Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer
File: 52722DE3E767BA8FC1EB29A7D1679F734C55966D.cer (raw, json)
Hash identifier: 2Ep4uFLCWHOeQTeZhIxR+A2MQ/slQaLcAfCRFe3c6Gk=
Subject key identifier: 52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 24BCA91B20BAFB6FAB80626493F63DEFE4A71A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 06 Jun 2026 11:59:46 +0000
Certificate not after: Sat 05 Jun 2027 12:04:46 +0000
Subordinate resources: IP: 2a14:7584:3000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bc:a9:1b:20:ba:fb:6f:ab:80:62:64:93:f6:3d:ef:e4:a7:1a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 6 11:59:46 2026 GMT
Not After : Jun 5 12:04:46 2027 GMT
Subject: CN=52722DE3E767BA8FC1EB29A7D1679F734C55966D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:13:a8:5e:ff:0c:81:1f:8c:08:8e:38:9c:
a1:6a:21:c1:72:1c:89:b8:d7:e5:95:00:69:4a:6a:
a8:55:e2:09:f0:9c:e3:13:eb:3d:27:0f:bb:52:e0:
df:41:d3:c5:72:be:8a:74:2e:6e:6d:8e:26:52:be:
70:67:4a:e1:e2:34:e5:a7:e8:5a:ad:d2:27:6a:43:
b3:e6:63:5f:29:39:ad:ea:0a:51:b0:0b:61:35:7b:
63:05:64:07:26:05:6a:cb:f7:f3:45:6f:44:1a:1b:
78:c7:6a:9e:b2:91:a8:b9:e8:8f:48:8c:86:9a:2d:
0e:e9:90:e1:ac:0b:80:51:7f:ee:27:d1:8a:86:c3:
31:a5:3f:8b:d1:04:2a:95:03:b8:87:d0:31:2b:f0:
ca:ab:af:cb:24:32:d2:da:b1:b8:8c:c9:16:4e:b4:
35:71:13:56:d6:92:5e:31:9e:b6:b8:38:9f:81:c3:
68:f7:34:99:d5:e2:cf:6f:c5:93:bb:aa:d9:bf:86:
25:83:f5:13:02:b0:8a:96:00:ee:c7:94:10:18:e7:
b9:71:3b:59:c9:ca:c4:3f:8d:64:9f:0e:e4:19:34:
2c:2a:93:25:fd:72:84:0e:ce:f0:fa:d2:ef:bb:11:
f8:55:77:3b:66:67:02:8c:33:77:70:0a:8e:5f:7f:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:72:2D:E3:E7:67:BA:8F:C1:EB:29:A7:D1:67:9F:73:4C:55:96:6D
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8062bfa6-93db-4d59-9a45-81f82a8c2c76/1/52722DE3E767BA8FC1EB29A7D1679F734C55966D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:3000::/36
Signature Algorithm: sha256WithRSAEncryption
55:8f:a7:75:aa:ac:0b:e7:1e:10:b0:f9:ed:92:61:43:fe:b4:
05:b6:47:67:11:ab:a3:4a:9a:49:6f:c7:e7:6a:5a:3b:f0:27:
89:e4:fc:aa:31:30:eb:ed:42:6b:93:11:d0:11:f1:c6:b7:37:
df:2f:38:17:95:60:20:f0:a2:3f:77:de:6b:a8:9d:33:15:42:
c9:04:44:02:20:df:4a:36:16:c2:18:84:2a:f6:5d:f0:b4:be:
39:d9:26:b3:bd:a5:41:06:34:70:f6:4d:03:7b:11:20:fe:8e:
74:af:3c:51:7f:1c:b7:81:65:e7:4c:d6:53:1c:fc:f9:bd:bb:
e0:f5:37:6e:c2:7a:c0:5a:0b:15:7d:df:c4:c4:dd:ec:24:02:
7e:90:ba:c1:f1:78:3d:73:94:0b:da:67:1b:57:66:0f:d0:72:
6e:9a:f8:a4:2b:4e:98:69:4f:25:a9:f6:c5:27:d9:fb:de:e7:
b7:d4:2a:db:a7:93:6e:bf:fb:0a:3e:67:b6:6f:db:c9:29:d9:
0e:1f:3b:b1:8e:df:c2:f4:6c:28:12:c2:16:53:9f:45:01:b0:
e0:9a:52:96:e3:dd:f8:f5:99:52:f1:f0:70:0e:93:11:a6:b0:
1d:ea:d6:45:b1:8e:fc:1d:7d:60:59:76:d8:7d:87:c7:18:cc:
84:a7:a6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:35 2026 by rpki-client