Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer (raw, json)
Hash identifier: AiugXdrsRL3EiGn29LXJN30Ki5VV+Z5t4QuiZzZunuM=
Subject key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3E7AE8C93E6EA6C81BCF434F006ED0BBB60457BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 19 Apr 2026 04:24:54 +0000
Certificate not after: Sun 18 Apr 2027 04:29:54 +0000
Subordinate resources: IP: 2a14:7580:f300::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:7a:e8:c9:3e:6e:a6:c8:1b:cf:43:4f:00:6e:d0:bb:b6:04:57:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Apr 19 04:24:54 2026 GMT
Not After : Apr 18 04:29:54 2027 GMT
Subject: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:75:cb:9b:50:1c:89:9c:a5:fd:9d:b5:ed:
4b:9c:f5:6d:86:32:6f:43:cb:f0:00:91:83:b8:6c:
6e:48:e4:2e:e5:ad:e0:e7:05:0b:c6:76:6d:ff:29:
af:70:82:c4:b2:e9:ee:e1:eb:30:6a:17:e5:0d:cb:
c7:21:ef:b1:b8:d4:aa:16:0c:dd:14:b2:e5:61:66:
59:40:20:9c:fa:31:06:c9:b5:bc:21:ce:89:a5:a3:
c5:11:ea:12:92:98:2e:5c:c9:2e:d4:4e:a0:ad:53:
4c:50:88:f6:11:c5:db:4e:eb:d1:8e:be:ae:05:b1:
76:b9:ae:fe:7c:a8:15:9f:ba:5b:f9:08:b8:98:2b:
8b:94:81:dd:66:25:2f:37:38:92:e3:c4:05:7e:c8:
3f:67:24:01:76:c7:0e:9d:84:48:6a:bf:fa:f9:7a:
6e:86:c6:d9:1c:fe:d8:46:cb:cf:d3:d1:4d:15:7b:
d4:fa:bb:50:25:27:3c:07:91:ac:59:4c:47:1f:08:
92:4a:92:f1:47:d7:c3:52:5b:0d:c3:40:bb:6d:3b:
0e:08:a8:30:fd:a0:9b:81:2f:7e:f0:f3:85:de:0d:
61:72:a6:4b:ad:4e:4b:1c:65:62:88:0e:00:fa:96:
7e:ee:f7:a5:13:9b:e5:80:66:44:be:95:8c:6c:93:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
87:ee:a2:27:e7:a0:1e:a1:bc:ca:24:d8:4c:7f:85:bb:10:fa:
0c:3a:5a:06:4b:f7:29:43:61:03:40:91:93:a1:1f:3e:34:e7:
e5:ed:9f:f4:65:ea:57:6d:55:13:b9:6e:6c:72:91:25:14:1b:
bf:5d:e2:f8:8b:cc:2e:84:55:27:64:46:48:08:ea:8d:69:f8:
17:2b:36:60:50:a4:1e:91:e7:b3:82:65:9c:89:a0:37:4a:ce:
19:8a:50:5a:bd:33:76:d3:51:8f:da:96:cc:77:21:9c:7b:c2:
8e:36:fd:6a:c8:ac:76:93:51:41:ee:ff:bb:f0:a4:2c:0b:cf:
de:d4:45:1a:9d:b1:39:b0:7a:0a:7e:27:8d:5d:d9:a0:51:be:
8b:c2:22:fc:c2:c7:d0:91:20:ad:75:cc:26:06:bc:66:f0:20:
f4:38:5e:9a:e2:16:27:94:84:c6:de:50:61:a7:d9:36:71:f3:
84:8c:f3:63:c9:b8:66:30:93:b7:0f:7d:96:0d:8d:e7:70:ef:
7b:fe:e8:99:b2:0f:e1:d4:06:06:04:f7:76:f3:b2:9a:50:eb:
e6:40:a8:c8:bc:88:f8:1d:43:9d:5a:3b:04:e2:0e:f3:9e:7b:
58:3d:ad:b9:69:00:48:32:70:99:b1:88:27:e1:57:02:b1:87:
64:c9:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:00 2026 by rpki-client