Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer
File: 34DEF610B33BA719BA344A660C4BDA8333112372.cer (raw, json)
Hash identifier: aK2a/anPf26+2PLdgQ7RCiUf3FWSTu8kQw+XP3HMcbM=
Subject key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 48E080B12A7C9ED7416E07A4CBF8C1645E5B88EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 28 Feb 2026 12:26:51 +0000
Certificate not after: Sat 27 Feb 2027 12:31:51 +0000
Subordinate resources: IP: 2a14:7581:3700::/40
IP: 2a14:7581:9f10::/44
IP: 2a14:7583:4000::/36
IP: 2a14:7584:1000::/36
IP: 2a14:7586:7000::/36
IP: 2a14:7586:9000:: -- 2a14:7586:afff:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e0:80:b1:2a:7c:9e:d7:41:6e:07:a4:cb:f8:c1:64:5e:5b:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 28 12:26:51 2026 GMT
Not After : Feb 27 12:31:51 2027 GMT
Subject: CN=34DEF610B33BA719BA344A660C4BDA8333112372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:8b:8c:cd:0d:f3:cd:f6:d8:42:c2:20:ec:
2c:8b:56:26:71:cc:de:c0:37:b0:59:64:dd:56:a7:
92:b7:a4:4f:f9:d5:9e:bc:86:24:88:fc:be:50:24:
c9:f7:60:21:12:02:2d:f6:af:2c:44:75:9b:c8:56:
a7:a5:2d:70:68:e8:a0:c9:0f:9e:6a:99:3a:98:7c:
c7:fb:6a:3c:a6:62:4c:e1:57:14:0b:fe:80:bd:55:
98:af:80:1b:a2:63:30:64:74:c7:cf:c5:98:95:bf:
59:fb:a1:00:f7:bd:9d:57:66:cd:84:8b:bb:e3:2c:
cb:9e:06:27:f0:bc:3b:15:d0:78:90:de:39:b5:4e:
7e:b0:ff:3c:19:15:46:4a:5d:b0:d1:29:c4:ed:11:
4b:a7:3b:ba:8e:7a:05:78:72:aa:27:29:de:48:f5:
f4:81:4d:c5:30:af:d4:c2:4a:1b:c3:3a:0b:2d:03:
51:b8:da:ef:04:82:e7:36:2f:2b:75:8e:06:f4:01:
13:45:e5:da:19:1a:da:e3:f6:b3:41:5c:75:f5:3c:
27:c9:d7:73:ca:ab:f1:52:9a:2b:e2:f2:a0:38:2b:
e0:a4:eb:59:2c:ea:5f:e9:a2:42:c7:76:58:61:c1:
1d:a7:aa:05:b7:67:ae:bd:c9:a7:82:17:80:90:2a:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3700::/40
2a14:7581:9f10::/44
2a14:7583:4000::/36
2a14:7584:1000::/36
2a14:7586:7000::/36
2a14:7586:9000::-2a14:7586:afff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:5d:59:ee:6d:2b:e6:f3:f8:d6:12:08:22:da:df:8a:25:7a:
d9:3d:ba:d1:ce:d6:fa:3f:62:71:fb:98:14:de:48:c2:b1:e5:
7a:8a:62:ce:5d:f0:b7:6b:f3:7d:8c:73:05:e6:86:cc:82:15:
94:db:ba:12:3c:03:3c:f6:91:8d:1a:87:70:2d:4f:5a:bd:4e:
b7:2d:8f:a6:83:bb:7f:fd:65:b9:0c:79:0f:e6:03:f3:4c:37:
cd:18:4a:20:81:b1:31:05:ca:4f:95:f7:4e:44:ee:73:7c:e6:
d6:c7:e3:be:5e:2f:16:b9:a1:55:02:11:19:16:1f:13:0f:56:
83:8a:71:b5:38:ff:6e:2f:7b:0c:fc:bb:c0:a9:16:c1:a2:60:
3a:55:27:3a:7a:2a:6a:5f:41:47:ba:81:76:75:db:7a:89:af:
86:0d:b6:7a:ae:af:5d:10:95:5c:50:c1:51:4d:86:14:4f:44:
bb:18:23:73:ce:65:7b:ee:39:57:4b:f3:0f:5e:f6:7f:8d:2e:
7c:5c:4d:9e:53:a4:cd:91:27:b3:0d:59:7f:0c:71:03:6b:fc:
90:ba:b1:73:4f:95:02:cb:90:78:5c:98:50:69:75:e2:97:1d:
2c:66:c4:e5:19:f4:80:88:cb:77:8b:5a:14:2a:77:34:34:b8:
1a:87:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:29 2026 by rpki-client