$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer File: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (raw, json) Hash identifier: VmW5doMIj7/eESnk7x1Plcpb42wjrE2rXHg8mFlwx4c= Subject key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 2D9202FC45B7D769BB5FF84720AC76444CE63E72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 12 Jun 2026 06:55:34 +0000 Certificate not after: Fri 11 Jun 2027 07:00:34 +0000 Subordinate resources: IP: 2a0a:d685:1000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:92:02:fc:45:b7:d7:69:bb:5f:f8:47:20:ac:76:44:4c:e6:3e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jun 12 06:55:34 2026 GMT Not After : Jun 11 07:00:34 2027 GMT Subject: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:4e:81:4c:54:6b:d6:a8:c1:93:a7:fa:ad: ec:00:73:a6:4a:f6:12:5e:19:52:94:44:c0:20:ad: ea:54:8e:99:dd:04:91:00:24:e0:1b:f6:fd:b3:8f: 15:ea:e8:09:4e:c6:f9:12:04:bc:97:5e:40:52:b1: c3:7c:34:69:2e:7b:28:9d:75:15:c7:6c:cf:9f:a6: d9:23:cf:fa:fb:5f:9f:0f:83:0d:a7:6b:43:e9:da: e9:ed:f5:b5:07:64:59:ce:69:03:9f:a5:6d:ab:74: 19:77:05:7d:25:56:e5:d3:2d:c4:70:61:23:fc:65: 1d:29:2b:eb:99:d2:0f:72:16:cc:ca:ac:81:16:72: 43:08:cf:04:c2:24:08:df:59:4f:94:e9:29:5e:63: 0e:c8:63:27:b6:9f:dc:b5:88:c7:07:0f:b3:24:c1: c5:5e:ba:92:c9:b1:df:fb:c6:6b:b6:a0:60:77:ea: 5a:41:21:3c:11:c6:94:73:11:9d:9c:96:f4:6d:73: 42:ba:da:7e:9b:4e:f1:94:70:2d:54:c5:62:52:84: cc:b5:19:60:cc:68:eb:ac:a0:c9:71:21:5f:9f:5d: 1f:9d:80:20:0a:03:0c:2b:ff:90:07:b5:ec:01:62: bb:d5:4e:80:9a:c7:2e:3f:90:f0:ec:ed:fd:78:3d: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1000::/36 Signature Algorithm: sha256WithRSAEncryption 6f:fd:bf:f2:90:78:c0:66:a4:d5:b4:2e:4e:b2:ee:e0:1f:57: c8:bd:6e:f9:3e:ea:35:e2:b3:3b:38:8f:38:95:58:14:40:ea: 33:7e:b5:a6:28:70:3a:07:93:98:29:30:9f:15:8b:d1:7b:1c: 83:5a:6b:29:42:b3:f9:c4:02:5f:e0:ef:d6:c3:95:89:79:b7: a0:eb:3a:8b:7e:15:89:5e:23:a2:12:df:35:7f:65:a1:fe:81: f6:ee:f0:23:da:0a:ce:08:f7:fc:39:16:e5:df:97:90:27:16: 39:ab:e5:19:7e:bb:48:54:f8:04:75:d8:7d:6e:ed:9c:ac:a9: b7:68:3f:94:d4:05:65:87:21:d0:28:72:39:55:8e:a9:11:a6: 55:a2:8a:ab:09:4a:13:30:f4:d2:33:3d:15:03:1d:1a:eb:ac: 7b:5e:30:8a:98:a8:df:a8:22:fc:36:74:62:33:08:50:f9:4e: 8e:0e:23:a9:2d:57:cf:da:44:93:af:01:a5:11:d7:8c:5b:0c: 17:59:e8:1d:08:d9:2d:55:83:5b:0c:a9:e5:a1:f8:11:01:84: fb:27:f7:23:41:9f:bc:72:c2:a9:f7:cd:aa:f1:7b:a2:e9:e5: 83:4f:df:78:9c:3b:c7:1b:63:ec:ac:9d:d9:84:77:7e:dc:5d: d8:6f:15:f9 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIULZIC/EW312m7X/hHIKx2REzmPnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA2MTIwNjU1MzRaFw0yNzA2MTEwNzAwMzRaMDMxMTAvBgNV BAMTKDMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HU6BTFRr1qjBk6f6rewAc6ZK 9hJeGVKURMAgrepUjpndBJEAJOAb9v2zjxXq6AlOxvkSBLyXXkBSscN8NGkueyid dRXHbM+fptkjz/r7X58Pgw2na0Pp2unt9bUHZFnOaQOfpW2rdBl3BX0lVuXTLcRw YSP8ZR0pK+uZ0g9yFszKrIEWckMIzwTCJAjfWU+U6SleYw7IYye2n9y1iMcHD7Mk wcVeupLJsd/7xmu2oGB36lpBITwRxpRzEZ2clvRtc0K62n6bTvGUcC1UxWJShMy1 GWDMaOusoMlxIV+fXR+dgCAKAwwr/5AHtewBYrvVToCaxy4/kPDs7f14PaY9AgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxXsCOVAvLyHD+ s4gyJ04Eji4fgDAfBgNVHSMEGDAWgBSAg4Zz7Skdwaz64Dfoj5x6eLcSfjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRi YmE1ZTU3YmIvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJi NGJiYTVlNTdiYi8yLzMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUy RTFGODAubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoK1oUQMA0GCSqGSIb3DQEB CwUAA4IBAQBv/b/ykHjAZqTVtC5Osu7gH1fIvW75Puo14rM7OI84lVgUQOozfrWm KHA6B5OYKTCfFYvRexyDWmspQrP5xAJf4O/Ww5WJebeg6zqLfhWJXiOiEt81f2Wh /oH27vAj2grOCPf8ORbl35eQJxY5q+UZfrtIVPgEddh9bu2crKm3aD+U1AVlhyHQ KHI5VY6pEaZVooqrCUoTMPTSMz0VAx0a66x7XjCKmKjfqCL8NnRiMwhQ+U6ODiOp LVfP2kSTrwGlEdeMWwwXWegdCNktVYNbDKnlofgRAYT7J/cjQZ+8csKp982q8Xui 6eWDT994nDvHG2PsrJ3ZhHd+3F3YbxX5 -----END CERTIFICATE-----Generated at Sat Jun 13 09:06:55 2026 by rpki-client