Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
File: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (raw, json)
Hash identifier: Fga1avETSQAOmN53EHnB7AxOugiIYodhbdg5Ia7vsU4=
Subject key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 35ABB165F494548C4BFA132FE2D9A21DDB309CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/
Notify URL: https://rpki.as207960.net/rrdp/notification.xml
Certificate not before: Tue 10 Feb 2026 10:56:14 +0000
Certificate not after: Tue 09 Feb 2027 11:01:14 +0000
Subordinate resources: IP: 2a11:f2c0:ffa0::/44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ab:b1:65:f4:94:54:8c:4b:fa:13:2f:e2:d9:a2:1d:db:30:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Feb 10 10:56:14 2026 GMT
Not After : Feb 9 11:01:14 2027 GMT
Subject: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:01:e4:45:ee:61:34:d3:97:ae:e9:01:7c:
69:0e:7b:f0:21:44:eb:1c:0c:92:66:0e:6d:5c:3b:
05:2b:2a:58:73:7a:fa:a9:1d:9a:a6:bf:56:f4:58:
cd:a7:07:19:50:3e:28:26:73:b8:52:3b:46:45:ca:
01:8e:cb:5a:89:9f:c4:69:11:85:48:3a:3b:8f:97:
4a:9b:25:45:40:01:a3:ce:f9:ab:55:83:55:21:37:
8a:4c:e4:1a:4e:92:e4:d6:c9:cf:cb:b8:15:a7:f8:
08:17:77:31:7d:0b:84:cb:11:03:80:55:e3:09:f0:
63:40:28:ac:1e:28:21:64:aa:04:f2:9d:9d:da:6a:
a2:d8:a9:4c:50:71:66:23:7a:86:9c:be:7b:a1:9c:
15:07:ee:fa:e0:7a:94:b1:24:4d:e6:e1:7a:5a:08:
9c:b1:a9:20:7c:7b:9d:3d:3b:61:63:12:df:c0:12:
5e:04:04:51:13:1d:58:3d:cd:e4:8c:68:50:0e:8e:
b9:d3:e4:be:f4:b4:f6:bc:9d:8b:2b:b9:ae:b2:4d:
db:d7:a9:75:11:e5:18:ba:f0:2f:4a:7a:4f:0c:18:
d5:f1:3f:6f:66:b6:fe:75:d9:ba:ca:64:e5:3b:32:
f0:52:87:66:3e:74:14:79:ae:a4:fd:e8:89:b2:3c:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/
RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffa0::/44
Signature Algorithm: sha256WithRSAEncryption
0d:cd:6d:ec:c3:99:c6:01:44:b5:12:cb:49:ab:14:62:aa:3e:
a7:e0:d1:a1:45:2f:44:8e:10:69:33:6f:70:9e:d9:6b:06:eb:
5d:7e:38:88:f3:33:51:6d:fc:35:ea:92:fb:eb:b7:cf:74:09:
a3:bd:d4:85:0c:55:b5:b9:e8:d5:4b:c3:d6:e5:0b:28:fb:f5:
1c:c6:97:8b:f2:4b:a6:d5:23:d5:f2:70:66:87:4b:fb:82:31:
a4:12:da:d7:33:fe:c0:20:39:90:8f:d4:e0:64:d1:1d:30:07:
28:62:c9:97:a0:cf:3c:dc:32:ce:9b:e7:30:7d:de:3d:c9:a0:
55:ae:f8:52:ad:c3:8a:38:67:30:9c:0a:82:d8:75:35:dd:e8:
99:87:48:2e:b4:1a:50:76:e5:05:7f:59:0d:7b:63:d8:3d:84:
07:36:e4:dd:61:6a:8d:2a:9a:3d:a5:7f:0b:66:ea:b2:27:bb:
1e:23:c4:b3:63:c4:66:ad:9c:ad:77:e4:1e:a8:7d:30:9b:de:
97:80:5a:2c:81:e4:da:d0:6e:41:7e:bc:a0:0e:bd:73:7a:36:
2a:83:32:8c:d3:b2:fc:ee:8b:9f:03:e1:55:19:35:6f:31:f7:
2c:b3:f2:64:cd:7d:81:54:4a:54:b6:e4:7b:10:aa:bc:e8:a7:
ca:c0:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:36 2026 by rpki-client