Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
File: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (raw, json)
Hash identifier: WL0jaWoBzFf5Swo+vICX8jdOYH5YsokmofwQodJ5kxw=
Subject key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 4E39B90B611D76124612FE8D49DC7721B8C34898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 21 Sep 2026 13:30:53 +0000
Certificate not after: Mon 20 Sep 2027 13:35:53 +0000
Subordinate resources: IP: 2a0f:1cc6::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:39:b9:0b:61:1d:76:12:46:12:fe:8d:49:dc:77:21:b8:c3:48:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 21 13:30:53 2026 GMT
Not After : Sep 20 13:35:53 2027 GMT
Subject: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:6a:67:b5:55:38:7b:9a:20:5f:d6:b6:0c:
e4:a3:06:52:57:d4:c9:96:81:f9:e9:41:a2:a6:bf:
a4:9a:4e:75:c3:05:df:b9:95:c5:0c:86:9a:28:86:
10:78:82:5e:cf:e9:0e:6a:c5:c4:c1:d9:9e:95:b6:
39:a6:5c:52:60:7a:89:99:a0:98:90:cc:b4:fc:2c:
3d:6b:fe:5c:2c:ac:5e:6b:e6:12:5c:ae:7f:b3:62:
4f:9c:94:43:62:31:89:dc:0c:f9:72:c4:a5:e4:b9:
f9:c6:e5:6f:35:22:f4:9d:b9:bc:bc:6b:bc:8c:ae:
4b:05:70:ce:ee:68:28:4b:3b:93:3e:0c:92:e7:8c:
ed:f5:b8:68:2a:ec:f9:b2:3c:c5:44:37:d2:1a:90:
31:b5:5e:a3:68:22:4d:f3:9e:40:3a:46:24:94:7f:
7d:88:fe:e4:2b:e4:82:30:18:59:9b:ad:6e:da:b5:
d0:d5:95:75:87:cb:77:1e:4b:d0:7e:92:6b:c7:9a:
6e:52:29:c1:d2:1b:fb:34:dc:46:43:0d:77:9f:7d:
b7:0f:3d:fd:6b:27:a0:f8:be:7d:e5:cb:89:b6:3c:
64:07:1f:4d:6a:0d:8e:bc:82:75:ea:69:79:a8:20:
48:48:93:94:5d:4d:cb:92:8a:87:99:cc:d2:e3:24:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc6::/32
Signature Algorithm: sha256WithRSAEncryption
55:bb:41:b6:c4:0f:46:b0:4a:c1:a6:27:c4:0d:d4:6f:9d:75:
ed:a5:7a:b7:d8:30:84:a5:83:8e:3b:d7:08:3d:48:b6:d1:b8:
4b:fc:3c:3c:30:58:0a:fb:b4:19:74:15:25:ec:e7:42:30:86:
6a:35:53:18:65:b6:e2:da:e6:97:c4:9c:96:c5:b3:03:38:59:
b9:0f:d3:53:c2:85:fa:7a:57:e9:f8:1a:a7:57:5c:50:0c:30:
c9:6f:b3:26:e1:11:b2:05:bb:48:73:d2:c1:50:76:c3:2e:0b:
89:74:87:f2:98:a6:45:1b:72:cf:47:1b:6c:e7:04:0b:90:d0:
0d:a7:10:b9:d2:98:3e:5e:0a:1d:24:c9:15:bc:bc:16:8d:db:
22:ba:de:4b:da:a5:ed:8d:5a:cb:a7:9a:5e:5e:61:70:ef:8b:
6c:10:f3:36:b6:29:fd:fd:6d:85:a1:91:88:a8:a1:2f:75:a1:
28:de:ff:bd:38:47:52:22:12:1d:4d:99:d6:27:2d:ae:fe:66:
07:b7:45:df:fe:d4:7c:bf:cd:de:94:cd:63:49:a5:87:34:4f:
8d:21:e7:f0:59:cd:1e:a1:58:67:27:0c:a8:56:89:08:06:32:
64:48:cd:bd:d9:04:82:b0:26:f5:c4:9d:36:56:1c:79:23:a5:
47:78:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:47:37 2026 by rpki-client