Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer
File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer (raw, json)
Hash identifier: eGAzsYkynuTEQ6m+cFbyqlaMTbjgtBHq39WcoJP+dSA=
Subject key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 543603B58105CB66A68B3DDE0CB2B09D74BFF8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 20 May 2026 01:01:06 +0000
Certificate not after: Wed 19 May 2027 01:06:06 +0000
Subordinate resources: IP: 2a14:7581:d00::/40
IP: 2a14:7584:7000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:36:03:b5:81:05:cb:66:a6:8b:3d:de:0c:b2:b0:9d:74:bf:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 20 01:01:06 2026 GMT
Not After : May 19 01:06:06 2027 GMT
Subject: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:a3:08:a4:8a:fb:38:35:6e:f9:e1:2c:ca:
ef:b2:2e:ce:91:34:48:b3:f1:7d:b3:48:4c:66:82:
2b:8d:51:8b:7e:41:a3:04:7b:0d:ee:4f:4f:3b:7c:
2a:54:96:e6:38:06:24:df:0d:62:82:ff:1b:d8:06:
19:a0:49:b3:d5:65:6f:cd:31:3f:49:e7:9f:b3:c6:
6b:3c:e8:36:82:59:e1:7b:f1:99:76:d4:fa:23:87:
f2:ba:20:4c:f0:53:b7:40:e1:2d:22:52:c5:9d:93:
cc:98:d6:2c:c5:c2:8f:fd:aa:d4:26:d9:ef:b5:0b:
7a:c5:66:98:bf:a9:cb:98:02:fe:a1:c2:98:9a:3f:
38:d5:e9:39:e3:df:2f:c9:45:fb:0b:ec:33:fe:51:
6c:f1:51:b7:d1:99:c8:92:e8:c7:af:ff:ca:bc:9b:
38:f6:0f:0e:f0:71:86:de:0f:53:48:d9:70:04:4a:
6b:c8:5c:fd:52:1e:1b:c3:8f:7c:42:38:30:48:29:
51:6b:19:25:bf:bb:72:f8:99:64:db:55:b1:18:54:
36:18:89:25:f5:e2:2c:85:04:b9:be:b5:f8:d8:df:
10:c2:8e:cf:49:81:a2:07:87:e7:48:55:d9:f4:fc:
c4:e2:e2:94:87:cb:09:b0:6e:e9:18:af:b0:8c:b4:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:d00::/40
2a14:7584:7000::/36
Signature Algorithm: sha256WithRSAEncryption
91:75:d5:58:d8:a6:ec:a2:50:cb:7b:66:d8:4e:32:95:cb:ab:
66:c5:9d:94:bb:f5:9a:82:71:3f:b5:91:e5:c7:d8:be:aa:52:
2f:35:1a:89:3d:b6:dd:02:95:45:a3:15:68:cc:29:e6:e7:94:
11:0a:da:08:9c:bf:5d:68:b7:32:37:03:48:5a:81:fd:59:20:
d0:29:96:5f:2d:e0:b4:aa:f0:9e:22:73:52:20:a3:e7:71:00:
8c:72:d6:79:0a:29:0a:10:01:7a:a7:19:0e:79:cc:81:22:38:
62:dd:9d:33:86:0d:3f:9a:25:89:45:3f:cd:6a:de:14:6e:19:
7c:b0:4d:6d:c1:4b:43:64:e5:27:fa:db:de:4c:22:58:fe:61:
b3:11:69:9c:c1:04:4b:82:78:85:ae:b2:15:a1:fd:de:a8:29:
12:21:60:90:17:69:95:ff:63:76:08:63:df:1b:53:a9:98:c1:
3f:22:f4:49:b6:f4:8f:07:a4:9b:9f:e2:ee:cb:0b:00:48:c9:
5c:86:84:59:19:00:43:a1:65:7c:22:ab:72:86:f6:b6:82:dc:
6a:b5:29:40:bc:51:72:d6:c1:1f:78:b0:79:31:ed:9a:83:72:
9a:e8:82:dc:62:20:60:f0:83:cf:c4:c4:52:96:8c:71:f1:ad:
b4:50:72:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:37:30 2026 by rpki-client