Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
File: B149F23A3E99C4760297DD7104B400C835D86D19.cer (raw, json)
Hash identifier: GDgLzlP4qreqym1ylgXVzVuvMJzmYi/odwtJajoaitQ=
Subject key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 63539C203870FC8D2A22DA55EB9689EF0CCD678A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 09 Sep 2026 16:45:46 +0000
Certificate not after: Wed 08 Sep 2027 16:50:46 +0000
Subordinate resources: IP: 2a14:7583:f400::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 17:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:53:9c:20:38:70:fc:8d:2a:22:da:55:eb:96:89:ef:0c:cd:67:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 9 16:45:46 2026 GMT
Not After : Sep 8 16:50:46 2027 GMT
Subject: CN=B149F23A3E99C4760297DD7104B400C835D86D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:aa:63:c9:1b:dd:90:e4:01:29:1e:9d:78:
e6:93:51:39:a4:b9:87:45:15:1d:70:84:64:8e:6a:
7f:18:c3:48:41:24:b0:71:0c:9b:6b:93:20:36:23:
d9:0a:49:74:f7:48:40:6a:a2:e8:bb:08:3d:98:c6:
be:2e:77:e1:55:64:f1:0e:32:0d:9c:00:a8:be:72:
c6:2e:33:e4:38:df:27:7c:c4:5b:3e:04:cd:60:d3:
0c:67:1d:86:e3:4c:ba:32:4d:77:87:80:7c:32:33:
a9:c1:a4:28:d4:b5:8b:ff:5a:7a:22:49:be:40:41:
2e:2d:42:a3:e5:fe:d5:8a:08:21:d6:77:33:e8:37:
d1:01:02:b7:fd:38:8e:cd:ab:58:ef:30:97:4f:f2:
ba:3e:06:5c:53:66:28:77:05:27:5b:01:e4:51:bc:
02:32:a7:c9:7e:00:c2:52:36:9a:2c:3f:b7:d4:0b:
49:b3:4d:73:5f:e0:a8:4a:4c:30:a4:88:74:12:d6:
6b:92:5d:ed:97:f7:b4:07:a8:1a:18:c2:c0:1f:18:
a8:3c:56:0d:e9:b9:6d:6c:25:cb:24:f9:76:e8:8c:
6e:cb:f7:c3:46:4d:d6:12:18:8e:d2:e7:25:a3:59:
77:c1:0f:d6:8a:00:61:85:9b:00:ff:5b:0d:23:84:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f400::/40
Signature Algorithm: sha256WithRSAEncryption
94:79:e8:dc:71:2a:ee:e8:b6:d0:f0:03:e0:4d:bb:5d:82:b5:
74:75:fe:5c:1d:bd:62:80:e4:20:af:83:23:1e:1d:f3:6c:0f:
44:83:af:fa:d0:50:02:47:d9:c4:cb:79:35:04:33:5e:27:3a:
35:bc:40:c2:53:b0:76:6a:27:45:0a:b5:03:d4:83:f0:19:5e:
41:e3:34:e4:b7:41:39:82:6d:d3:51:2c:ca:c9:14:a9:8c:f8:
e4:09:b5:51:5b:d2:09:fe:a3:6e:4a:92:72:fd:01:c0:ab:fb:
94:01:a6:61:34:07:35:39:3e:49:74:ca:76:46:10:62:ea:06:
eb:c8:f5:7c:82:a4:14:d7:72:88:8e:d3:85:c6:50:49:4f:c0:
69:b5:3c:65:6a:be:03:10:49:1c:99:c4:a3:7c:03:12:52:89:
79:19:18:9c:f5:14:ee:3b:13:bb:0b:46:e8:ef:56:29:4c:c8:
82:12:90:0a:e1:74:43:d4:1b:81:40:df:87:ac:98:9c:6d:11:
36:58:01:81:2f:b4:02:3a:8a:81:a3:da:ff:14:e2:5e:bb:b2:
31:d5:77:57:a6:6f:66:ae:a5:68:a9:2e:1d:bd:99:59:ff:a4:
6e:9c:4c:59:2c:04:39:8b:27:ef:e0:d3:85:be:58:ab:47:77:
d1:1f:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:19:39 2026 by rpki-client