Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer
File: 238A11AE245357E72FEB39785C7BC03A973A44E1.cer (raw, json)
Hash identifier: R+HEqGQkKX3kuC+uAGVikvyFGt/9CvxJ0iCn1j10oDE=
Subject key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1
Authority key identifier: 0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
Certificate issuer: /CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Certificate serial: 53B495128372338AFAB9CB1038F1FD997E305B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 13:03:01 +0000
Certificate not after: Mon 06 Sep 2027 13:08:01 +0000
Subordinate resources: IP: 2a0a:d685::/32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b4:95:12:83:72:33:8a:fa:b9:cb:10:38:f1:fd:99:7e:30:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e70ae0acd0be83d2d458ca207b1d4ffa3c3e4ea
Validity
Not Before: Sep 7 13:03:01 2026 GMT
Not After : Sep 6 13:08:01 2027 GMT
Subject: CN=238A11AE245357E72FEB39785C7BC03A973A44E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:4b:dd:40:1e:9f:b9:8e:27:8a:bb:85:70:
a7:53:54:5d:b5:ca:b7:60:80:f6:e3:e7:b0:6d:a6:
84:43:49:cf:3f:39:a6:e8:b5:c8:54:cd:f7:b3:91:
19:45:9c:7e:fb:bb:d3:e3:c5:24:03:d9:0f:bb:c3:
39:05:01:58:eb:74:77:41:0f:9f:38:95:3b:24:22:
cd:da:f8:3f:10:38:58:c6:73:df:1b:b8:32:9e:68:
68:bc:b9:8c:b1:2e:94:5b:9b:ee:3c:63:e2:ef:18:
61:44:27:67:62:2d:4f:25:84:97:8b:71:c6:69:03:
3d:3f:83:6f:34:8a:55:d0:df:22:64:fb:78:c9:08:
67:41:d2:13:d0:19:94:55:6a:a8:11:ad:56:e7:8d:
17:d0:ea:93:b8:2d:cc:cb:e7:ba:fc:2e:bb:0a:3e:
92:c1:38:99:3f:e6:5d:38:15:bc:f9:eb:e4:21:63:
a7:dd:30:6e:9f:1f:fb:7f:ec:89:75:b6:61:1f:d6:
b7:39:84:c5:8e:b2:f6:f8:3b:18:fa:82:fb:43:47:
a8:95:b5:86:7b:3a:b8:5c:a2:2c:57:d8:aa:57:e8:
03:69:40:a2:e0:14:36:e4:96:e4:a2:99:f6:4b:c5:
6b:95:63:be:ce:aa:b5:db:5f:5c:37:00:4f:2c:af:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1
X509v3 Authority Key Identifier:
keyid:0E:70:AE:0A:CD:0B:E8:3D:2D:45:8C:A2:07:B1:D4:FF:A3:C3:E4:EA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d685::/32
Signature Algorithm: sha256WithRSAEncryption
04:de:33:f0:0f:95:83:0d:b1:cd:82:99:89:2e:45:31:d1:2e:
6c:17:fe:00:c5:ae:46:d6:82:37:87:82:37:80:b8:2a:7b:9d:
0e:8e:1a:59:74:c0:57:95:c6:cd:87:78:43:b4:03:14:a1:fa:
2a:be:d4:7a:52:9e:b6:7e:fc:d4:55:7c:de:3b:30:5b:e5:e3:
a1:1c:e0:06:bd:aa:72:48:34:ec:49:98:3c:2a:a4:ca:47:c3:
98:fe:21:20:4c:c4:e1:3a:85:c3:21:02:b8:95:2c:f7:60:8d:
74:99:a4:8a:14:3e:02:87:f7:b7:e2:ac:e5:6e:c7:87:82:17:
01:11:6d:20:87:c0:92:fa:96:80:23:71:1c:8f:d5:38:8c:a5:
3b:55:61:4d:5b:fb:b9:ff:38:52:48:a8:10:9c:1c:1b:53:25:
0a:df:35:2c:05:f5:53:58:62:c8:48:0a:0b:74:6e:c9:ae:c1:
a5:26:8d:28:b2:e1:f8:b7:b9:fb:b5:53:1d:42:01:dd:40:de:
6f:ab:e4:1d:08:1e:b8:4b:27:5e:0e:38:7f:a8:3f:2e:3d:2b:
39:57:cb:e9:26:0e:bc:54:fd:de:70:49:a5:fc:14:d1:e0:cf:
e0:1d:31:9c:b7:df:cb:53:69:e4:37:bb:6f:a5:c6:21:85:c9:
a4:55:08:25
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUU7SVEoNyM4r6ucsQOPH9mX4wW1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGU3MGFlMGFjZDBiZTgzZDJkNDU4Y2EyMDdiMWQ0ZmZh
M2MzZTRlYTAeFw0yNjA5MDcxMzAzMDFaFw0yNzA5MDYxMzA4MDFaMDMxMTAvBgNV
BAMTKDIzOEExMUFFMjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0j0vdQB6fuY4niruFcKdTVF21
yrdggPbj57BtpoRDSc8/OabotchUzfezkRlFnH77u9PjxSQD2Q+7wzkFAVjrdHdB
D584lTskIs3a+D8QOFjGc98buDKeaGi8uYyxLpRbm+48Y+LvGGFEJ2diLU8lhJeL
ccZpAz0/g280ilXQ3yJk+3jJCGdB0hPQGZRVaqgRrVbnjRfQ6pO4LczL57r8LrsK
PpLBOJk/5l04Fbz56+QhY6fdMG6fH/t/7Il1tmEf1rc5hMWOsvb4Oxj6gvtDR6iV
tYZ7OrhcoixX2KpX6ANpQKLgFDbkluSimfZLxWuVY77OqrXbX1w3AE8sr6ItAgMB
AAGjggLiMIIC3jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQjihGuJFNX5y/r
OXhce8A6lzpE4TAfBgNVHSMEGDAWgBQOcK4KzQvoPS1FjKIHsdT/o8Pk6jAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iM2YyYWFhZS0yM2NmLTRh
MzctOTQwMy03NDNiMTVlYzJhOGUvMC8wRTcwQUUwQUNEMEJFODNEMkQ0NThDQTIw
N0IxRDRGRkEzQzNFNEVBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRG5DdUNz
MEw2RDB0Ull5aUI3SFVfNlBENU9vLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2ZWZlLzUv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUv
NS8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1QzdCQzAzQTk3M0E0NEUxLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAqCtaFMA0GCSqGSIb3DQEBCwUAA4IBAQAE3jPw
D5WDDbHNgpmJLkUx0S5sF/4Axa5G1oI3h4I3gLgqe50OjhpZdMBXlcbNh3hDtAMU
ofoqvtR6Up62fvzUVXzeOzBb5eOhHOAGvapySDTsSZg8KqTKR8OY/iEgTMThOoXD
IQK4lSz3YI10maSKFD4Ch/e34qzlbseHghcBEW0gh8CS+paAI3Ecj9U4jKU7VWFN
W/u5/zhSSKgQnBwbUyUK3zUsBfVTWGLISAoLdG7JrsGlJo0osuH4t7n7tVMdQgHd
QN5vq+QdCB64SydeDjh/qD8uPSs5V8vpJg68VP3ecEml/BTR4M/gHTGct9/LU2nk
N7tvpcYhhcmkVQgl
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:36 2026 by rpki-client