Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer
File: DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.cer (raw, json)
Hash identifier: biMxen0vWvOSYIDmdmeMrn6eGFaRWdr+FekGrME17o0=
Subject key identifier: DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 2795CE6A97A7095C16FD69F3DE9D19542C1E3368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 10 Sep 2026 18:12:29 +0000
Certificate not after: Thu 09 Sep 2027 18:17:29 +0000
Subordinate resources: IP: 2a14:7585::/32
IP: 2a14:7587::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:95:ce:6a:97:a7:09:5c:16:fd:69:f3:de:9d:19:54:2c:1e:33:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 10 18:12:29 2026 GMT
Not After : Sep 9 18:17:29 2027 GMT
Subject: CN=DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:e5:54:09:6a:f9:4e:28:39:8f:e5:e9:7c:
1d:cc:a9:51:1c:74:ac:19:27:4a:89:b3:d5:85:98:
39:ed:f7:fe:1a:a5:2a:65:da:2c:7e:99:d0:18:de:
d3:bc:22:14:b1:9f:84:c4:35:50:78:fc:73:44:2e:
1e:49:78:45:e2:da:71:c4:cb:07:c1:74:a1:bc:1c:
14:43:3c:b6:7a:37:4f:7e:07:2d:4d:b8:f5:56:68:
cc:89:fc:f8:6f:27:7b:37:88:bf:f2:ca:3e:82:5e:
46:63:8e:78:48:08:74:3f:f2:e2:bf:71:13:b1:b7:
d0:f9:6b:b4:fd:d1:ec:4a:89:ec:de:03:2b:7b:c7:
da:5d:47:bc:57:23:d3:9d:01:81:66:e5:fe:7b:ea:
62:b1:de:9f:8a:10:84:e0:bb:18:a3:ff:48:e5:e5:
da:b6:9e:ab:97:b7:fa:f0:6e:2a:43:25:97:d6:19:
04:96:a2:e7:54:b3:6f:d7:ca:ae:67:47:d1:f5:cb:
a4:fe:bb:e6:db:02:25:91:f2:d9:52:bc:25:07:d4:
1d:79:65:c7:2b:b0:2e:3d:01:63:a2:0f:aa:2e:de:
91:7a:db:c9:a2:ab:ae:81:3c:f2:94:4a:b6:8e:5e:
aa:86:3e:46:7f:17:7a:d9:9e:aa:13:9c:84:71:01:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DC:D2:35:2A:69:93:62:D0:90:BC:9E:9C:F9:DA:08:DD:5F:DB:67:C1
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/8cd03be2-6b02-4c59-a937-41e264cde636/1/DCD2352A699362D090BC9E9CF9DA08DD5FDB67C1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7585::/32
2a14:7587::/32
Signature Algorithm: sha256WithRSAEncryption
5f:5e:f8:16:68:be:7a:7f:7d:60:64:5c:ef:54:6e:5d:74:b3:
48:8f:c1:97:a7:11:11:9c:c5:70:b3:ef:dc:07:06:c3:93:c8:
54:f5:2e:fd:d2:9b:ce:52:c1:61:22:25:b1:4f:fa:81:16:22:
c4:bf:f2:2c:c4:2a:59:73:19:7a:e2:f3:93:22:ff:14:56:75:
74:8b:c3:51:c0:8d:0d:d9:86:c3:0c:e8:06:b3:99:b8:9a:76:
9f:95:63:c2:3d:e8:6f:64:d6:33:9d:25:28:2d:f8:cd:9d:c6:
11:04:f6:d2:e0:cb:fc:9b:dd:3f:d5:3d:7e:26:e7:c1:9f:53:
f6:0c:64:51:0a:96:12:30:1b:ee:be:f2:05:88:85:5c:14:a5:
a0:19:48:1e:e4:98:e2:08:b7:f8:4b:2e:b5:56:b4:ce:8c:c2:
4d:0a:be:9e:f0:bb:3d:ca:69:8d:d5:4c:80:3f:0c:4d:90:3d:
a0:73:21:2e:96:63:0f:b9:b7:44:2d:26:d9:db:48:7b:f1:5c:
97:e1:36:65:98:a5:1a:40:2e:a4:f9:9c:d6:43:a0:c2:09:13:
e2:20:27:3c:2e:21:75:68:37:08:1c:da:7f:b8:9d:bf:5f:d7:
cc:0d:41:5e:65:0c:a0:20:b4:99:3d:4b:3f:42:6d:43:c9:d1:
54:12:21:a2
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgIUJ5XOapenCVwW/Wnz3p0ZVCweM2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MTAxODEyMjlaFw0yNzA5MDkxODE3MjlaMDMxMTAvBgNV
BAMTKERDRDIzNTJBNjk5MzYyRDA5MEJDOUU5Q0Y5REEwOERENUZEQjY3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9OVUCWr5Tig5j+XpfB3MqVEc
dKwZJ0qJs9WFmDnt9/4apSpl2ix+mdAY3tO8IhSxn4TENVB4/HNELh5JeEXi2nHE
ywfBdKG8HBRDPLZ6N09+By1NuPVWaMyJ/PhvJ3s3iL/yyj6CXkZjjnhICHQ/8uK/
cROxt9D5a7T90exKiezeAyt7x9pdR7xXI9OdAYFm5f576mKx3p+KEITguxij/0jl
5dq2nquXt/rwbipDJZfWGQSWoudUs2/Xyq5nR9H1y6T+u+bbAiWR8tlSvCUH1B15
ZccrsC49AWOiD6ou3pF628miq66BPPKUSraOXqqGPkZ/F3rZnqoTnIRxAVUtAgMB
AAGjggLpMIIC5TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTc0jUqaZNi0JC8
npz52gjdX9tnwTAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvOGNkMDNiZTItNmIwMi00YzU5LWE5MzctNDFlMjY0Y2RlNjM2LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS84Y2QwM2JlMi02YjAyLTRjNTktYTkzNy00MWUyNjRjZGU2MzYv
MS9EQ0QyMzUyQTY5OTM2MkQwOTBCQzlFOUNGOURBMDhERDVGREI2N0MxLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUH
AQcBAf8EGDAWMBQEAgACMA4DBQAqFHWFAwUAKhR1hzANBgkqhkiG9w0BAQsFAAOC
AQEAX174Fmi+en99YGRc71RuXXSzSI/Bl6cREZzFcLPv3AcGw5PIVPUu/dKbzlLB
YSIlsU/6gRYixL/yLMQqWXMZeuLzkyL/FFZ1dIvDUcCNDdmGwwzoBrOZuJp2n5Vj
wj3ob2TWM50lKC34zZ3GEQT20uDL/JvdP9U9fibnwZ9T9gxkUQqWEjAb7r7yBYiF
XBSloBlIHuSY4gi3+EsutVa0zozCTQq+nvC7PcppjdVMgD8MTZA9oHMhLpZjD7m3
RC0m2dtIe/Fcl+E2ZZilGkAupPmc1kOgwgkT4iAnPC4hdWg3CBzaf7idv1/XzA1B
XmUMoCC0mT1LP0JtQ8nRVBIhog==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:29 2026 by rpki-client