
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
File: B75F3781BC9C2E7301754988659F92686704E570.cer (raw, json)
Hash identifier: 2pvgXGnjcxtuFhFBLCtNRg4ARln7o6peI09RZelSeiw=
Subject key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 541F49B8C44C97192164D0F5B6C15589C0C1CFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 26 May 2026 06:02:05 +0000
Certificate not after: Tue 25 May 2027 06:07:05 +0000
Subordinate resources: IP: 2a14:7583:ef50:: -- 2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1f:49:b8:c4:4c:97:19:21:64:d0:f5:b6:c1:55:89:c0:c1:cf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 26 06:02:05 2026 GMT
Not After : May 25 06:07:05 2027 GMT
Subject: CN=B75F3781BC9C2E7301754988659F92686704E570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:4a:77:de:1c:07:6c:5d:57:72:73:50:76:
19:e2:13:2b:93:4e:61:9d:ad:25:6c:33:de:5d:81:
79:ab:df:70:33:de:dc:28:96:78:8c:66:df:5a:07:
c9:7b:0a:ec:74:b1:b4:a5:2d:74:0b:69:4a:7d:59:
e7:fc:28:26:44:b4:f6:10:d4:f0:d1:ea:ec:68:c7:
f7:fa:6b:b1:7c:9a:fc:fb:b1:e9:9a:2c:59:20:32:
20:fd:79:ae:eb:47:8e:b5:8a:f0:67:7b:78:32:0d:
26:1f:ad:ef:37:25:dc:0d:bf:d6:3e:3a:77:51:be:
74:7b:82:be:5a:c4:57:d5:b8:4b:de:21:58:b6:61:
07:be:39:3b:5e:9c:fe:be:52:1b:0c:7c:77:9a:fe:
14:44:fe:7e:1b:ae:7c:c5:70:83:50:9b:04:3d:1c:
02:b4:e6:b1:91:62:ad:f7:a3:bb:27:29:f6:fe:46:
fa:1b:3e:83:3f:b4:43:9c:40:6a:8b:35:ba:af:d1:
a9:ee:1c:d5:c9:c5:be:ac:41:c9:26:33:7d:24:52:
64:4e:0c:02:f6:a9:99:98:fd:71:02:bd:3f:83:df:
b6:13:9c:85:b7:f9:5b:e0:78:26:eb:dd:a4:4f:bf:
69:1c:41:5f:a6:f7:af:2d:4d:7e:87:0a:9f:ca:bd:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:ef50::-2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:52:45:5d:0e:a9:d2:0b:4d:6e:69:5e:5e:10:cb:19:03:7a:
73:59:e2:dd:ef:5b:ae:fa:10:85:25:9e:eb:0b:4c:0f:59:66:
7e:b0:c5:7f:5c:1b:f9:f5:e7:de:16:c8:4d:bc:0c:07:ff:96:
53:67:25:c1:57:2e:5c:c1:d8:95:f4:bb:82:51:72:34:37:62:
c9:f5:42:fa:db:e9:10:36:2e:0c:c8:b3:08:a9:16:bb:29:74:
af:ac:20:d4:18:19:67:1d:a4:5b:86:2a:78:1b:3f:c0:d0:8d:
10:13:16:58:ac:87:14:59:e4:66:2b:e6:4b:fc:a8:bf:0d:8c:
30:cd:30:c1:47:c7:fd:e9:98:b7:42:d3:9f:e2:b1:da:da:ac:
43:3a:46:51:98:08:cf:d9:e2:c9:0c:65:c7:d2:9b:9b:31:db:
7b:83:3c:88:93:10:30:46:42:56:f8:41:40:ff:5b:c0:64:f1:
59:f0:df:3f:c9:f8:cb:07:3c:aa:4a:5f:5a:80:86:c8:b4:8f:
4e:6b:52:6a:e1:6d:18:a1:1a:cb:0d:11:9b:af:fa:b1:12:46:
61:25:9c:67:cf:4e:06:2c:63:67:48:d9:bf:0e:01:4c:b4:e2:
71:53:cd:6d:7d:a2:82:8e:fe:d6:1d:ad:65:bc:e0:63:0e:be:
b5:c5:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:44 2026 by rpki-client