
Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer
File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer (raw, json)
Hash identifier: GTjo6vYKUrzME1s/AryBxWdyidY3+Au+6GmgeUJuHy4=
Subject key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 36B10149A873397A4B85B3C8A5BCC71CC1C9741D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 10:06:51 +0000
Certificate not after: Wed 09 Jun 2027 10:11:51 +0000
Subordinate resources: IP: 2a14:7580:ff70::/44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b1:01:49:a8:73:39:7a:4b:85:b3:c8:a5:bc:c7:1c:c1:c9:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 10 10:06:51 2026 GMT
Not After : Jun 9 10:11:51 2027 GMT
Subject: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:59:2f:56:18:c0:95:98:c0:c2:1e:6e:2e:
95:89:ef:ec:80:af:14:47:40:25:e2:fb:f3:3f:3e:
ca:dd:84:84:63:2b:64:fb:51:08:bb:67:50:c0:7c:
3f:f8:b6:dc:c0:d5:41:3d:1f:de:14:fd:f3:f0:e5:
69:24:3c:03:5b:92:4d:e0:d8:1f:97:bb:0f:29:b3:
2d:29:60:40:27:82:f6:a3:08:52:5e:f5:1e:79:ca:
16:34:72:a3:51:7d:1c:d7:a5:2f:5e:59:76:a7:bd:
d4:12:65:f2:a0:b0:79:23:19:80:2d:21:10:89:ee:
13:93:0d:fd:86:91:9d:88:7f:f3:23:bd:01:0c:00:
79:dd:14:b0:66:d8:ca:f2:a6:ec:74:32:de:04:2a:
d5:04:40:96:76:54:61:f8:cf:ce:d6:e8:81:cc:f1:
f3:e6:94:d3:85:54:05:c8:05:37:85:26:c3:6a:85:
ad:0f:08:97:60:66:1c:60:84:5d:5c:f3:fa:2b:e5:
d6:f1:72:bd:f0:8b:83:a2:07:54:e6:58:6f:0c:13:
a7:f1:18:0d:40:67:3d:ea:25:9d:16:3f:d5:3f:9d:
86:28:1e:a9:56:68:86:4b:e7:28:da:0c:53:1c:10:
17:4b:66:8b:69:35:4c:0c:d0:56:67:83:df:a8:4e:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ff70::/44
Signature Algorithm: sha256WithRSAEncryption
13:a0:06:61:83:de:16:de:13:03:01:80:f8:a2:24:3e:0d:c9:
de:5e:e6:2f:98:d2:ae:9d:8e:5b:fb:52:cf:8c:8d:d0:60:c1:
e7:93:47:92:5c:c0:4c:1a:12:2d:50:ab:9e:a0:19:5f:20:65:
07:8f:3c:be:65:b1:3f:22:f0:2d:d7:e0:a9:29:64:02:a0:28:
88:c9:01:b5:18:92:ee:98:93:4d:c5:9c:66:1c:5e:b9:d6:99:
0b:8a:ed:1d:8a:9b:a6:94:4f:86:4d:96:d0:c5:f6:2d:60:91:
7d:71:f2:a7:49:04:63:0b:7c:4e:14:7c:63:ee:6b:b0:38:d1:
71:da:92:05:48:68:95:7f:c2:42:c7:31:15:7e:2b:85:30:a0:
18:f8:ba:5c:62:a2:bf:96:9c:1e:57:96:fb:7d:f6:32:29:74:
26:38:20:a8:f2:b0:30:94:64:8e:54:7f:60:0e:28:98:85:95:
32:8b:b9:ad:61:6a:b9:b0:09:8a:21:5d:d3:61:e6:c9:bb:0a:
a8:6c:66:16:5d:cd:32:7c:4a:56:9b:fc:a7:52:9a:6a:3f:cd:
9f:3f:c1:84:37:8a:10:bb:4a:da:76:13:d7:91:b3:03:37:f4:
73:37:fb:dd:ac:ed:57:70:a3:69:35:d3:2e:3c:4a:21:08:90:
3e:45:01:86
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUNrEBSahzOXpLhbPIpbzHHMHJdB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA2MTAxMDA2NTFaFw0yNzA2MDkxMDExNTFaMDMxMTAvBgNV
BAMTKENDNzkxQTFGNUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAlkvVhjAlZjAwh5uLpWJ7+yA
rxRHQCXi+/M/PsrdhIRjK2T7UQi7Z1DAfD/4ttzA1UE9H94U/fPw5WkkPANbkk3g
2B+Xuw8psy0pYEAngvajCFJe9R55yhY0cqNRfRzXpS9eWXanvdQSZfKgsHkjGYAt
IRCJ7hOTDf2GkZ2If/MjvQEMAHndFLBm2Mrypux0Mt4EKtUEQJZ2VGH4z87W6IHM
8fPmlNOFVAXIBTeFJsNqha0PCJdgZhxghF1c8/or5dbxcr3wi4OiB1TmWG8ME6fx
GA1AZz3qJZ0WP9U/nYYoHqlWaIZL5yjaDFMcEBdLZotpNUwM0FZng9+oTqwdAgMB
AAGjggLkMIIC4DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTMeRofXLO7LK98
KDghEuJpvx0PLzAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMzN2ZjLzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9iN2EwYWE1Ni00YTFkLTRiYTgtYWI2Ni1jNTlmZWQ0YzM3ZmMv
MS9DQzc5MUExRjVDQjNCQjJDQUY3QzI4MzgyMTEyRTI2OUJGMUQwRjJGLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQqFHWA/3AwDQYJKoZIhvcNAQELBQADggEBABOg
BmGD3hbeEwMBgPiiJD4Nyd5e5i+Y0q6djlv7Us+MjdBgweeTR5JcwEwaEi1Qq56g
GV8gZQePPL5lsT8i8C3X4KkpZAKgKIjJAbUYku6Yk03FnGYcXrnWmQuK7R2Km6aU
T4ZNltDF9i1gkX1x8qdJBGMLfE4UfGPua7A40XHakgVIaJV/wkLHMRV+K4UwoBj4
ulxior+WnB5Xlvt99jIpdCY4IKjysDCUZI5Uf2AOKJiFlTKLua1harmwCYohXdNh
5sm7CqhsZhZdzTJ8Slab/KdSmmo/zZ8/wYQ3ihC7Stp2E9eRswM39HM3+92s7Vdw
o2k10y48SiEIkD5FAYY=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:12:46 2026 by rpki-client