Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/473F2085BBDEE25875BDA78FE4469ABD64842C90.cer
File: 473F2085BBDEE25875BDA78FE4469ABD64842C90.cer (raw, json)
Hash identifier: irzPugMSxiwS6E7XOSLxis5uc5FtrHrC0AGhaB8oaQQ=
Subject key identifier: 47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 1070EA95779A38633FD22693461134D77BF55571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 12 Jun 2026 20:47:20 +0000
Certificate not after: Fri 11 Jun 2027 20:52:20 +0000
Subordinate resources: IP: 2a0f:1cc5:c00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:70:ea:95:77:9a:38:63:3f:d2:26:93:46:11:34:d7:7b:f5:55:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 12 20:47:20 2026 GMT
Not After : Jun 11 20:52:20 2027 GMT
Subject: CN=473F2085BBDEE25875BDA78FE4469ABD64842C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:e9:36:05:11:a5:af:8f:d9:56:da:c9:47:
88:e4:8e:84:40:6f:0b:27:bd:6d:b9:98:6f:de:c3:
1b:15:59:1e:0f:df:dd:d7:cf:8a:c7:dd:2f:e9:1e:
c2:22:f3:e9:dc:e6:09:58:8f:6d:19:35:17:e2:6b:
06:10:0d:0b:5f:48:70:db:4a:49:92:cd:52:58:5f:
31:a0:2d:b2:10:91:ab:cb:ad:19:d2:3f:bd:cb:33:
b6:0d:b3:15:13:3f:44:6e:38:34:38:38:75:66:8a:
27:8a:70:7b:cd:2e:e5:1a:1f:dd:bd:1b:7d:7a:c6:
fa:39:6f:92:0b:9e:3b:fa:f3:f4:1b:80:88:e2:92:
71:a1:2d:f2:f2:6b:00:97:0b:db:55:f3:b3:0d:8f:
81:84:fc:b9:ab:ec:57:10:49:c0:6a:53:bf:1b:f6:
83:31:5a:3a:7d:14:c2:3d:af:00:7b:0a:66:d1:6a:
56:29:b8:dd:75:81:da:b9:41:9a:46:bd:1e:dc:8b:
d7:09:c2:a1:04:89:13:af:b7:b2:b5:89:e5:4e:3e:
80:be:dd:0a:f0:b3:2e:d2:43:83:08:5f:70:80:ad:
6b:7c:fd:33:b7:0e:af:45:30:2d:0e:08:1b:4d:41:
4b:44:7e:09:ba:03:8b:53:9a:96:bb:26:79:dd:f1:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
47:3F:20:85:BB:DE:E2:58:75:BD:A7:8F:E4:46:9A:BD:64:84:2C:90
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/2/473F2085BBDEE25875BDA78FE4469ABD64842C90.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:c00::/40
Signature Algorithm: sha256WithRSAEncryption
70:12:e0:b4:3a:fc:c8:ca:23:09:db:74:d3:2c:d5:56:77:2c:
5d:41:e9:98:bd:d1:d6:4c:81:f1:53:23:fd:65:ae:bd:19:5e:
d9:9a:3b:27:00:de:7c:1b:80:f7:c5:e2:11:88:db:96:7c:f0:
eb:ea:eb:c3:f1:fb:4d:46:7b:0f:79:6c:0e:35:1f:ee:ae:b9:
cf:f5:f8:d5:72:57:cd:ec:dc:f9:a8:8d:43:8a:d7:a3:82:be:
d9:14:60:a3:31:be:b1:4b:08:ac:73:99:8d:37:91:74:dd:d3:
f6:f0:b6:76:69:44:7e:c0:bb:a7:c3:55:1d:29:a7:c6:86:07:
d7:30:d3:0f:6f:d4:ba:54:73:e0:e6:af:37:13:c3:a5:f4:ca:
74:5e:5b:20:90:9f:fc:0c:a8:40:7f:4e:31:4c:76:84:8b:ad:
cc:a4:f0:06:2c:ec:48:e4:be:13:eb:96:f5:5c:d0:ab:fa:56:
4f:74:61:49:f8:2f:07:18:c7:ad:af:4b:45:32:c7:6d:31:2e:
33:36:54:bc:da:4d:3c:74:b1:dd:a2:e5:39:79:e6:37:d4:40:
02:02:06:94:9b:85:8a:49:91:9c:a0:2b:c1:44:8b:00:85:81:
fa:ae:33:02:bd:ef:87:9c:b2:2d:b9:04:0d:5f:7a:a1:b9:16:
45:b0:e0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:25 2026 by rpki-client