Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
File: 9B848163C7049122702E8D37941241ED5ADD94D9.cer (raw, json)
Hash identifier: SD0GMaDPgna5peEZmP1Ep4gW3ZhjmohDs4S0mk4RK6I=
Subject key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4D26BF10F2FC47F1E23BFC28E1C88BF90C67566B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 08 Mar 2026 20:28:49 +0000
Certificate not after: Sun 07 Mar 2027 20:33:49 +0000
Subordinate resources: IP: 2a14:7580:c000::/36
IP: 2a14:7583::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 08:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:26:bf:10:f2:fc:47:f1:e2:3b:fc:28:e1:c8:8b:f9:0c:67:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 8 20:28:49 2026 GMT
Not After : Mar 7 20:33:49 2027 GMT
Subject: CN=9B848163C7049122702E8D37941241ED5ADD94D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:5f:2d:0c:79:cb:cf:1c:c9:af:0e:84:a9:
db:f3:21:39:45:46:58:69:48:00:14:ca:e6:4f:6d:
63:0e:d2:96:a0:fe:27:d4:7f:6b:0c:12:02:60:2a:
ac:e7:cf:6f:40:13:27:9f:b5:b2:91:12:93:57:b6:
d6:79:2f:8b:f8:d6:b6:1d:9f:28:ed:d2:92:bf:13:
22:35:8e:1b:0d:e5:e5:ee:4f:7b:21:eb:96:32:68:
f1:4f:ac:08:0c:f4:38:b2:c6:05:f5:07:3b:3b:71:
00:71:81:a9:47:88:54:3c:a2:f2:95:b4:fc:8d:34:
39:29:36:ef:a6:72:d1:de:ed:df:84:8a:8f:16:60:
e5:df:c8:3a:33:f6:31:18:fb:52:48:54:82:8d:14:
9e:46:e9:d4:1f:22:9f:b1:a5:cf:7c:13:2d:5b:10:
ec:6c:d1:3c:01:60:27:d8:9e:3c:5f:cd:38:5e:17:
61:4a:18:5c:10:5f:de:dc:96:67:df:8f:bb:df:99:
7a:1a:dc:49:5c:ca:1d:aa:cc:f5:69:2e:4d:32:27:
d2:ae:89:5e:04:0a:ab:f9:7e:61:26:bb:0f:23:c0:
0b:55:45:d3:9c:26:3e:35:6a:3c:92:25:e7:34:33:
8b:13:50:70:f7:af:ef:f4:5d:19:ea:65:7f:13:12:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:c000::/36
2a14:7583::/36
Signature Algorithm: sha256WithRSAEncryption
62:d3:2f:5e:80:e6:b2:ef:43:ee:5b:8f:6b:f5:ef:87:99:c5:
e8:3f:51:1b:61:06:d4:fb:3c:80:29:79:20:75:e7:3b:f2:53:
3b:25:2e:df:4d:87:92:4a:1f:b0:23:22:3b:b2:22:d0:0e:e6:
53:5f:3d:bd:34:0f:b6:90:41:e4:19:80:8a:cc:99:78:73:f2:
6f:34:04:55:87:a3:6b:a0:db:ac:a2:6c:d5:c4:e9:15:d1:22:
c5:7b:24:96:e8:4b:48:4c:17:da:4d:6f:af:35:e1:9f:50:04:
e8:ef:ce:76:44:86:1d:96:61:4d:2b:48:9c:2d:7e:fd:a3:8a:
91:1b:fe:71:86:1e:65:36:0c:50:d2:b0:02:b0:53:a3:1d:34:
99:31:72:28:53:4d:12:70:b4:3c:88:f8:7e:56:47:27:ac:ce:
6e:51:e9:e3:86:18:70:32:b3:eb:db:72:21:ae:e6:c0:c2:65:
de:61:6d:b0:e0:52:d9:aa:d2:56:cd:79:e8:b5:12:98:cb:fd:
8e:b7:aa:cc:c3:7a:da:a2:1a:4e:d0:e1:d2:f5:6f:d6:d9:55:
37:71:e3:62:9c:85:ff:f9:76:18:ec:20:77:45:ac:65:ff:8c:
b0:35:19:86:50:5c:67:3a:33:29:d7:b1:ee:48:df:2a:2a:11:
13:d2:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 13:35:11 2026 by rpki-client