Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
File: 9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer (raw, json)
Hash identifier: OoGkcrVwJA1iQ7NimCJ7Rb20gWNWiMCgAyE8QyNMAN0=
Subject key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 54B51C8A309DA9FD3F9D32A12A62F174860BEF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 29 Mar 2026 19:17:23 +0000
Certificate not after: Sun 28 Mar 2027 19:22:23 +0000
Subordinate resources: IP: 2a14:7580:ed00:: -- 2a14:7580:eeff:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b5:1c:8a:30:9d:a9:fd:3f:9d:32:a1:2a:62:f1:74:86:0b:ef:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 29 19:17:23 2026 GMT
Not After : Mar 28 19:22:23 2027 GMT
Subject: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:67:2c:85:96:c3:5d:ac:31:c9:69:5b:a5:
49:23:8f:39:ca:a2:87:88:5b:ba:fa:0f:2a:0f:22:
eb:e9:18:1f:97:52:a4:d3:1a:6c:87:25:6f:df:68:
47:86:0d:65:8b:c2:51:83:f6:a0:d4:40:ba:1f:46:
68:e5:a2:14:3e:0a:aa:46:d5:33:20:0f:1b:fd:3b:
ac:a8:1d:eb:10:de:ef:d2:2c:c2:6f:a4:9f:3b:c7:
8d:75:9e:0b:a9:f6:50:3c:4d:82:c8:a9:b9:1e:15:
32:0f:cf:70:62:1a:08:c2:93:34:af:09:fc:4c:6a:
0c:28:e8:23:af:57:78:5c:40:a0:0d:35:b1:34:7f:
76:e8:5c:bf:34:a5:52:5c:09:7c:e4:f4:d5:f7:db:
17:6c:ac:ab:de:c1:d0:0b:56:f2:b9:47:d5:90:4c:
5f:9d:f6:52:d7:da:72:75:d9:8e:04:09:39:17:82:
94:89:76:2b:a8:05:bf:60:0f:26:f9:c6:d8:68:62:
a1:7e:64:c1:6d:3e:58:78:fe:31:66:1e:e1:00:9e:
b0:b1:82:41:f1:77:d8:7f:82:67:0b:bf:2e:cc:9a:
30:df:12:6e:b8:d9:9f:53:89:9d:ab:25:73:cb:21:
d6:07:26:21:12:58:a2:66:ee:40:37:bd:03:f9:44:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed00::-2a14:7580:eeff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:a6:70:5a:88:bf:f4:f1:4b:82:8c:b8:a6:b8:fa:1b:2f:6f:
f5:6f:6e:7d:24:00:c4:b6:12:24:8a:0d:aa:42:80:c8:9f:21:
27:95:ba:10:9c:1d:17:bf:cf:a6:42:38:90:04:12:bf:a6:ef:
7a:81:7f:0e:e0:2e:72:2a:00:b6:14:09:68:9c:42:bb:24:f7:
d0:46:ed:e9:89:f7:fb:38:3b:d0:e8:12:86:85:06:bf:fe:8b:
96:80:19:9a:85:7a:3a:c4:9b:50:24:bc:ed:c5:e6:39:66:a4:
aa:2c:95:c4:63:75:29:5c:9a:4f:ba:5d:f0:54:54:cd:68:a1:
e4:87:b1:6a:df:3e:94:e6:52:2a:9a:39:f4:0d:00:96:56:36:
95:48:c8:ca:cd:7f:6f:fa:4b:56:32:ad:f7:57:f4:95:c9:e4:
91:dd:f1:5c:61:54:ac:df:1d:e4:29:b9:2f:8c:10:4e:6d:81:
11:2e:7f:75:86:33:7d:0c:c6:71:e7:3d:8d:e5:57:35:e2:0c:
17:a0:95:4d:63:2e:44:50:e0:04:9c:ad:32:d2:c0:4f:f1:2c:
c8:b1:47:af:12:30:9f:84:af:60:d2:dd:57:62:ab:d4:7d:77:
f0:97:5a:ff:27:69:c0:c4:e6:7e:46:b8:bd:f2:33:d7:7f:9b:
dc:9b:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:03 2026 by rpki-client