Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
File: 808DAC70271F8080A22C1AEE42EFAF98E1776954.cer (raw, json)
Hash identifier: bqAUIU3UtmRcrt2qJj1h99VAmzDF5ulFImn3qaxBk+A=
Subject key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 128E3EBBA87D90D6AE0F53356F75ABCB608C2C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
caRepository: rsync://rpki.axivora.net/repo/Axivora-Net/3/
Notify URL: https://rpki.axivora.net/rrdp/notification.xml
Certificate not before: Mon 14 Sep 2026 13:18:09 +0000
Certificate not after: Mon 13 Sep 2027 13:23:09 +0000
Subordinate resources: IP: 2a0f:1cc5:e00::/40
IP: 2a0f:1cc5:ffff::/48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:8e:3e:bb:a8:7d:90:d6:ae:0f:53:35:6f:75:ab:cb:60:8c:2c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Sep 14 13:18:09 2026 GMT
Not After : Sep 13 13:23:09 2027 GMT
Subject: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:55:e0:23:ac:e8:24:78:90:9e:bc:0c:0f:
96:97:a8:73:6c:c8:58:4f:d0:c0:ea:18:50:cb:28:
1b:85:e7:38:f3:d7:ba:d7:a4:83:51:ee:1e:49:05:
73:22:03:c2:f4:1c:de:e8:08:d4:b3:f0:e9:9a:07:
3f:20:14:44:b5:8a:c5:25:42:ea:33:85:1b:fd:73:
18:43:9a:44:4f:3e:1c:3e:97:35:b6:05:f1:11:b1:
0e:da:e8:56:a3:14:8c:96:0f:db:4d:c0:06:a9:92:
72:b4:04:a6:cc:d7:15:a0:91:45:39:51:87:b4:55:
2b:05:c8:a1:c0:3b:b6:5f:9d:bf:4d:56:e2:fc:db:
85:8e:98:73:76:5c:04:36:5c:89:ac:12:39:9a:78:
c8:a5:bb:2a:c5:11:04:b9:22:85:02:51:e8:3f:d9:
94:35:09:92:a0:e7:d6:13:11:cd:c6:8b:df:25:f8:
bb:86:8f:f3:8d:f8:29:28:ff:8c:61:6c:d9:83:29:
0c:87:47:6f:3a:9a:d2:51:bd:01:17:cd:38:1f:2a:
28:76:31:ac:8a:66:b0:b7:05:8c:cf:b0:68:47:2a:
c9:4d:1a:69:31:fd:78:b6:53:ee:b2:ac:02:90:eb:
56:8b:8b:90:81:57:04:ca:40:6b:cf:5f:10:2c:85:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/
RPKI Manifest - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
RPKI Notify - URI:https://rpki.axivora.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:e00::/40
2a0f:1cc5:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
56:6f:7b:cc:a3:f3:8c:f9:75:0b:55:4d:63:db:96:ee:32:35:
c0:8a:1b:16:ca:9a:1c:89:eb:82:52:d3:d8:26:1f:4b:45:6b:
9b:6a:07:34:bf:1e:3f:68:b2:cc:d0:07:b8:00:d8:7f:37:03:
b3:0b:7d:de:3b:e8:ae:13:86:ff:32:1f:f5:de:7b:7b:4a:d0:
ce:a2:5b:4c:e9:e3:42:bc:d9:dc:63:b6:c5:cd:24:29:a0:0b:
c9:5f:be:96:e4:da:61:05:e1:12:0a:59:5f:64:63:02:ed:f2:
25:77:de:8b:fa:b7:18:4e:59:ca:88:ea:a3:bd:97:0e:29:ef:
91:4b:5d:cc:84:f2:08:5b:ee:be:4f:96:7a:4d:89:8b:c9:eb:
f6:5b:67:69:fb:43:bc:dd:2b:de:15:8e:73:29:a9:4a:cb:2c:
99:e1:6d:d7:8c:ee:56:b8:11:27:26:44:d2:3e:1d:92:a3:4f:
28:19:bc:4b:c3:0d:ad:0e:53:f8:9e:0d:45:23:87:b7:a0:28:
2f:a5:b5:63:07:ad:4f:ba:33:15:d2:67:e1:5f:bc:c0:c1:c6:
16:7a:a8:ad:7c:23:40:91:86:fc:53:19:58:8f:32:50:66:c0:
91:f1:28:d1:ad:26:60:e8:d9:27:30:96:dc:ea:12:e7:37:5b:
1b:3b:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:44:34 2026 by rpki-client