Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.cer (raw, json)
Hash identifier: Mof5kUlEosatgrgEunT9p67DivTOPpeXRzyGZs4hoMY=
Subject key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7FC2DE6C3A197F4EBAC2C839756224CEF6B64309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 02 Feb 2026 14:55:41 +0000
Certificate not after: Mon 01 Feb 2027 15:00:41 +0000
Subordinate resources: IP: 2a14:7581:9000::/38
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c2:de:6c:3a:19:7f:4e:ba:c2:c8:39:75:62:24:ce:f6:b6:43:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 2 14:55:41 2026 GMT
Not After : Feb 1 15:00:41 2027 GMT
Subject: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:34:a6:7d:b1:db:4c:7d:ff:0d:e4:d3:7f:
f8:db:c7:9f:75:cf:18:33:29:b5:3f:eb:bf:e5:91:
09:cb:f4:e9:5a:26:91:8f:2e:5f:c0:54:11:58:92:
a2:3b:9a:38:eb:97:a7:34:8c:5e:82:f4:c7:77:35:
b5:a4:87:59:b8:66:b7:e0:c0:cf:ac:9b:fe:42:e3:
41:11:29:5e:b2:2e:b8:f3:9c:2e:6e:e2:98:54:57:
68:40:48:0b:d7:d4:be:f4:86:ca:10:02:bf:71:7b:
92:6c:30:1b:4b:1e:22:1e:be:59:06:32:0a:80:9c:
5d:17:a8:97:61:46:9d:4b:75:56:11:87:74:e9:8a:
dc:c8:18:b1:08:c8:bb:92:8c:ed:ad:59:69:7d:fb:
f9:21:9f:b6:84:30:57:b6:4f:d7:e6:f3:66:cd:0f:
87:e7:3f:8f:7e:04:ce:c6:bc:23:19:de:57:da:0c:
f3:da:7b:ac:6e:3b:80:d4:d1:9a:60:b1:de:ae:61:
26:0e:29:57:82:f1:a0:4a:97:56:04:30:02:8a:33:
20:4c:a6:7e:c1:f6:36:00:d4:12:08:f1:62:b6:3e:
7c:58:26:2a:2a:66:76:8a:db:45:7a:f0:f6:e6:38:
b5:77:2e:ae:57:0b:8b:ed:06:25:17:b0:9a:28:0c:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9000::/38
Signature Algorithm: sha256WithRSAEncryption
8c:e5:fd:a0:84:2e:b1:7e:71:bb:c8:17:14:bd:b6:cd:60:3b:
b6:e1:1b:8e:07:83:8c:75:e7:33:79:22:2f:57:c4:9a:23:39:
15:fc:4e:72:1d:a7:41:a9:63:7b:64:78:f3:a3:4d:5a:f8:17:
bb:05:e3:e5:4f:90:10:a5:2d:c6:d0:bf:56:99:01:39:66:b0:
94:4f:77:09:c6:6f:6a:b3:e4:f2:c2:e7:49:2b:98:d6:e2:e5:
e8:f3:09:1f:de:84:95:6a:80:90:dd:00:6d:46:79:ac:1f:72:
18:c5:13:f7:b6:b3:a5:de:23:8e:f2:42:d1:da:96:db:03:ae:
84:0f:02:6d:f4:e3:60:14:4f:f3:67:f5:90:f1:6a:81:53:2f:
cd:59:fb:9f:d0:83:62:b4:ba:3c:c4:51:6b:d4:aa:e5:70:93:
b3:07:55:4e:10:f5:c6:82:5e:42:13:ee:fe:8f:b8:cd:80:97:
c2:ff:d2:0e:ef:53:57:25:71:e8:c4:e9:c9:c4:77:bd:b2:d6:
c3:64:fb:65:7e:3b:62:52:2a:a1:08:29:62:a9:08:1e:39:36:
0f:86:7d:7e:bb:ce:18:cb:3c:f7:d8:5e:c5:47:7d:00:20:32:
8c:4e:eb:9c:99:e3:04:ff:70:b1:63:5c:a3:26:2a:c7:2d:55:
a5:6b:47:df
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUf8LebDoZf066wsg5dWIkzva2QwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjAyMDIxNDU1NDFaFw0yNzAyMDExNTAwNDFaMDMxMTAvBgNV
BAMTKEExRUU1RDA5QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5DSmfbHbTH3/DeTTf/jbx591
zxgzKbU/67/lkQnL9OlaJpGPLl/AVBFYkqI7mjjrl6c0jF6C9Md3NbWkh1m4Zrfg
wM+sm/5C40ERKV6yLrjznC5u4phUV2hASAvX1L70hsoQAr9xe5JsMBtLHiIevlkG
MgqAnF0XqJdhRp1LdVYRh3TpitzIGLEIyLuSjO2tWWl9+/khn7aEMFe2T9fm82bN
D4fnP49+BM7GvCMZ3lfaDPPae6xuO4DU0Zpgsd6uYSYOKVeC8aBKl1YEMAKKMyBM
pn7B9jYA1BII8WK2PnxYJioqZnaK20V68PbmOLV3Lq5XC4vtBiUXsJooDDS9AgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSh7l0JoPXQ2HYR
ATF1xi41d32pJjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEwNDhjLzAv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMv
MC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3NUM2MkUzNTc3N0RBOTI2Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgIqFHWBkDANBgkqhkiG9w0BAQsFAAOCAQEAjOX9
oIQusX5xu8gXFL22zWA7tuEbjgeDjHXnM3kiL1fEmiM5FfxOch2nQalje2R486NN
WvgXuwXj5U+QEKUtxtC/VpkBOWawlE93CcZvarPk8sLnSSuY1uLl6PMJH96ElWqA
kN0AbUZ5rB9yGMUT97azpd4jjvJC0dqW2wOuhA8CbfTjYBRP82f1kPFqgVMvzVn7
n9CDYrS6PMRRa9Sq5XCTswdVThD1xoJeQhPu/o+4zYCXwv/SDu9TVyVx6MTpycR3
vbLWw2T7ZX47YlIqoQgpYqkIHjk2D4Z9frvOGMs899hexUd9ACAyjE7rnJnjBP9w
sWNcoyYqxy1VpWtH3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:41 2026 by rpki-client