$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer File: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (raw, json) Hash identifier: rD43mzOj6hk9wZ+wkrs+0gGyJTyKVoY8YSNdSNkT6ww= Subject key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Authority key identifier: 23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 Certificate issuer: /CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Certificate serial: 61E1A3315CD720E4978C5CC649F74D63D45D901F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 08 Sep 2026 13:37:14 +0000 Certificate not after: Tue 07 Sep 2027 13:42:14 +0000 Subordinate resources: IP: 2a0a:d685:1000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 15:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e1:a3:31:5c:d7:20:e4:97:8c:5c:c6:49:f7:4d:63:d4:5d:90:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=238A11AE245357E72FEB39785C7BC03A973A44E1 Validity Not Before: Sep 8 13:37:14 2026 GMT Not After : Sep 7 13:42:14 2027 GMT Subject: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:4e:81:4c:54:6b:d6:a8:c1:93:a7:fa:ad: ec:00:73:a6:4a:f6:12:5e:19:52:94:44:c0:20:ad: ea:54:8e:99:dd:04:91:00:24:e0:1b:f6:fd:b3:8f: 15:ea:e8:09:4e:c6:f9:12:04:bc:97:5e:40:52:b1: c3:7c:34:69:2e:7b:28:9d:75:15:c7:6c:cf:9f:a6: d9:23:cf:fa:fb:5f:9f:0f:83:0d:a7:6b:43:e9:da: e9:ed:f5:b5:07:64:59:ce:69:03:9f:a5:6d:ab:74: 19:77:05:7d:25:56:e5:d3:2d:c4:70:61:23:fc:65: 1d:29:2b:eb:99:d2:0f:72:16:cc:ca:ac:81:16:72: 43:08:cf:04:c2:24:08:df:59:4f:94:e9:29:5e:63: 0e:c8:63:27:b6:9f:dc:b5:88:c7:07:0f:b3:24:c1: c5:5e:ba:92:c9:b1:df:fb:c6:6b:b6:a0:60:77:ea: 5a:41:21:3c:11:c6:94:73:11:9d:9c:96:f4:6d:73: 42:ba:da:7e:9b:4e:f1:94:70:2d:54:c5:62:52:84: cc:b5:19:60:cc:68:eb:ac:a0:c9:71:21:5f:9f:5d: 1f:9d:80:20:0a:03:0c:2b:ff:90:07:b5:ec:01:62: bb:d5:4e:80:9a:c7:2e:3f:90:f0:ec:ed:fd:78:3d: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Authority Key Identifier: keyid:23:8A:11:AE:24:53:57:E7:2F:EB:39:78:5C:7B:C0:3A:97:3A:44:E1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/5/238A11AE245357E72FEB39785C7BC03A973A44E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/238A11AE245357E72FEB39785C7BC03A973A44E1.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1000::/36 Signature Algorithm: sha256WithRSAEncryption 0c:1f:57:96:01:0c:ff:dc:e2:62:fc:c4:b8:bb:52:97:36:6b: b9:47:22:6e:63:85:dd:ff:af:f5:0d:0f:81:34:b4:31:03:cf: 22:b2:35:19:cd:61:b9:c3:b1:86:fe:c0:98:3d:67:35:ed:fc: 4d:26:5b:f4:f0:98:31:18:fd:e0:f1:1b:16:d6:12:11:55:ca: d0:43:1b:0b:a4:e8:36:b0:c7:cc:7a:a4:54:ed:ab:ec:ec:ff: f9:4d:ba:95:1e:c9:dd:ef:e1:ff:33:9f:5e:d2:7a:82:cd:24: 29:d7:61:70:1d:35:65:a5:9a:5e:1f:63:78:43:61:cc:7d:cd: 38:bf:23:81:6a:a0:39:af:e4:53:a6:2c:27:d7:ef:dd:b9:b0: 5f:1a:39:b6:c6:9d:0d:6b:8d:e4:a1:3b:0e:dc:b8:88:61:80: 1e:80:f8:53:80:de:b3:41:3f:65:c0:31:19:96:27:e3:7d:b3: 81:46:77:33:1a:fb:8c:42:fb:73:f8:1c:a1:1d:76:d0:ac:2c: a8:1b:9f:9e:d4:31:24:c6:ce:a2:6f:a3:ec:88:5c:30:ae:12: ae:57:82:5d:ac:9d:0b:5d:cd:cd:03:37:ed:93:b0:a9:68:29: d7:f9:04:69:dd:2f:85:08:11:9d:50:de:e8:f0:15:fc:cc:64: 2a:6a:4c:f9 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUYeGjMVzXIOSXjFzGSfdNY9RdkB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM4QTExQUUyNDUzNTdFNzJGRUIzOTc4NUM3QkMwM0E5 NzNBNDRFMTAeFw0yNjA5MDgxMzM3MTRaFw0yNzA5MDcxMzQyMTRaMDMxMTAvBgNV BAMTKDMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HU6BTFRr1qjBk6f6rewAc6ZK 9hJeGVKURMAgrepUjpndBJEAJOAb9v2zjxXq6AlOxvkSBLyXXkBSscN8NGkueyid dRXHbM+fptkjz/r7X58Pgw2na0Pp2unt9bUHZFnOaQOfpW2rdBl3BX0lVuXTLcRw YSP8ZR0pK+uZ0g9yFszKrIEWckMIzwTCJAjfWU+U6SleYw7IYye2n9y1iMcHD7Mk wcVeupLJsd/7xmu2oGB36lpBITwRxpRzEZ2clvRtc0K62n6bTvGUcC1UxWJShMy1 GWDMaOusoMlxIV+fXR+dgCAKAwwr/5AHtewBYrvVToCaxy4/kPDs7f14PaY9AgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxXsCOVAvLyHD+ s4gyJ04Eji4fgDAfBgNVHSMEGDAWgBQjihGuJFNX5y/rOXhce8A6lzpE4TAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvNS8yMzhBMTFBRTI0NTM1N0U3MkZFQjM5Nzg1 QzdCQzAzQTk3M0E0NEUxLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzIzOEExMUFF MjQ1MzU3RTcyRkVCMzk3ODVDN0JDMDNBOTczQTQ0RTEuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRi YmE1ZTU3YmIvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJi NGJiYTVlNTdiYi8yLzMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUy RTFGODAubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoK1oUQMA0GCSqGSIb3DQEB CwUAA4IBAQAMH1eWAQz/3OJi/MS4u1KXNmu5RyJuY4Xd/6/1DQ+BNLQxA88isjUZ zWG5w7GG/sCYPWc17fxNJlv08JgxGP3g8RsW1hIRVcrQQxsLpOg2sMfMeqRU7avs 7P/5TbqVHsnd7+H/M59e0nqCzSQp12FwHTVlpZpeH2N4Q2HMfc04vyOBaqA5r+RT piwn1+/dubBfGjm2xp0Na43koTsO3LiIYYAegPhTgN6zQT9lwDEZlifjfbOBRncz GvuMQvtz+ByhHXbQrCyoG5+e1DEkxs6ib6PsiFwwrhKuV4JdrJ0LXc3NAzftk7Cp aCnX+QRp3S+FCBGdUN7o8BX8zGQqakz5 -----END CERTIFICATE-----Generated at Wed Sep 23 04:34:56 2026 by rpki-client