Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer
File: 5C7539DD21725D2C2DF2782A4101A5369C3C013F.cer (raw, json)
Hash identifier: nN3xZYFeiyKnuI61eOPc3MqE30ELFwBq+KS0wQQPi7I=
Subject key identifier: 5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 0717379A389C63BBD0480F6EFC87C223250E3B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 15 Oct 2026 18:15:02 +0000
Certificate not after: Thu 14 Oct 2027 18:20:02 +0000
Subordinate resources: IP: 2a14:7581:5000::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:17:37:9a:38:9c:63:bb:d0:48:0f:6e:fc:87:c2:23:25:0e:3b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 15 18:15:02 2026 GMT
Not After : Oct 14 18:20:02 2027 GMT
Subject: CN=5C7539DD21725D2C2DF2782A4101A5369C3C013F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:ca:e4:fc:1c:f5:6a:6b:df:61:3c:32:8e:
df:66:0c:9b:96:8e:93:4d:5c:33:4f:d5:e8:67:7f:
8d:a2:8a:a1:b7:a6:e2:cf:eb:ca:57:c4:74:bc:19:
d6:c3:1a:0d:98:89:be:7f:a4:0a:7b:e4:04:88:f5:
e5:19:bf:89:31:61:0e:7b:0c:18:68:9f:3f:e9:76:
2e:fa:d7:79:bf:ac:6e:7b:67:37:fa:90:cb:09:7c:
a1:ca:6f:46:0a:5d:4b:96:07:67:c5:61:61:d0:a5:
41:d4:81:4f:73:be:43:e2:00:9d:9a:91:ce:00:07:
ac:ab:63:b2:59:e4:5e:94:1d:4f:e4:87:6d:70:78:
4a:d5:1f:da:c6:94:f5:a4:53:8e:a8:66:09:be:bf:
11:fb:f3:00:6e:a8:da:af:f6:f2:57:24:35:2d:e4:
10:c3:b1:02:38:9d:4a:87:a6:80:eb:81:e0:88:5b:
2a:ae:01:08:e0:f9:89:58:81:89:c2:b1:b8:45:e5:
f1:ae:e7:70:a8:6e:2a:b4:05:e1:97:96:58:13:7a:
a0:8a:55:c2:9b:34:ae:df:10:4c:7d:9c:eb:fe:bd:
62:3b:75:9d:9d:4a:c2:7f:b9:4f:7c:3c:46:d7:cf:
30:e6:b6:3b:03:1d:61:14:66:3b:2c:3f:42:49:a7:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5C:75:39:DD:21:72:5D:2C:2D:F2:78:2A:41:01:A5:36:9C:3C:01:3F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3cbfad96-7947-4e49-ace1-8bf89993bd42/7/5C7539DD21725D2C2DF2782A4101A5369C3C013F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:5000::/40
Signature Algorithm: sha256WithRSAEncryption
2e:04:38:6b:5f:d0:46:05:f4:23:16:66:a7:36:78:0d:d0:f5:
bf:bc:42:b3:dc:71:4b:ea:b4:4c:3d:ca:dd:bc:ae:6e:8d:dd:
07:74:49:ac:b6:80:ff:a4:1f:8a:95:f7:83:a1:43:36:ec:14:
31:4c:a7:d3:2f:7e:6f:c6:ff:23:a6:4b:0c:8f:6f:89:aa:a6:
8f:be:cd:46:f1:3d:b4:4b:70:d5:e2:56:ef:6a:76:17:3c:97:
21:15:11:85:4b:b6:ca:a6:3d:e2:8a:a0:93:11:da:3a:8e:4d:
0a:17:1d:75:fc:d2:40:08:ff:c5:2e:90:8a:f1:7a:11:f9:95:
1f:72:78:6d:66:47:18:3a:6e:07:84:60:b7:e7:b2:f5:02:5a:
4f:f1:ce:dd:37:8b:dd:10:c7:92:5e:40:bc:de:aa:a5:dd:ee:
27:7e:49:2f:c9:04:55:0b:4e:80:64:f2:f6:97:94:c0:f8:b2:
5e:7f:61:01:ca:03:30:6c:24:4a:e7:f9:ef:47:69:97:3a:c7:
f7:7e:57:68:d6:05:5c:2c:93:f1:cf:3d:e0:6b:94:bc:92:a6:
79:28:07:5f:63:42:4e:98:f7:39:44:36:ab:95:84:a9:95:97:
68:51:21:8b:44:88:b3:d9:2c:6f:5d:72:1b:0d:a9:e5:b5:9f:
1e:c9:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:52 2026 by rpki-client