Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer
File: 020F7ED217FC36532E6B045CFBCCDA68A6604620.cer (raw, json)
Hash identifier: 9dBjxLC8AV69h9214id7vq/66HQGp5xswgaLYBl2fPU=
Subject key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 78D5A8602E836744865DA5811D8419CA3C88E94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 05 Sep 2025 02:59:32 +0000
Certificate not after: Fri 04 Sep 2026 03:04:32 +0000
Subordinate resources: IP: 2a14:7581:6000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d5:a8:60:2e:83:67:44:86:5d:a5:81:1d:84:19:ca:3c:88:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 5 02:59:32 2025 GMT
Not After : Sep 4 03:04:32 2026 GMT
Subject: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:6f:f2:83:18:db:34:de:ca:53:c3:22:70:
9f:64:c3:f5:9d:9c:ae:a9:73:25:b2:9f:8a:db:a4:
dd:c1:28:07:ca:c5:9d:55:52:ee:a5:6c:44:ef:28:
cc:20:1c:c4:34:1f:6e:1b:3c:9b:43:45:6b:5f:b1:
fe:45:f4:bd:0c:eb:76:30:63:d5:d6:01:6f:df:92:
ca:d9:5b:b0:ff:d8:ef:d5:db:75:82:54:1b:84:da:
11:4e:aa:cd:dd:b6:50:41:ec:ce:c2:a2:17:8b:42:
23:39:57:ac:84:8e:33:f3:96:15:f1:3f:7b:f3:81:
d3:0a:1e:fe:ed:59:e1:64:1a:e2:1a:d9:3c:95:37:
24:b8:5d:a7:cb:ba:65:5c:5a:c5:fc:47:d2:a9:5c:
04:a2:e0:3b:77:f5:a2:7c:d9:70:e6:3b:89:0d:96:
9b:4c:dc:4d:c9:44:71:3a:bf:25:22:47:0a:9d:aa:
80:7c:e6:9d:7b:54:6e:5d:8f:04:76:27:44:50:10:
cd:db:b0:2c:9f:87:d3:d9:e5:f4:4a:d8:7b:cc:62:
43:fd:56:ef:d0:77:8c:f9:dc:c2:e6:37:52:47:4d:
cb:de:3b:7e:ab:36:29:34:dc:c4:bd:5c:35:33:a6:
19:ff:c5:ce:8f:24:8a:06:80:27:44:c6:31:45:63:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:6000::/36
Signature Algorithm: sha256WithRSAEncryption
19:10:0a:41:58:53:ae:78:28:98:46:99:0a:b8:6b:6a:e5:d5:
99:37:bc:6a:5d:12:73:c7:69:94:2a:a5:de:48:c4:4a:e5:3e:
bd:73:28:32:89:24:74:43:d2:08:5e:e9:16:dc:b9:ad:09:b9:
a3:79:97:e2:12:c3:c5:0f:8b:dd:7f:7c:fc:c8:0e:b2:73:6a:
e5:35:c8:60:e7:0e:b7:a5:0c:f4:b5:dd:37:74:d1:98:f1:6f:
c0:62:32:92:36:31:b0:b8:ae:4c:00:9d:a4:89:0f:8a:2b:e9:
cf:dd:c6:85:f0:36:c8:ae:cf:41:23:33:9c:2c:3e:af:d4:c3:
5e:e2:f4:40:a9:c4:31:6b:dd:23:54:88:b0:15:10:66:f6:de:
b8:6c:bb:b3:53:cd:1f:80:0c:4e:e7:26:5f:d0:b7:04:27:d5:
2d:12:4b:bb:68:b1:5e:16:11:a8:61:de:a1:75:5f:f0:21:81:
59:11:b7:b5:bf:97:1f:84:be:36:56:1e:99:c6:ca:a8:b4:33:
9b:fc:03:1f:4f:83:e2:cf:af:68:b0:a2:9a:e4:70:84:48:f4:
31:b7:8c:d9:76:f8:72:f9:5c:3d:3b:52:9f:64:08:1c:3f:56:
20:48:e5:00:35:7f:53:cc:79:63:2e:4e:48:b8:a2:4b:18:78:
67:87:a9:14
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUeNWoYC6DZ0SGXaWBHYQZyjyI6U0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA5MDUwMjU5MzJaFw0yNjA5MDQwMzA0MzJaMDMxMTAvBgNV
BAMTKDAyMEY3RUQyMTdGQzM2NTMyRTZCMDQ1Q0ZCQ0NEQTY4QTY2MDQ2MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XW/ygxjbNN7KU8MicJ9kw/Wd
nK6pcyWyn4rbpN3BKAfKxZ1VUu6lbETvKMwgHMQ0H24bPJtDRWtfsf5F9L0M63Yw
Y9XWAW/fksrZW7D/2O/V23WCVBuE2hFOqs3dtlBB7M7CoheLQiM5V6yEjjPzlhXx
P3vzgdMKHv7tWeFkGuIa2TyVNyS4XafLumVcWsX8R9KpXASi4Dt39aJ82XDmO4kN
lptM3E3JRHE6vyUiRwqdqoB85p17VG5djwR2J0RQEM3bsCyfh9PZ5fRK2HvMYkP9
Vu/Qd4z53MLmN1JHTcveO36rNik03MS9XDUzphn/xc6PJIoGgCdExjFFY3SrAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCD37SF/w2Uy5r
BFz7zNpopmBGIDAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvNWE3Yzk1NmMtMjJlYi00YmI4LWEzMjctYWQ5NzE2MTI5NWJjLzAv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS81YTdjOTU2Yy0yMmViLTRiYjgtYTMyNy1hZDk3MTYxMjk1YmMv
MC8wMjBGN0VEMjE3RkMzNjUzMkU2QjA0NUNGQkNDREE2OEE2NjA0NjIwLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWBYDANBgkqhkiG9w0BAQsFAAOCAQEAGRAK
QVhTrngomEaZCrhrauXVmTe8al0Sc8dplCql3kjESuU+vXMoMokkdEPSCF7pFty5
rQm5o3mX4hLDxQ+L3X98/MgOsnNq5TXIYOcOt6UM9LXdN3TRmPFvwGIykjYxsLiu
TACdpIkPiivpz93GhfA2yK7PQSMznCw+r9TDXuL0QKnEMWvdI1SIsBUQZvbeuGy7
s1PNH4AMTucmX9C3BCfVLRJLu2ixXhYRqGHeoXVf8CGBWRG3tb+XH4S+NlYemcbK
qLQzm/wDH0+D4s+vaLCimuRwhEj0MbeM2Xb4cvlcPTtSn2QIHD9WIEjlADV/U8x5
Yy5OSLiiSxh4Z4epFA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 11:49:36 2025 by rpki-client