Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer
File: 83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer (raw, json)
Hash identifier: xOcfkJt1kOezqUF6EM1hplkoCBbSEztIi7P8PiZuYHU=
Subject key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 09845F7739661E262CA2F419CAE58DD64FA3572D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 13:03:05 +0000
Certificate not after: Mon 06 Sep 2027 13:08:05 +0000
Subordinate resources: IP: 2a14:7586:6000::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:84:5f:77:39:66:1e:26:2c:a2:f4:19:ca:e5:8d:d6:4f:a3:57:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 7 13:03:05 2026 GMT
Not After : Sep 6 13:08:05 2027 GMT
Subject: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:67:71:24:96:93:18:e8:0b:31:5a:04:0e:
18:9b:d0:73:52:f9:fb:ef:22:4c:69:9b:24:35:05:
54:8f:07:49:0e:28:dc:9c:60:9e:9b:00:b1:9b:53:
68:82:e9:49:80:2b:92:f4:19:98:ae:b5:b2:18:a4:
6e:fe:16:b0:65:17:f1:49:d9:f6:c2:86:76:93:58:
b4:3a:12:51:26:9d:16:25:88:b0:7c:38:84:84:93:
d0:4f:b5:43:45:f3:05:44:b7:3a:b5:2d:d6:93:f6:
a4:62:41:00:66:f4:c3:1c:f6:72:51:1f:1e:44:70:
42:5a:63:c7:d5:fa:76:cf:5d:90:bb:82:d9:cc:19:
a8:e4:a8:16:8f:d7:99:f8:8c:a4:c6:6a:59:0b:aa:
80:2c:7b:10:f0:3e:3e:0e:d0:b6:bc:c6:3b:9f:c1:
16:a9:18:ac:a0:9d:ba:42:6b:43:6d:e6:c6:c0:be:
20:d9:b6:1c:a2:00:99:bb:bb:4c:02:ad:fc:80:b8:
0c:30:95:4d:02:79:5d:f1:66:18:d6:4d:f2:19:f6:
cc:6a:0a:71:46:21:46:70:7e:1f:76:8f:e4:6a:8c:
8f:95:4c:bc:bc:14:5d:b8:b3:e0:1e:36:1c:82:f6:
e2:a6:9b:cb:e9:f7:d9:04:fc:51:66:e8:b2:dc:62:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7586:6000::/36
Signature Algorithm: sha256WithRSAEncryption
79:8a:6f:7c:a3:b5:7c:ab:b9:bb:f7:d7:81:aa:30:30:2b:80:
73:d2:57:02:90:ef:a3:f3:f0:ab:0e:a2:85:a0:8e:b9:6e:a1:
51:ee:08:da:9f:00:3d:62:df:13:93:26:ff:65:fb:66:02:3d:
2c:82:f1:16:9e:64:27:74:52:84:db:7c:f6:f1:ee:17:2d:76:
fe:8c:14:27:ef:0f:6d:10:ca:44:11:6d:9d:2b:9c:d7:26:d0:
5f:f8:36:f1:96:39:33:70:3c:45:ab:f3:d0:3b:0c:a4:bb:e5:
c9:f0:6b:5b:a3:91:17:b2:45:db:3f:5d:4f:f9:18:42:ab:c7:
12:5c:cc:fc:94:6d:47:7e:cc:5f:b4:f1:81:95:78:6d:04:d2:
e6:b4:2e:ad:87:23:ac:62:2d:ee:a1:8f:11:74:de:a1:51:f9:
81:b6:13:83:20:d4:8f:e4:50:ed:d1:76:14:9e:95:e6:fa:c5:
c6:4b:63:00:d0:9a:a7:cf:ad:ea:c4:8e:69:0e:89:5b:bb:ef:
86:89:82:a6:99:88:82:a9:65:02:07:9a:06:e5:a4:f8:bc:50:
ea:69:67:5f:b8:ca:b7:0e:f8:6d:b7:9f:f1:5c:9a:54:af:de:
61:c3:ef:44:34:69:ef:99:e4:c5:50:2b:7f:17:88:3f:e7:5d:
89:39:4f:95
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUCYRfdzlmHiYsovQZyuWN1k+jVy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjA5MDcxMzAzMDVaFw0yNzA5MDYxMzA4MDVaMDMxMTAvBgNV
BAMTKDgzREU3MDM3QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWW2dxJJaTGOgLMVoEDhib0HNS
+fvvIkxpmyQ1BVSPB0kOKNycYJ6bALGbU2iC6UmAK5L0GZiutbIYpG7+FrBlF/FJ
2fbChnaTWLQ6ElEmnRYliLB8OISEk9BPtUNF8wVEtzq1LdaT9qRiQQBm9MMc9nJR
Hx5EcEJaY8fV+nbPXZC7gtnMGajkqBaP15n4jKTGalkLqoAsexDwPj4O0La8xjuf
wRapGKygnbpCa0Nt5sbAviDZthyiAJm7u0wCrfyAuAwwlU0CeV3xZhjWTfIZ9sxq
CnFGIUZwfh92j+RqjI+VTLy8FF24s+AeNhyC9uKmm8vp99kE/FFm6LLcYimzAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSD3nA3uOIFZtL+
ibqJF4g7a5ZOPjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvZTgwNWVhNWMtZDdhMy00ODQ4LTgzN2ItNDY5N2NjZGQ2ZWZlLzMv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4NDgtODM3Yi00Njk3Y2NkZDZlZmUv
My84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4OTE3ODgzQjZCOTY0RTNFLm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqFHWGYDANBgkqhkiG9w0BAQsFAAOCAQEAeYpv
fKO1fKu5u/fXgaowMCuAc9JXApDvo/Pwqw6ihaCOuW6hUe4I2p8APWLfE5Mm/2X7
ZgI9LILxFp5kJ3RShNt89vHuFy12/owUJ+8PbRDKRBFtnSuc1ybQX/g28ZY5M3A8
Ravz0DsMpLvlyfBrW6ORF7JF2z9dT/kYQqvHElzM/JRtR37MX7TxgZV4bQTS5rQu
rYcjrGIt7qGPEXTeoVH5gbYTgyDUj+RQ7dF2FJ6V5vrFxktjANCap8+t6sSOaQ6J
W7vvhomCppmIgqllAgeaBuWk+LxQ6mlnX7jKtw74bbef8VyaVK/eYcPvRDRp75nk
xVArfxeIP+ddiTlPlQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:35 2026 by rpki-client