Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
File: B149F23A3E99C4760297DD7104B400C835D86D19.cer (raw, json)
Hash identifier: bhQJvVS5SCp3i08BEV8F3aqzmfz4fRTAAFmfpoZN4VI=
Subject key identifier: B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 17930B51B360DB591AABE52C2055964CD381D2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 26 Oct 2026 23:09:55 +0000
Certificate not after: Mon 25 Oct 2027 23:14:55 +0000
Subordinate resources: IP: 2a14:7583:f400::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:93:0b:51:b3:60:db:59:1a:ab:e5:2c:20:55:96:4c:d3:81:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 26 23:09:55 2026 GMT
Not After : Oct 25 23:14:55 2027 GMT
Subject: CN=B149F23A3E99C4760297DD7104B400C835D86D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:aa:63:c9:1b:dd:90:e4:01:29:1e:9d:78:
e6:93:51:39:a4:b9:87:45:15:1d:70:84:64:8e:6a:
7f:18:c3:48:41:24:b0:71:0c:9b:6b:93:20:36:23:
d9:0a:49:74:f7:48:40:6a:a2:e8:bb:08:3d:98:c6:
be:2e:77:e1:55:64:f1:0e:32:0d:9c:00:a8:be:72:
c6:2e:33:e4:38:df:27:7c:c4:5b:3e:04:cd:60:d3:
0c:67:1d:86:e3:4c:ba:32:4d:77:87:80:7c:32:33:
a9:c1:a4:28:d4:b5:8b:ff:5a:7a:22:49:be:40:41:
2e:2d:42:a3:e5:fe:d5:8a:08:21:d6:77:33:e8:37:
d1:01:02:b7:fd:38:8e:cd:ab:58:ef:30:97:4f:f2:
ba:3e:06:5c:53:66:28:77:05:27:5b:01:e4:51:bc:
02:32:a7:c9:7e:00:c2:52:36:9a:2c:3f:b7:d4:0b:
49:b3:4d:73:5f:e0:a8:4a:4c:30:a4:88:74:12:d6:
6b:92:5d:ed:97:f7:b4:07:a8:1a:18:c2:c0:1f:18:
a8:3c:56:0d:e9:b9:6d:6c:25:cb:24:f9:76:e8:8c:
6e:cb:f7:c3:46:4d:d6:12:18:8e:d2:e7:25:a3:59:
77:c1:0f:d6:8a:00:61:85:9b:00:ff:5b:0d:23:84:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:49:F2:3A:3E:99:C4:76:02:97:DD:71:04:B4:00:C8:35:D8:6D:19
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f400::/40
Signature Algorithm: sha256WithRSAEncryption
91:5b:62:a1:b9:95:d5:c1:06:88:a5:ef:8e:ba:a6:d4:81:27:
83:ce:9f:cb:41:58:24:df:bd:48:23:3e:5e:9c:ac:89:5c:a0:
c9:47:56:d0:a9:a3:10:80:4c:cd:08:22:6b:37:53:84:5f:98:
ca:33:ce:64:f9:80:8f:a7:0b:2f:6c:2f:f3:da:b8:90:5e:90:
00:92:bb:16:f6:c9:0c:c3:f9:f1:f3:92:68:09:8d:7f:01:9d:
31:b5:e6:c9:92:9c:8d:ae:46:bb:a8:78:e3:d0:62:97:0a:4f:
a4:c9:cf:78:c6:7a:e3:b5:b0:72:6e:22:ab:5f:ad:c9:9b:75:
d1:02:2a:c4:9e:fc:27:01:26:45:aa:7b:66:8a:84:66:47:99:
13:4d:42:47:98:e6:7a:37:0f:37:af:61:c5:ac:c8:d7:57:e8:
f2:10:53:41:35:78:2e:44:0f:f7:ae:25:0f:ee:86:9c:9f:8a:
17:99:56:06:b7:9e:86:4d:3f:b0:ec:b8:50:09:5e:61:d1:58:
b3:84:4b:f2:42:a0:ae:d4:bf:4b:e9:9c:a4:71:78:bf:21:eb:
8d:74:d7:d5:b8:7c:31:5b:b0:4f:01:62:aa:d0:ce:b7:3c:87:
71:cd:8e:19:b1:56:32:17:42:09:aa:b1:de:c3:66:81:15:00:
18:80:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:41:52 2026 by rpki-client