
0f:cc:9d:ee:04:83:a8:71:e1:06:0b:9e:c4:15:43:
a6:fe:73:b0:7e:c3:57:25:f8:e7:2a:81:74:8e:95:
da:79:8e:3e:14:d7:8d:a2:a4:b8:8f:ed:e0:c8:07:
5d:17:6f:66:05:ea:7a:6c:44:85:ae:98:41:ce:85:
06:60:03:92:2e:0c:d2:a0:3e:f9:c2:39:6e:b9:05:
89:35:61:d4:d6:8f:4a:ad:66:67:db:5d:6d:bd:88:
b5:45:8d:2b:58:d7:25:2d:9e:f4:90:3d:26:35:1b:
00:58:d6:98:ff:93:f3:92:91:c3:d4:1e:6b:71:8b:
61:30:3d:53:4a:7e:88:42:fa:cc:d9:10:34:3e:3a:
a7:52:2b:0f:3d:53:d5:a2:da:33:08:fb:2d:69:3b:
0f:c9:43:53:fd:29:ef:76:bb:d3:28:d8:ac:97:72:
81:f7:98:31:55:d6:e3:4f:89:a7:df:e9:01:91:2d:
39:16:2d:67:fd:aa:d8:ad:65:67:83:a2:75:5e:00:
c2:fa:2d:b1:1d:e8:80:57:55:fb:00:db:dc:8a:ef:
4d:74:11:e1:a2:ac:a4:e4:36:a0:cb:9c:d6:60:7e:
ff:1c:c5:62:04:7a:0a:27:e6:13:2b:97:81:4d:e6:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:a00::/40
Signature Algorithm: sha256WithRSAEncryption
32:89:5c:7d:6b:91:f2:cf:0b:06:86:3a:5d:d2:da:0d:68:73:
a3:6a:8e:5b:42:87:c0:bc:bc:30:04:8e:33:cd:9b:09:9e:c2:
7c:38:04:72:36:e4:67:a4:b9:a9:19:86:21:ef:79:d7:58:ed:
62:e1:42:14:d0:9d:94:97:d1:31:7f:c6:32:cf:73:af:9c:a2:
ef:bf:e1:a4:a4:d2:de:cb:45:0a:41:8e:ce:d0:eb:ac:24:b1:
a2:8f:93:c8:8e:70:d8:29:0b:00:46:0f:71:9a:b0:3c:ef:f0:
28:71:ba:5b:90:10:f9:d4:ef:b0:28:9d:af:5d:81:16:34:f4:
a4:45:1e:28:d1:29:6e:6f:84:81:fe:80:ec:bb:18:a8:dc:c8:
bc:84:6c:35:4b:52:54:d2:9a:66:1f:62:17:4f:de:6d:f7:80:
58:34:74:a7:f7:e3:aa:ff:01:b1:0b:fe:b4:56:16:3f:0d:c8:
b5:eb:e6:c2:fd:ef:57:9e:0c:cd:9d:ec:f0:87:c5:30:4a:e5:
fa:98:8c:e8:b7:c3:d6:ad:fa:7e:78:75:ec:69:ed:e6:d2:47:
f5:61:8c:3f:c3:a7:05:9a:1a:2b:a7:b0:58:4a:b7:46:bf:8e:
26:ba:b5:51:7d:1a:97:d4:b9:75:2a:ff:72:ab:8a:b9:4d:79:
c5:f3:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:28 2026 by rpki-client