Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer
File: 14FFBC625D99CA228697B9FF75B2265AB32A81DF.cer (raw, json)
Hash identifier: t8m+GVm5KBL4s0C+gqYGKbQ+nFGT+lTw0+urN/zNeTU=
Subject key identifier: 14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 41D7FEA6356845D9B81DA5BC3910FB726192D68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 17 Sep 2026 05:33:33 +0000
Certificate not after: Thu 16 Sep 2027 05:38:33 +0000
Subordinate resources: IP: 152.234.128.0/19
IP: 177.177.64.0/19
IP: 177.201.192.0/19
IP: 179.69.64.0/18
IP: 179.253.32.0/19
IP: 179.254.192.0/19
IP: 187.5.0.0/20
IP: 187.14.128.0/18
IP: 187.15.192.0/18
IP: 187.55.0.0/18
IP: 189.12.128.0/18
IP: 189.30.64.0/18
IP: 189.31.0.0/19
IP: 189.73.32.0/20
IP: 191.0.80.0/20
IP: 191.45.32.0/20
IP: 200.138.16.0 -- 200.138.47.255
IP: 200.141.48.0/20
IP: 200.141.176.0/20
IP: 200.149.176.0/20
IP: 200.180.160.0/19
IP: 201.24.224.0/20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d7:fe:a6:35:68:45:d9:b8:1d:a5:bc:39:10:fb:72:61:92:d6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 17 05:33:33 2026 GMT
Not After : Sep 16 05:38:33 2027 GMT
Subject: CN=14FFBC625D99CA228697B9FF75B2265AB32A81DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:b6:e0:0a:bc:57:c6:a2:c0:2b:21:6c:dc:
76:55:13:16:66:5f:20:c2:03:98:30:e0:59:ba:34:
f5:fc:2b:cd:69:18:9d:d2:66:21:60:8b:b1:a6:9a:
87:ff:bd:77:b5:0e:1c:a7:9f:ed:3a:c9:48:58:ea:
67:b6:65:c9:30:ee:53:8c:b5:af:8e:6b:d5:e6:2b:
6d:22:f2:64:6c:eb:02:64:ed:3b:10:22:58:60:3c:
7c:4c:44:89:55:ac:d5:34:4e:55:d5:07:12:35:cb:
e0:bf:32:5b:ef:e0:bc:9e:d8:23:33:d9:c2:4d:f6:
c4:c2:32:a2:86:0d:6a:ce:d0:3b:fd:01:56:b4:6d:
67:07:ef:94:17:30:2b:8b:e0:73:81:2f:47:0e:0d:
e3:62:c9:6e:c5:60:75:9d:67:64:df:0a:43:b4:7f:
27:9c:bb:d7:81:bb:b8:49:29:d2:d0:53:0a:40:12:
97:f8:44:65:2a:d8:0b:ca:48:2c:52:8c:6f:65:ea:
22:a3:26:a8:04:1f:17:3e:64:4f:f4:8a:aa:de:e1:
c1:28:19:a6:31:41:87:70:f8:e5:f3:cd:42:7a:65:
04:11:e9:19:c9:6e:ec:99:e9:b4:54:fe:14:6c:32:
c9:cd:3d:25:16:6a:a4:67:02:83:30:a2:c1:f6:99:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
14:FF:BC:62:5D:99:CA:22:86:97:B9:FF:75:B2:26:5A:B3:2A:81:DF
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a7c85dea-0ca0-4c6a-ba47-edad4b945754/0/14FFBC625D99CA228697B9FF75B2265AB32A81DF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.128.0/19
177.177.64.0/19
177.201.192.0/19
179.69.64.0/18
179.253.32.0/19
179.254.192.0/19
187.5.0.0/20
187.14.128.0/18
187.15.192.0/18
187.55.0.0/18
189.12.128.0/18
189.30.64.0/18
189.31.0.0/19
189.73.32.0/20
191.0.80.0/20
191.45.32.0/20
200.138.16.0-200.138.47.255
200.141.48.0/20
200.141.176.0/20
200.149.176.0/20
200.180.160.0/19
201.24.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:aa:2f:c9:1e:f4:10:8e:d0:ba:94:93:4c:05:b5:84:9f:72:
b2:29:2c:43:3b:9c:73:42:3f:8b:29:29:8f:ff:27:c8:18:01:
1b:52:be:23:d1:0c:2f:69:df:47:1d:fc:59:9f:27:7f:a1:8f:
4f:f7:ba:94:e8:ad:21:18:86:c9:82:07:7b:19:3b:10:dd:2f:
a9:41:c9:19:63:23:d6:93:00:2c:1d:36:7a:76:8d:d3:7f:4a:
ee:e4:32:fd:fd:5c:df:98:02:f5:23:7c:98:9d:08:e9:c5:5d:
94:ff:bb:0f:02:f6:d7:00:58:bf:b5:5f:de:8c:04:e1:11:e4:
d2:43:df:8e:e7:0d:6d:9b:b5:cb:5d:98:6f:59:a6:c4:17:38:
a5:58:02:4f:90:d2:fc:60:30:5a:af:fb:8d:6e:34:3c:59:4b:
c9:7f:81:28:a9:a8:22:d7:0c:c1:d2:78:53:a0:c3:1c:d2:d8:
0c:49:33:a2:ee:a1:de:7c:04:90:a5:d9:7a:26:87:9a:3f:e9:
02:e1:28:68:5c:ad:d0:d9:41:8b:2e:de:f8:62:2f:ee:af:5d:
2e:08:32:b7:37:da:73:16:72:b8:b0:4c:08:32:0e:6b:d7:bd:
7d:ed:55:db:5f:ad:34:22:f3:14:dd:0e:06:e0:81:b3:93:23:
f2:99:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:55:22 2026 by rpki-client