Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
File: 9B848163C7049122702E8D37941241ED5ADD94D9.cer (raw, json)
Hash identifier: K62cpJrgeBNqzIfoFpU5YsO8HhS4nGB3hRvMb1jkCss=
Subject key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3652AB82BC0D1242159736119C72FB9A22692C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 01 Mar 2026 13:28:31 +0000
Certificate not after: Sun 28 Feb 2027 13:33:31 +0000
Subordinate resources: IP: 2a14:7580:c000::/36
IP: 2a14:7583::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:52:ab:82:bc:0d:12:42:15:97:36:11:9c:72:fb:9a:22:69:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 1 13:28:31 2026 GMT
Not After : Feb 28 13:33:31 2027 GMT
Subject: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:5f:2d:0c:79:cb:cf:1c:c9:af:0e:84:a9:
db:f3:21:39:45:46:58:69:48:00:14:ca:e6:4f:6d:
63:0e:d2:96:a0:fe:27:d4:7f:6b:0c:12:02:60:2a:
ac:e7:cf:6f:40:13:27:9f:b5:b2:91:12:93:57:b6:
d6:79:2f:8b:f8:d6:b6:1d:9f:28:ed:d2:92:bf:13:
22:35:8e:1b:0d:e5:e5:ee:4f:7b:21:eb:96:32:68:
f1:4f:ac:08:0c:f4:38:b2:c6:05:f5:07:3b:3b:71:
00:71:81:a9:47:88:54:3c:a2:f2:95:b4:fc:8d:34:
39:29:36:ef:a6:72:d1:de:ed:df:84:8a:8f:16:60:
e5:df:c8:3a:33:f6:31:18:fb:52:48:54:82:8d:14:
9e:46:e9:d4:1f:22:9f:b1:a5:cf:7c:13:2d:5b:10:
ec:6c:d1:3c:01:60:27:d8:9e:3c:5f:cd:38:5e:17:
61:4a:18:5c:10:5f:de:dc:96:67:df:8f:bb:df:99:
7a:1a:dc:49:5c:ca:1d:aa:cc:f5:69:2e:4d:32:27:
d2:ae:89:5e:04:0a:ab:f9:7e:61:26:bb:0f:23:c0:
0b:55:45:d3:9c:26:3e:35:6a:3c:92:25:e7:34:33:
8b:13:50:70:f7:af:ef:f4:5d:19:ea:65:7f:13:12:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:c000::/36
2a14:7583::/36
Signature Algorithm: sha256WithRSAEncryption
2e:d4:53:bc:e2:88:cf:f1:0f:a8:3f:e6:65:20:28:53:28:f0:
d2:1a:f1:61:c9:d0:ca:70:0e:d2:34:92:e5:04:29:ca:b5:34:
15:e1:f0:46:95:fc:d6:c2:ff:8a:f3:af:08:9d:be:15:ff:07:
9b:39:ff:69:fa:37:17:50:4c:99:4b:cf:a9:a5:68:2d:45:4a:
69:3d:d6:ab:8a:14:5a:fc:37:47:ac:cc:e5:dc:b7:10:2d:3c:
24:ff:87:87:fb:60:56:a6:f7:e6:5b:69:4b:9a:73:b5:93:26:
22:5b:1a:12:15:04:57:c9:95:94:da:6b:43:f4:40:59:bc:ab:
61:28:c8:e2:61:11:38:b7:ba:1a:fb:0c:34:30:4e:1b:19:13:
0e:98:bf:2f:ae:75:0b:c2:a2:a0:8e:7a:71:48:4c:fe:62:de:
42:c6:ea:8c:79:8b:ea:b4:e5:f9:be:af:93:7c:e6:5d:a3:81:
61:8d:fe:43:32:60:0a:4b:de:d7:99:c1:e8:f2:a1:fa:a5:a1:
cb:c6:8d:44:fc:31:cc:84:49:e8:4d:4d:09:bf:41:76:ee:df:
59:3c:44:ed:fc:d8:7c:6d:64:19:81:87:6c:78:a8:bc:17:b1:
8b:e4:5d:84:b4:47:0e:c6:cd:86:1c:82:ee:d2:c4:30:a8:f7:
d0:af:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:54 2026 by rpki-client