Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (raw, json)
Hash identifier: fJO2pTRC2/6WMj2fh3hQaFCo2waKIWc2iYEJKeyz4U8=
Subject key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 32A933C63F39875EFBDB3E3379568F387C2381ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 28 Jul 2026 04:14:55 +0000
Certificate not after: Tue 27 Jul 2027 04:19:55 +0000
Subordinate resources: IP: 2a0f:1cc6::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a9:33:c6:3f:39:87:5e:fb:db:3e:33:79:56:8f:38:7c:23:81:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jul 28 04:14:55 2026 GMT
Not After : Jul 27 04:19:55 2027 GMT
Subject: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:6a:67:b5:55:38:7b:9a:20:5f:d6:b6:0c:
e4:a3:06:52:57:d4:c9:96:81:f9:e9:41:a2:a6:bf:
a4:9a:4e:75:c3:05:df:b9:95:c5:0c:86:9a:28:86:
10:78:82:5e:cf:e9:0e:6a:c5:c4:c1:d9:9e:95:b6:
39:a6:5c:52:60:7a:89:99:a0:98:90:cc:b4:fc:2c:
3d:6b:fe:5c:2c:ac:5e:6b:e6:12:5c:ae:7f:b3:62:
4f:9c:94:43:62:31:89:dc:0c:f9:72:c4:a5:e4:b9:
f9:c6:e5:6f:35:22:f4:9d:b9:bc:bc:6b:bc:8c:ae:
4b:05:70:ce:ee:68:28:4b:3b:93:3e:0c:92:e7:8c:
ed:f5:b8:68:2a:ec:f9:b2:3c:c5:44:37:d2:1a:90:
31:b5:5e:a3:68:22:4d:f3:9e:40:3a:46:24:94:7f:
7d:88:fe:e4:2b:e4:82:30:18:59:9b:ad:6e:da:b5:
d0:d5:95:75:87:cb:77:1e:4b:d0:7e:92:6b:c7:9a:
6e:52:29:c1:d2:1b:fb:34:dc:46:43:0d:77:9f:7d:
b7:0f:3d:fd:6b:27:a0:f8:be:7d:e5:cb:89:b6:3c:
64:07:1f:4d:6a:0d:8e:bc:82:75:ea:69:79:a8:20:
48:48:93:94:5d:4d:cb:92:8a:87:99:cc:d2:e3:24:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6::/32
Signature Algorithm: sha256WithRSAEncryption
20:7b:87:6f:36:bc:d6:df:ad:ea:78:27:54:1a:9c:ce:0d:f8:
d9:ad:56:cf:10:24:57:89:a1:60:cc:da:da:39:ae:fe:00:69:
75:02:86:b2:29:8a:28:5b:3a:43:05:9d:c8:c5:1e:a0:d8:2d:
0d:fa:76:50:52:69:bd:ca:8e:29:2a:71:0b:92:c1:32:78:fe:
13:70:36:46:b4:ca:bc:3c:d4:c6:49:04:9b:1b:55:cc:4b:8c:
ad:31:75:58:aa:31:72:3e:76:51:f4:ab:21:3b:27:75:5d:fe:
ee:22:40:3a:88:ba:66:d6:8d:cc:87:cb:e6:86:3e:51:2d:25:
69:0e:9d:b2:03:1b:8d:4a:90:d9:2a:6d:ee:f2:a7:7e:70:e5:
88:eb:e4:d2:c7:f3:43:ca:7c:0f:74:f2:ed:20:ae:97:fb:ce:
cc:e8:c6:ca:12:32:4e:75:71:2f:df:9f:80:e4:d7:02:e8:14:
53:b9:d1:b6:0d:4a:02:56:a0:9d:40:9d:eb:3b:4b:ed:bc:3a:
85:13:02:fa:87:21:b3:54:2c:a8:09:d2:23:49:43:02:40:fd:
78:ea:20:70:77:aa:82:0f:c0:41:52:0d:b3:00:ed:0d:9b:d8:
02:ce:9e:08:08:0c:8a:0b:73:54:16:3d:62:44:e3:70:27:ac:
75:34:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:50 2026 by rpki-client