Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
File: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (raw, json)
Hash identifier: gvnFCUbdYroNDorseBYYitaCENDofN90Hv5Rynh5CGg=
Subject key identifier: 62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1188AED8B6680FB8CCE2066187CAEDB76D600E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 10 Feb 2026 18:59:49 +0000
Certificate not after: Tue 09 Feb 2027 19:04:49 +0000
Subordinate resources: IP: 2a11:f2c0:ffcb::/48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:88:ae:d8:b6:68:0f:b8:cc:e2:06:61:87:ca:ed:b7:6d:60:0e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Feb 10 18:59:49 2026 GMT
Not After : Feb 9 19:04:49 2027 GMT
Subject: CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:84:31:0a:4e:8b:73:e7:d8:a0:d6:7f:39:
4a:3a:4f:0e:03:53:16:49:05:79:6b:b4:5c:36:79:
f5:5c:93:b1:44:7a:a5:18:93:c6:77:9c:7f:39:44:
df:ce:43:d5:c2:9e:e6:6b:cf:bf:d8:70:8d:4d:d8:
4f:f1:f1:03:b1:82:b9:1a:83:92:3d:20:2f:45:f7:
89:ff:73:bc:b8:6d:26:b4:c4:0b:9b:69:8b:d3:d5:
1c:80:48:15:e6:8f:ae:40:3d:e7:c0:61:68:23:c2:
bf:e8:25:00:50:da:29:71:c9:77:dd:db:7d:35:39:
b8:cf:58:8c:ba:3b:b2:8d:de:2a:77:79:fe:11:6c:
3a:61:59:ef:79:42:d1:16:e4:83:2a:4a:8e:4f:2f:
23:33:24:84:9f:70:7f:96:d4:37:4c:c9:9d:6e:98:
e4:58:8e:6b:2a:3f:a6:42:5a:1b:96:49:90:04:7e:
14:1f:a0:f7:b8:7e:f5:d1:bf:45:70:bd:89:6a:21:
21:84:d3:6c:b9:0d:b9:0f:06:28:3b:3a:5e:2e:ea:
38:b6:b3:b0:68:fa:70:b4:75:a0:98:33:55:3e:64:
44:a3:6d:d7:6b:6d:89:da:2a:19:7d:50:fa:56:6c:
45:16:05:ca:b8:e8:7f:31:24:6b:6c:86:df:28:a7:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffcb::/48
Signature Algorithm: sha256WithRSAEncryption
96:84:22:93:aa:67:b8:80:b8:ce:eb:af:81:6b:03:b4:52:da:
ff:fe:da:a9:d5:1d:5e:aa:dc:61:eb:14:f5:74:06:15:0e:3f:
63:fb:ee:72:e6:84:dd:ba:af:29:57:4e:73:9a:df:ea:bb:4f:
3c:83:cd:14:ab:62:67:82:12:8e:cc:38:a8:32:88:de:df:61:
37:11:20:5c:07:b8:af:ef:a8:83:6c:41:09:1b:10:1c:10:a8:
25:4b:d6:38:1c:d2:67:43:59:b3:eb:d1:57:0e:4e:b2:3f:a3:
24:54:eb:8b:a3:54:3a:00:15:ce:ae:68:36:9e:d5:63:b6:40:
89:8c:01:a8:f8:1e:7e:7c:51:06:c3:37:6e:16:6c:68:b5:38:
04:91:92:cf:d7:48:5c:89:23:38:0f:12:13:02:f6:ab:69:7b:
ad:63:50:19:42:ff:bf:55:51:a2:ed:51:e6:68:9f:e5:33:13:
7f:a9:8f:2f:15:49:fd:08:c2:ce:ce:af:82:34:39:d2:f3:0a:
dd:82:fe:de:a1:20:95:0d:91:8f:b7:26:7c:0f:b8:44:90:2a:
d6:68:1a:8a:eb:c4:1e:08:fb:92:34:32:5c:ed:ba:fa:50:14:
8a:ae:a4:b5:c4:7c:2f:45:8b:8a:6c:db:ee:bc:fd:f9:b9:43:
7c:68:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:23 2026 by rpki-client