Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
File: A609E97AC39E3F53678C0C9422F89947B6146002.cer (raw, json)
Hash identifier: WT50G2/RV8vJPRlVDOCY9juUM8BqBldXp7dqK7rOIF0=
Subject key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 76642B921E66A9FC29AE26FE152A2AEF74C860BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
caRepository: rsync://rpki.avsisp.com/repo/AVSISP/0/
Notify URL: https://rpki.avsisp.com/rrdp/notification.xml
Certificate not before: Sat 06 Sep 2025 10:35:25 +0000
Certificate not after: Sat 05 Sep 2026 10:40:25 +0000
Subordinate resources: IP: 2a14:7583::/36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:64:2b:92:1e:66:a9:fc:29:ae:26:fe:15:2a:2a:ef:74:c8:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 6 10:35:25 2025 GMT
Not After : Sep 5 10:40:25 2026 GMT
Subject: CN=A609E97AC39E3F53678C0C9422F89947B6146002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:6d:9e:cd:57:e7:08:1e:87:36:c2:13:40:
7a:b3:ce:b2:b2:c3:10:b9:3a:27:fc:b5:87:88:63:
90:30:af:9d:34:bd:17:c6:6a:a4:88:21:57:d6:56:
3e:a3:3f:27:45:45:7f:3e:17:67:94:77:52:82:03:
d0:c6:68:80:5f:1c:43:2a:aa:d4:91:e8:8a:57:e3:
04:29:2a:bc:ba:8f:ed:ec:c7:2e:f1:7e:1a:4d:77:
39:14:21:8e:8f:15:4c:7e:b8:af:97:a5:7e:ab:35:
11:1a:c4:4d:e4:c1:df:c1:f2:fc:3b:04:9b:82:7d:
ce:43:67:67:e2:d6:b5:45:c8:20:75:45:82:b1:83:
58:47:5f:aa:87:55:c0:ff:c1:fe:88:59:00:bf:92:
46:6b:93:31:2c:6a:1f:78:69:6c:9f:3e:f2:5b:cf:
d9:22:4c:ee:a1:0b:3a:b9:83:60:e3:81:3a:7e:8e:
7e:ed:d1:4c:86:5e:ad:9a:19:1c:99:f2:29:35:69:
e5:c6:23:88:d2:b2:30:06:99:00:8b:0b:69:ce:28:
02:36:ba:7c:e6:e7:39:36:6a:07:b4:49:80:69:08:
50:87:02:5d:be:86:0e:20:87:3c:bb:bf:89:a3:85:
18:05:dc:c8:3c:23:d8:09:c7:17:82:d1:6a:c1:ea:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/
RPKI Manifest - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
RPKI Notify - URI:https://rpki.avsisp.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583::/36
Signature Algorithm: sha256WithRSAEncryption
12:56:5d:4d:62:09:95:78:5c:bc:4f:eb:d3:02:d4:5c:5c:4a:
8e:1c:7a:34:65:72:6a:42:6f:34:6e:3d:16:b8:12:33:b5:57:
6e:3e:69:87:9d:57:0f:5d:6f:c5:47:7f:70:8a:19:09:0f:19:
92:13:80:fb:a5:5c:b7:43:14:05:be:6b:46:e6:0b:fb:4a:1f:
ef:b2:2e:ec:34:29:b2:69:d8:b4:e0:08:d1:03:14:07:fd:c1:
28:dc:25:fa:04:b4:b4:a3:50:3d:e2:5a:f9:f7:2f:30:a7:38:
1f:0c:8f:f3:81:8f:7d:6d:1d:3f:9e:9e:21:40:51:84:ca:08:
90:41:35:21:9c:01:2d:84:7d:b2:73:f2:fe:25:eb:c7:61:31:
30:24:1b:0a:18:be:39:73:32:16:97:1f:1e:73:6f:f8:d4:a0:
c1:f9:c2:08:10:c2:71:2e:f7:21:4d:f0:8b:93:1a:ff:b3:ae:
b9:8b:77:cc:bf:a6:91:96:52:2c:20:22:ea:04:59:4d:c7:af:
9a:4e:3d:69:6b:45:cc:b4:7a:17:1f:a1:84:e8:40:a4:b6:fe:
59:2a:db:99:dc:7b:0f:45:f7:d7:bb:81:67:87:c9:7f:82:9c:
26:36:88:4e:6e:98:9c:12:3b:b2:6d:b8:09:41:f8:06:a9:0c:
a2:a7:a7:1c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUdmQrkh5mqfwprib+FSoq73TIYL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNTA5MDYxMDM1MjVaFw0yNjA5MDUxMDQwMjVaMDMxMTAvBgNV
BAMTKEE2MDlFOTdBQzM5RTNGNTM2NzhDMEM5NDIyRjg5OTQ3QjYxNDYwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr22ezVfnCB6HNsITQHqzzrKy
wxC5Oif8tYeIY5Awr500vRfGaqSIIVfWVj6jPydFRX8+F2eUd1KCA9DGaIBfHEMq
qtSR6IpX4wQpKry6j+3sxy7xfhpNdzkUIY6PFUx+uK+XpX6rNREaxE3kwd/B8vw7
BJuCfc5DZ2fi1rVFyCB1RYKxg1hHX6qHVcD/wf6IWQC/kkZrkzEsah94aWyfPvJb
z9kiTO6hCzq5g2DjgTp+jn7t0UyGXq2aGRyZ8ik1aeXGI4jSsjAGmQCLC2nOKAI2
unzm5zk2age0SYBpCFCHAl2+hg4ghzy7v4mjhRgF3Mg8I9gJxxeC0WrB6ibvAgMB
AAGjggKCMIICfjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmCel6w54/U2eM
DJQi+JlHthRgAjAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCB3wYIKwYBBQUHAQsEgdIwgc8wMgYI
KwYBBQUHMAWGJnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQLzAv
MF4GCCsGAQUFBzAKhlJyc3luYzovL3Jwa2kuYXZzaXNwLmNvbS9yZXBvL0FWU0lT
UC8wL0E2MDlFOTdBQzM5RTNGNTM2NzhDMEM5NDIyRjg5OTQ3QjYxNDYwMDIubWZ0
MDkGCCsGAQUFBzANhi1odHRwczovL3Jwa2kuYXZzaXNwLmNvbS9ycmRwL25vdGlm
aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGBCoUdYMAMA0GCSqGSIb3DQEBCwUAA4IBAQASVl1N
YgmVeFy8T+vTAtRcXEqOHHo0ZXJqQm80bj0WuBIztVduPmmHnVcPXW/FR39wihkJ
DxmSE4D7pVy3QxQFvmtG5gv7Sh/vsi7sNCmyadi04AjRAxQH/cEo3CX6BLS0o1A9
4lr59y8wpzgfDI/zgY99bR0/np4hQFGEygiQQTUhnAEthH2yc/L+JevHYTEwJBsK
GL45czIWlx8ec2/41KDB+cIIEMJxLvchTfCLkxr/s665i3fMv6aRllIsICLqBFlN
x6+aTj1pa0XMtHoXH6GE6ECktv5ZKtuZ3HsPRffXu4Fnh8l/gpwmNohObpicEjuy
bbgJQfgGqQyip6cc
-----END CERTIFICATE-----
Generated at Sun Sep 14 17:24:14 2025 by rpki-client