$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer File: B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.cer (raw, json) Hash identifier: Q7/pKuAvtqNXg7vc3V6t80RpQvtMz6f8O5qDvzowRTE= Subject key identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 Certificate issuer: /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Certificate serial: 3FD0B863BAF4FAD9D55BC7021AC5E479FB3CCC07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 04 Nov 2026 13:27:35 +0000 Certificate not after: Wed 03 Nov 2027 13:32:35 +0000 Subordinate resources: IP: 2a13:c8c4:f400::/40 Validation: OK Signature path: rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 07:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d0:b8:63:ba:f4:fa:d9:d5:5b:c7:02:1a:c5:e4:79:fb:3c:cc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160 Validity Not Before: Nov 4 13:27:35 2026 GMT Not After : Nov 3 13:32:35 2027 GMT Subject: CN=B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:dc:eb:41:b9:f9:1f:ab:98:6f:f4:09:17: 62:5d:ab:50:89:67:a2:ed:7e:96:8d:85:6f:68:b1: d0:ec:c5:9f:51:08:1e:b7:1d:9d:e0:5c:a5:d6:57: 07:0b:08:67:43:7a:76:bd:91:4f:18:3e:3c:83:a9: e5:a9:15:ed:e7:06:69:02:0f:7e:01:ea:66:fe:d1: 7c:d0:1e:c6:b4:cb:e4:76:29:01:a9:53:9a:78:22: 75:73:3a:9e:81:5c:49:8a:a0:99:7e:70:82:93:20: 43:68:9f:b0:db:90:fa:11:c9:7b:c1:b2:df:0c:05: 1d:2a:17:55:05:f7:34:ea:4a:6a:67:93:7f:b9:43: dd:f8:f5:84:74:0c:e3:34:a3:28:df:51:ec:26:78: 77:98:29:b3:0b:bc:01:0f:13:11:60:bf:92:5a:79: 53:d2:c9:d0:d0:96:69:d6:71:e5:f2:f3:c6:d9:93: c0:02:3f:4e:32:95:1e:09:f7:a8:f9:05:76:f3:e1: 07:41:88:9b:ab:bc:44:54:6d:c5:e4:67:a0:fc:6b: a5:07:76:59:4c:12:54:66:9c:bc:84:64:37:d4:a6: 5a:76:70:0c:8f:09:c1:8b:e2:20:0a:f1:7c:9f:82: 52:4d:98:56:3b:05:0c:ae:0e:39:71:ac:31:6d:c4: eb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:A5:A8:AB:B1:8A:AA:8D:BD:47:83:23:45:11:B5:3D:BC:A2:99:BF X509v3 Authority Key Identifier: keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d941fd11-c3d8-4774-b65a-c81a4907a460/1/B0A5A8ABB18AAA8DBD4783234511B53DBCA299BF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:f400::/40 Signature Algorithm: sha256WithRSAEncryption 34:00:d2:dd:5b:8a:f5:39:ab:a6:bc:19:9b:e1:e4:3b:63:8b: 59:3e:23:cc:8c:a2:cf:42:88:c7:71:be:56:8b:46:b1:51:9e: 84:fc:9b:cc:d3:a2:72:88:6f:ff:99:e0:98:86:79:c4:05:d8: 6a:e4:a5:da:c7:0b:9f:29:93:59:fb:27:2b:4e:68:8a:8c:3c: bb:2a:00:e1:d7:6a:da:f4:ba:8a:10:f3:09:cc:e8:79:cc:b7: f0:a1:cb:43:76:e5:cf:96:9f:d6:b9:44:32:62:48:7f:13:1c: 85:1f:31:e5:62:b3:5b:6c:a1:5b:5b:f3:15:4f:74:29:d1:54: 1a:7a:f4:29:42:ee:0b:4f:1f:a5:a5:3f:4c:b5:30:44:23:18: fd:40:3a:56:00:b2:bb:27:c2:5d:4e:ee:1d:a2:66:9b:d8:96: 4c:75:b9:63:b5:97:d0:06:f5:18:4b:3b:03:4d:f0:40:11:ad: 1e:a4:fb:68:8d:41:8f:68:c0:13:47:f6:fd:71:c9:e6:16:ef: c9:a2:e4:ee:dc:d2:85:c0:12:e1:9d:f5:66:66:a5:0c:bc:f2: 23:9e:16:df:77:b8:af:bb:16:d0:2a:4c:29:67:c4:4e:40:e4: a9:d3:76:10:82:8d:d7:a8:89:66:2a:72:a3:47:19:60:a1:18: e4:aa:90:4d -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIUP9C4Y7r0+tnVW8cCGsXkefs8zAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFMURBNTQ2RjA3NTg4OEIyM0REMjFFQTJBQzVGRTYx Qzk0MzE2MDAeFw0yNjExMDQxMzI3MzVaFw0yNzExMDMxMzMyMzVaMDMxMTAvBgNV BAMTKEIwQTVBOEFCQjE4QUFBOERCRDQ3ODMyMzQ1MTFCNTNEQkNBMjk5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwwdzrQbn5H6uYb/QJF2Jdq1CJ Z6LtfpaNhW9osdDsxZ9RCB63HZ3gXKXWVwcLCGdDena9kU8YPjyDqeWpFe3nBmkC D34B6mb+0XzQHsa0y+R2KQGpU5p4InVzOp6BXEmKoJl+cIKTIENon7DbkPoRyXvB st8MBR0qF1UF9zTqSmpnk3+5Q9349YR0DOM0oyjfUewmeHeYKbMLvAEPExFgv5Ja eVPSydDQlmnWceXy88bZk8ACP04ylR4J96j5BXbz4QdBiJurvERUbcXkZ6D8a6UH dllMElRmnLyEZDfUplp2cAyPCcGL4iAK8XyfglJNmFY7BQyuDjlxrDFtxOs3AgMB AAGjggL1MIIC8TAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwpairsYqqjb1H gyNFEbU9vKKZvzAfBgNVHSMEGDAWgBQu4dpUbwdYiLI90h6irF/mHJQxYDAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9yc3luYy5ycGtp LmFzMjA1OTQxLm9yZy9yZXBvL0FTMjA1OTQxLzEvMkVFMURBNTQ2RjA3NTg4OEIy M0REMjFFQTJBQzVGRTYxQzk0MzE2MC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGL BggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVw b3NpdG9yeS82YzQzZDNhNi03ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvNC8y RUUxREE1NDZGMDc1ODg4QjIzREQyMUVBMkFDNUZFNjFDOTQzMTYwLmNlcjCCAT8G CCsGAQUFBwELBIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFh cy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDk0MWZkMTEtYzNkOC00Nzc0LWI2 NWEtYzgxYTQ5MDdhNDYwLzEvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kOTQxZmQxMS1jM2Q4LTQ3NzQt YjY1YS1jODFhNDkwN2E0NjAvMS9CMEE1QThBQkIxOEFBQThEQkQ0NzgzMjM0NTEx QjUzREJDQTI5OUJGLm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMu cnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jE9DANBgkq hkiG9w0BAQsFAAOCAQEANADS3VuK9TmrprwZm+HkO2OLWT4jzIyiz0KIx3G+VotG sVGehPybzNOicohv/5ngmIZ5xAXYauSl2scLnymTWfsnK05oiow8uyoA4ddq2vS6 ihDzCczoecy38KHLQ3blz5af1rlEMmJIfxMchR8x5WKzW2yhW1vzFU90KdFUGnr0 KULuC08fpaU/TLUwRCMY/UA6VgCyuyfCXU7uHaJmm9iWTHW5Y7WX0Ab1GEs7A03w QBGtHqT7aI1Bj2jAE0f2/XHJ5hbvyaLk7tzShcAS4Z31ZmalDLzyI54W33e4r7sW 0CpMKWfETkDkqdN2EIKN16iJZipyo0cZYKEY5KqQTQ== -----END CERTIFICATE-----Generated at Thu Nov 5 18:56:44 2026 by rpki-client