Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.cer (raw, json)
Hash identifier: xUvG85xgElGx/SgHPvY1tM6qvLFy3NCJlERb/fmVFEw=
Subject key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2C8711A25E5ED2A4D3D2530861DE1C0909279F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 13 Jun 2025 06:23:33 +0000
Certificate not after: Fri 12 Jun 2026 06:28:33 +0000
Subordinate resources: IP: 2a14:7581:ff0::/48
IP: 2a14:7581:9000::/38
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:87:11:a2:5e:5e:d2:a4:d3:d2:53:08:61:de:1c:09:09:27:9f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 13 06:23:33 2025 GMT
Not After : Jun 12 06:28:33 2026 GMT
Subject: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:34:a6:7d:b1:db:4c:7d:ff:0d:e4:d3:7f:
f8:db:c7:9f:75:cf:18:33:29:b5:3f:eb:bf:e5:91:
09:cb:f4:e9:5a:26:91:8f:2e:5f:c0:54:11:58:92:
a2:3b:9a:38:eb:97:a7:34:8c:5e:82:f4:c7:77:35:
b5:a4:87:59:b8:66:b7:e0:c0:cf:ac:9b:fe:42:e3:
41:11:29:5e:b2:2e:b8:f3:9c:2e:6e:e2:98:54:57:
68:40:48:0b:d7:d4:be:f4:86:ca:10:02:bf:71:7b:
92:6c:30:1b:4b:1e:22:1e:be:59:06:32:0a:80:9c:
5d:17:a8:97:61:46:9d:4b:75:56:11:87:74:e9:8a:
dc:c8:18:b1:08:c8:bb:92:8c:ed:ad:59:69:7d:fb:
f9:21:9f:b6:84:30:57:b6:4f:d7:e6:f3:66:cd:0f:
87:e7:3f:8f:7e:04:ce:c6:bc:23:19:de:57:da:0c:
f3:da:7b:ac:6e:3b:80:d4:d1:9a:60:b1:de:ae:61:
26:0e:29:57:82:f1:a0:4a:97:56:04:30:02:8a:33:
20:4c:a6:7e:c1:f6:36:00:d4:12:08:f1:62:b6:3e:
7c:58:26:2a:2a:66:76:8a:db:45:7a:f0:f6:e6:38:
b5:77:2e:ae:57:0b:8b:ed:06:25:17:b0:9a:28:0c:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff0::/48
2a14:7581:9000::/38
Signature Algorithm: sha256WithRSAEncryption
4a:bc:96:a3:4b:af:fd:8a:aa:70:5c:74:ea:a5:bc:74:4b:02:
6f:18:b5:53:ae:e7:6b:49:66:b1:29:6e:98:61:7c:94:e8:62:
d9:05:fd:a9:8e:e6:67:65:88:57:04:20:e3:ff:d1:06:8a:65:
2c:b8:2e:75:c4:1f:5b:f3:48:a3:86:cd:83:d2:16:11:85:b8:
82:3d:d8:ab:83:4b:19:d5:7c:82:06:1e:54:25:90:ce:26:20:
18:73:00:97:ce:e3:b6:df:85:30:05:6c:0e:9e:55:18:9f:01:
cb:bd:bb:c2:62:b2:09:8b:82:30:9d:a9:91:40:a3:fa:43:a2:
b0:c7:96:cb:b9:3f:f2:4e:ce:a9:ce:88:76:15:a3:05:e9:28:
36:27:07:a2:b0:a0:c0:5e:38:36:62:27:98:fb:fd:fd:92:d4:
f4:f9:7d:10:4c:22:c4:55:41:22:e1:7c:9c:09:41:40:16:23:
8f:0e:95:60:0e:37:e6:fb:80:6e:47:e2:26:e3:3d:52:73:2a:
a6:2f:58:38:1c:e0:0f:6e:86:bf:84:b8:4a:43:aa:44:1a:35:
4b:15:7d:f1:56:6b:d3:ab:30:c2:0a:40:6f:7d:f8:af:9c:ed:
2f:3d:11:9c:0b:8c:64:2b:bb:22:00:a4:26:96:5a:32:24:cc:
cd:5f:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:32 2025 by rpki-client