Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer (raw, json)
Hash identifier: axZXjHfavcvsVzS6aCa4Q48FusQxt9mHgLVNvbcwV2U=
Subject key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 051836FEFAB7B6AA695F4A24456750F7BE731B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 06 Sep 2025 13:12:26 +0000
Certificate not after: Sat 05 Sep 2026 13:17:26 +0000
Subordinate resources: IP: 2a14:7580:fff5::/48
IP: 2a14:7581:3000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:18:36:fe:fa:b7:b6:aa:69:5f:4a:24:45:67:50:f7:be:73:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 6 13:12:26 2025 GMT
Not After : Sep 5 13:17:26 2026 GMT
Subject: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:63:c5:23:31:b3:08:19:57:aa:02:8a:f1:
24:b6:45:cb:80:aa:93:4c:82:02:e3:19:78:b6:db:
4f:1f:5d:e7:58:52:2f:9f:3d:48:db:06:36:de:67:
c9:61:81:e6:ad:18:b1:f7:cb:f2:71:9e:0b:a1:93:
7c:65:ca:58:e0:6a:a0:a8:eb:fd:42:b6:52:ce:a3:
86:a3:8b:05:4f:7e:39:62:5c:0f:2f:d4:4b:3f:9c:
f0:34:4d:74:ce:92:69:26:ef:4c:8e:ee:e4:53:ad:
d7:b0:4c:e8:bd:b7:6c:72:fa:ac:e1:c1:02:06:d0:
34:78:c0:3d:f9:ed:92:9c:29:83:b6:3f:4e:b7:f3:
1f:74:74:29:5a:15:0d:e9:c3:e5:54:6b:70:10:23:
84:79:fb:9f:da:bc:96:2d:98:b6:e9:96:9b:f0:df:
f6:44:8d:80:d3:93:3e:a4:d6:81:21:29:ef:79:90:
ac:a6:ba:4f:23:43:94:f5:51:9e:db:d4:ac:24:f5:
c5:35:db:2e:dc:51:fc:6a:16:0d:cb:98:14:2b:4f:
7c:a8:92:74:ef:cc:06:47:48:0c:72:58:d5:02:71:
32:3e:a0:4f:2e:9a:89:62:64:7a:94:b4:20:83:5a:
3f:fd:b1:79:ac:eb:ce:b5:7f:da:af:b9:68:ee:8a:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff5::/48
2a14:7581:3000::/40
Signature Algorithm: sha256WithRSAEncryption
4b:77:b8:bc:72:03:0d:0e:62:6c:9e:fb:8a:22:27:a4:86:d8:
80:09:77:4b:18:01:f8:23:1a:6f:47:21:a9:98:c1:31:d6:de:
3b:f7:d7:1e:75:86:1d:5b:a5:9e:d4:b8:0f:bf:a7:c7:42:be:
0e:ff:aa:fc:84:06:7f:67:2f:3b:77:15:92:45:fc:50:6f:7c:
c7:68:48:33:ed:3c:62:9c:e2:16:d7:38:dd:db:8e:30:40:20:
94:25:1c:d9:18:78:e9:d5:09:08:e0:a5:62:d3:07:f1:5b:19:
08:9c:22:ff:54:77:68:e6:78:dd:ef:89:67:60:45:f4:20:a8:
fb:3b:42:0a:ca:9a:8a:a1:46:0d:9a:37:94:b3:41:83:76:cd:
88:36:b5:f2:50:ab:b3:2f:87:9f:d4:91:86:88:c7:d6:4a:23:
2b:36:c9:90:c7:ac:1b:f3:03:6d:2c:1d:13:bc:cc:2e:a0:fd:
bc:8d:f0:0d:84:d6:c8:07:bf:96:e4:06:a0:dd:56:e6:8e:33:
82:28:61:0a:dd:75:67:87:7c:b3:7c:1b:4d:ea:1e:66:a3:1b:
3e:cf:5e:93:dc:94:5d:bf:21:17:bf:66:7b:1a:8a:c6:36:24:
aa:38:f2:7f:e0:b1:bd:e9:c5:3b:09:f6:59:8b:e9:dd:6a:1e:
46:c4:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:09 2025 by rpki-client