Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
File: B149F23A3E99C4760297DD7104B400C835D86D19.cer (raw, json)
Hash identifier: faTd8nFCvRhCpbL3FOww0B4jiLg0Dww6cr7UUeUPoyw=
Subject key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4DF4842A5FA871FBA7CA9E1687AFAD4C50EFAEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 29 Oct 2026 08:07:25 +0000
Certificate not after: Thu 28 Oct 2027 08:12:25 +0000
Subordinate resources: IP: 2a14:7583:f400::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f4:84:2a:5f:a8:71:fb:a7:ca:9e:16:87:af:ad:4c:50:ef:ae:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 29 08:07:25 2026 GMT
Not After : Oct 28 08:12:25 2027 GMT
Subject: CN=B149F23A3E99C4760297DD7104B400C835D86D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:aa:63:c9:1b:dd:90:e4:01:29:1e:9d:78:
e6:93:51:39:a4:b9:87:45:15:1d:70:84:64:8e:6a:
7f:18:c3:48:41:24:b0:71:0c:9b:6b:93:20:36:23:
d9:0a:49:74:f7:48:40:6a:a2:e8:bb:08:3d:98:c6:
be:2e:77:e1:55:64:f1:0e:32:0d:9c:00:a8:be:72:
c6:2e:33:e4:38:df:27:7c:c4:5b:3e:04:cd:60:d3:
0c:67:1d:86:e3:4c:ba:32:4d:77:87:80:7c:32:33:
a9:c1:a4:28:d4:b5:8b:ff:5a:7a:22:49:be:40:41:
2e:2d:42:a3:e5:fe:d5:8a:08:21:d6:77:33:e8:37:
d1:01:02:b7:fd:38:8e:cd:ab:58:ef:30:97:4f:f2:
ba:3e:06:5c:53:66:28:77:05:27:5b:01:e4:51:bc:
02:32:a7:c9:7e:00:c2:52:36:9a:2c:3f:b7:d4:0b:
49:b3:4d:73:5f:e0:a8:4a:4c:30:a4:88:74:12:d6:
6b:92:5d:ed:97:f7:b4:07:a8:1a:18:c2:c0:1f:18:
a8:3c:56:0d:e9:b9:6d:6c:25:cb:24:f9:76:e8:8c:
6e:cb:f7:c3:46:4d:d6:12:18:8e:d2:e7:25:a3:59:
77:c1:0f:d6:8a:00:61:85:9b:00:ff:5b:0d:23:84:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f400::/40
Signature Algorithm: sha256WithRSAEncryption
31:5d:7e:ab:79:05:95:ac:5a:a8:c3:f6:30:70:8c:7d:b6:8e:
4f:0d:5f:3a:e4:de:b8:f1:85:28:b5:a8:df:bc:6d:d8:1b:bd:
8b:b0:78:d6:42:8d:eb:ea:fc:a6:9b:a0:6c:06:a0:47:16:67:
c0:b3:f3:c8:41:5e:14:37:af:c6:d1:db:59:c6:a3:39:53:ba:
e9:48:b8:6d:98:92:ce:2a:85:80:6e:30:9b:e7:f8:c6:66:b2:
24:1e:6d:ed:06:0a:5e:28:87:26:74:96:5d:44:b9:c4:38:fc:
0e:51:87:29:0b:7d:4b:9c:17:47:a8:05:86:83:6d:7c:d9:bd:
e5:51:b0:54:b5:41:a0:d7:ab:5e:b4:2d:75:69:4c:2a:dc:69:
ee:0c:05:68:19:93:94:d2:df:3c:00:61:59:d7:ac:fb:f4:67:
c7:ef:c6:dd:8d:ee:1c:f1:6f:32:d2:04:8f:ac:27:87:02:9a:
87:13:a8:03:dc:ea:57:ef:f0:63:ac:bf:e0:be:9e:ab:90:f6:
ac:6d:a7:ea:a4:20:6f:20:3a:b4:95:4c:e5:e3:4d:90:3c:c4:
b5:67:f0:ce:6c:77:66:6e:0e:77:54:31:4c:e3:b0:f5:cc:8a:
86:f2:08:bc:58:63:d8:fa:38:f6:c2:96:53:ef:23:4e:b3:84:
78:ec:b5:da
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUTfSEKl+ocfunyp4Wh6+tTFDvrvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNjEwMjkwODA3MjVaFw0yNzEwMjgwODEyMjVaMDMxMTAvBgNV
BAMTKEIxNDlGMjNBM0U5OUM0NzYwMjk3REQ3MTA0QjQwMEM4MzVEODZEMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+KpjyRvdkOQBKR6deOaTUTmk
uYdFFR1whGSOan8Yw0hBJLBxDJtrkyA2I9kKSXT3SEBqoui7CD2Yxr4ud+FVZPEO
Mg2cAKi+csYuM+Q43yd8xFs+BM1g0wxnHYbjTLoyTXeHgHwyM6nBpCjUtYv/Wnoi
Sb5AQS4tQqPl/tWKCCHWdzPoN9EBArf9OI7Nq1jvMJdP8ro+BlxTZih3BSdbAeRR
vAIyp8l+AMJSNposP7fUC0mzTXNf4KhKTDCkiHQS1muSXe2X97QHqBoYwsAfGKg8
Vg3puW1sJcsk+XbojG7L98NGTdYSGI7S5yWjWXfBD9aKAGGFmwD/Ww0jhDBtAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxSfI6PpnEdgKX
3XEEtADINdhtGTAfBgNVHSMEGDAWgBSoPUhlLzst909r+bqoqcF0zP03cjAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BODNENDg2NTJGM0IyREY3NEY2QkY5QkFB
OEE5QzE3NENDRkQzNzcyLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUQxSVpT
ODdMZmRQYV9tNnFLbkJkTXo5TjNJLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVjOWRjLzIv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMv
Mi9CMTQ5RjIzQTNFOTlDNDc2MDI5N0RENzEwNEI0MDBDODM1RDg2RDE5Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqFHWD9DANBgkqhkiG9w0BAQsFAAOCAQEAMV1+
q3kFlaxaqMP2MHCMfbaOTw1fOuTeuPGFKLWo37xt2Bu9i7B41kKN6+r8ppugbAag
RxZnwLPzyEFeFDevxtHbWcajOVO66Ui4bZiSziqFgG4wm+f4xmayJB5t7QYKXiiH
JnSWXUS5xDj8DlGHKQt9S5wXR6gFhoNtfNm95VGwVLVBoNerXrQtdWlMKtxp7gwF
aBmTlNLfPABhWdes+/Rnx+/G3Y3uHPFvMtIEj6wnhwKahxOoA9zqV+/wY6y/4L6e
q5D2rG2n6qQgbyA6tJVM5eNNkDzEtWfwzmx3Zm4Od1QxTOOw9cyKhvIIvFhj2Po4
9sKWU+8jTrOEeOy12g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 11:03:08 2026 by rpki-client