Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
File: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer (raw, json)
Hash identifier: wijz+ZyioQmyTzIJivjzaKliriFa6XNFqLFgWAR0e7E=
Subject key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 03019501D5AEDF44064AEB8568FFBEFE5347A695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 21:35:05 +0000
Certificate not after: Wed 09 Jun 2027 21:40:05 +0000
Subordinate resources: IP: 2a14:7581:3000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:01:95:01:d5:ae:df:44:06:4a:eb:85:68:ff:be:fe:53:47:a6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 10 21:35:05 2026 GMT
Not After : Jun 9 21:40:05 2027 GMT
Subject: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:63:c5:23:31:b3:08:19:57:aa:02:8a:f1:
24:b6:45:cb:80:aa:93:4c:82:02:e3:19:78:b6:db:
4f:1f:5d:e7:58:52:2f:9f:3d:48:db:06:36:de:67:
c9:61:81:e6:ad:18:b1:f7:cb:f2:71:9e:0b:a1:93:
7c:65:ca:58:e0:6a:a0:a8:eb:fd:42:b6:52:ce:a3:
86:a3:8b:05:4f:7e:39:62:5c:0f:2f:d4:4b:3f:9c:
f0:34:4d:74:ce:92:69:26:ef:4c:8e:ee:e4:53:ad:
d7:b0:4c:e8:bd:b7:6c:72:fa:ac:e1:c1:02:06:d0:
34:78:c0:3d:f9:ed:92:9c:29:83:b6:3f:4e:b7:f3:
1f:74:74:29:5a:15:0d:e9:c3:e5:54:6b:70:10:23:
84:79:fb:9f:da:bc:96:2d:98:b6:e9:96:9b:f0:df:
f6:44:8d:80:d3:93:3e:a4:d6:81:21:29:ef:79:90:
ac:a6:ba:4f:23:43:94:f5:51:9e:db:d4:ac:24:f5:
c5:35:db:2e:dc:51:fc:6a:16:0d:cb:98:14:2b:4f:
7c:a8:92:74:ef:cc:06:47:48:0c:72:58:d5:02:71:
32:3e:a0:4f:2e:9a:89:62:64:7a:94:b4:20:83:5a:
3f:fd:b1:79:ac:eb:ce:b5:7f:da:af:b9:68:ee:8a:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:92:13:51:0c:01:6d:e4:7d:b1:b2:d9:71:6a:a1:12:ba:4c:
75:4b:9c:0c:ff:3c:65:77:cc:42:b8:da:35:2f:2a:6f:ed:98:
51:53:d5:3b:85:09:b8:08:52:4b:bb:ce:4b:35:0f:29:e7:b2:
e4:45:f0:6a:8c:2f:03:38:b6:75:f7:72:9a:7d:9b:c4:f7:18:
24:28:a9:88:0c:c0:dd:f5:68:6c:21:f0:8b:0c:f1:ff:8b:f4:
88:b9:3d:09:ea:d1:e5:db:6f:1e:18:9f:d2:45:29:4e:18:77:
d3:14:66:7b:50:02:d6:aa:dd:4d:7e:3e:ed:56:f9:f3:ca:92:
65:ad:52:0a:31:e0:b5:10:bb:37:14:8d:81:c1:cb:d9:d0:01:
a3:c9:91:53:7d:75:a3:66:0a:27:8c:e5:32:67:ab:55:40:0d:
d3:90:2c:30:a0:f1:73:13:49:b8:5f:e1:4a:25:6f:39:8b:0a:
09:27:49:a3:d0:c3:c3:43:70:d5:6c:32:06:78:e2:c4:cf:e9:
44:d4:59:84:3a:64:ad:b5:08:1a:f5:6b:d0:a6:d2:d5:f4:9b:
bd:5b:0d:8b:ee:3f:65:2c:fa:c7:29:f4:2a:b6:a1:71:98:f0:
38:14:40:9f:ab:3b:ae:b2:a3:63:20:39:6d:ce:8c:37:61:b0:
f6:83:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:02 2026 by rpki-client