Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
File: 30EC341CC59263F48799F70A95490826E78E6E11.cer (raw, json)
Hash identifier: m3RdJRPmiBWnye/OGib36KcfnvGf0E3TqLU6/UCIyRU=
Subject key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 40D4BBF35B2456A5C973EB892C9B54FCD38430A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 17 Aug 2026 06:43:45 +0000
Certificate not after: Mon 16 Aug 2027 06:48:45 +0000
Subordinate resources: IP: 2a14:7581:100:: -- 2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
IP: 2a14:7581:1000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d4:bb:f3:5b:24:56:a5:c9:73:eb:89:2c:9b:54:fc:d3:84:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 17 06:43:45 2026 GMT
Not After : Aug 16 06:48:45 2027 GMT
Subject: CN=30EC341CC59263F48799F70A95490826E78E6E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:42:b1:cd:bc:22:7a:b5:a3:84:aa:81:53:
1b:ad:48:d3:a1:7a:b1:7f:d6:9d:dd:18:03:fb:92:
72:7b:f0:1c:ed:6d:4d:c9:d1:e5:02:55:4e:33:91:
df:29:e4:b2:60:81:f3:21:d1:55:95:56:80:a4:4e:
26:d3:3a:f1:07:3e:e2:b9:d6:7e:42:08:02:e2:4a:
4e:37:e4:b2:c3:2a:7b:7a:5d:64:69:7a:77:73:23:
09:ea:55:35:ff:4d:04:75:35:94:8c:b8:45:96:ca:
cb:1a:95:fb:a9:c2:dc:c4:0b:cc:0a:93:1c:dc:b9:
fc:ae:87:64:e2:52:66:43:f0:c7:54:8c:f3:75:8f:
2e:34:f8:b2:32:a0:e5:44:92:1d:fe:d9:a2:59:85:
da:e3:c8:bc:a4:1c:77:2e:c0:ad:b4:10:c7:a5:5c:
22:de:13:7b:9c:8d:bf:e4:77:9b:58:00:7f:aa:c5:
d0:a3:44:3e:c8:0b:ed:3b:46:3b:29:f1:bc:1f:ed:
41:ed:45:98:5d:8d:05:24:ac:e7:3a:ef:74:1a:c4:
29:87:d5:35:f7:f2:46:46:f3:7f:52:e9:db:32:ea:
25:04:51:f4:34:07:51:4d:fb:a6:1b:1d:ea:3e:b4:
26:e2:0a:3b:bf:f2:a3:7c:34:2a:4f:70:e2:e7:03:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:100::-2a14:7581:2ff:ffff:ffff:ffff:ffff:ffff
2a14:7581:1000::/36
Signature Algorithm: sha256WithRSAEncryption
58:7b:32:5c:e4:cb:21:aa:54:a5:4e:bc:1e:ac:1c:48:a6:69:
c3:af:ad:42:36:cb:c4:e8:f1:59:3b:ba:af:e0:0a:40:da:2b:
cc:ad:e5:08:95:3f:b0:9d:55:bf:a8:73:b3:5d:00:20:e5:d6:
73:60:56:e2:de:38:0c:bb:50:7a:7a:1f:ae:d2:57:83:f8:b4:
c3:ff:46:ca:c3:39:da:c7:b4:75:ea:8c:56:c6:bb:e2:8b:26:
3b:33:e4:57:aa:c3:71:44:b7:00:bd:8d:64:7d:f5:2d:bb:43:
88:ce:37:e8:fe:de:4f:82:11:f1:0b:62:a0:b7:03:09:53:78:
df:8d:1a:53:f5:49:42:ef:7a:d8:51:e3:63:2e:d8:a8:f5:a3:
51:5a:81:6d:51:a8:9f:83:a9:0b:43:63:06:22:18:5d:79:d1:
18:69:b2:68:a2:92:08:90:c9:79:35:dd:39:79:51:ce:ff:2c:
d8:c3:8f:6c:b3:7c:f6:5f:11:65:a4:94:e3:6d:38:3a:23:7b:
76:72:8d:ed:43:fd:51:15:2c:1d:0d:49:58:ad:f6:db:12:55:
b4:e3:1c:a8:3b:27:ec:38:35:00:2b:a3:b1:92:bc:7a:0b:10:
02:2d:f7:44:f5:ea:28:ee:da:20:b9:08:ff:a5:58:44:79:b4:
73:82:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:15:08 2026 by rpki-client