Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer
File: 2A91778ACCE76333081468D9784DE132C2985976.cer (raw, json)
Hash identifier: Q3TE3zTpqdIaRixwi937e4aJ19kQTMIOyqT2PRrF92w=
Subject key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 7334C72DD9990B15EB0ED758787E0DE7185253CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 21:42:47 +0000
Certificate not after: Tue 01 Jun 2027 21:47:47 +0000
Subordinate resources: IP: 2a0f:1cc5:2600::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:34:c7:2d:d9:99:0b:15:eb:0e:d7:58:78:7e:0d:e7:18:52:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 21:42:47 2026 GMT
Not After : Jun 1 21:47:47 2027 GMT
Subject: CN=2A91778ACCE76333081468D9784DE132C2985976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:73:c9:d9:0f:13:94:4d:96:1c:45:c2:34:
f7:5f:9d:b7:1c:6e:f3:4b:91:28:d1:f0:6d:ff:27:
ba:90:75:21:2b:cd:42:71:a9:b7:07:c8:48:b8:d4:
2c:36:dd:4b:44:d7:5e:99:57:dc:c2:0d:39:dc:9b:
c9:53:35:92:1c:37:6f:5d:4a:66:cc:5a:fd:e2:65:
32:bb:9a:39:b7:d3:a1:3d:2d:e8:15:76:e9:3a:34:
d9:4e:21:21:60:9b:a2:a3:dd:d1:ad:d8:aa:85:24:
8e:fd:1b:9f:35:65:21:90:56:43:29:01:f1:3b:27:
38:d8:27:5e:7f:60:63:b5:f7:0b:69:42:4a:51:e4:
fa:1d:ea:22:8b:3d:7c:17:c4:97:6c:de:41:a1:f6:
07:74:a2:47:64:d7:48:78:68:dd:2c:cb:66:5a:26:
b3:34:31:9a:ea:11:d5:40:43:f3:19:c6:7d:49:12:
5d:51:de:2a:90:08:cd:60:cc:ef:55:88:29:dc:e9:
d8:e8:17:97:81:e1:68:b2:80:7c:d1:6d:b4:15:b4:
4d:ae:60:53:e8:e4:21:58:b5:19:85:14:25:6e:a9:
34:16:80:94:82:c3:41:12:25:3a:28:fc:ed:65:ee:
84:fc:55:4f:99:43:20:e6:25:57:ae:84:c9:cd:ad:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2600::/40
Signature Algorithm: sha256WithRSAEncryption
5f:99:93:54:63:2a:33:f9:3b:8f:e1:7b:5d:3b:73:f2:35:a2:
8b:fe:f9:51:0d:bc:44:2d:79:89:05:37:62:3b:c9:57:b0:72:
d1:19:61:49:8f:92:9e:3f:29:22:11:28:36:ae:91:fe:7f:08:
30:b0:46:b5:fc:7f:68:f7:36:3e:9b:20:44:ce:18:78:84:6a:
a6:13:21:8f:7d:65:ce:aa:8a:b3:eb:7a:41:8c:d0:26:38:b3:
1e:16:c9:9b:4b:f7:ff:14:09:1a:e7:73:e4:39:cc:c5:d3:5a:
23:40:78:4c:ca:68:89:67:9a:78:e9:7b:7e:89:f5:95:a8:79:
17:48:a7:4c:5d:a5:9a:a8:ab:18:3c:3b:9a:4d:04:fd:ea:d0:
ab:df:71:5a:d6:f6:4d:c6:c6:cb:74:bd:ca:dc:25:7e:d4:2b:
04:3e:c9:26:c7:f7:ff:94:47:58:81:db:ef:07:95:d8:a9:2d:
5e:1a:9d:fa:83:e3:aa:1c:38:02:f8:6c:27:15:f3:42:40:b1:
5a:7b:10:d9:74:8d:bb:aa:ac:bf:65:e1:41:3d:10:13:75:bf:
f8:9a:18:db:bf:9f:0b:79:2d:7a:32:73:f3:e1:c1:0f:d6:52:
a3:ef:b3:81:88:9b:04:a8:89:8a:5e:b2:a1:36:93:2c:5c:a3:
cf:cc:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:59 2026 by rpki-client