Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
File: B75F3781BC9C2E7301754988659F92686704E570.cer (raw, json)
Hash identifier: OcCFB4sSwrjXj/QK03L65VGkPSZw+7J0wQiw29OPYrI=
Subject key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1BA8E4703156CBBFC8BA154BB766C48D593158FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 12 Oct 2026 03:52:50 +0000
Certificate not after: Mon 11 Oct 2027 03:57:50 +0000
Subordinate resources: IP: 2a14:7582:4000::/35
IP: 2a14:7583:ef50:: -- 2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 17:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a8:e4:70:31:56:cb:bf:c8:ba:15:4b:b7:66:c4:8d:59:31:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 12 03:52:50 2026 GMT
Not After : Oct 11 03:57:50 2027 GMT
Subject: CN=B75F3781BC9C2E7301754988659F92686704E570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:4a:77:de:1c:07:6c:5d:57:72:73:50:76:
19:e2:13:2b:93:4e:61:9d:ad:25:6c:33:de:5d:81:
79:ab:df:70:33:de:dc:28:96:78:8c:66:df:5a:07:
c9:7b:0a:ec:74:b1:b4:a5:2d:74:0b:69:4a:7d:59:
e7:fc:28:26:44:b4:f6:10:d4:f0:d1:ea:ec:68:c7:
f7:fa:6b:b1:7c:9a:fc:fb:b1:e9:9a:2c:59:20:32:
20:fd:79:ae:eb:47:8e:b5:8a:f0:67:7b:78:32:0d:
26:1f:ad:ef:37:25:dc:0d:bf:d6:3e:3a:77:51:be:
74:7b:82:be:5a:c4:57:d5:b8:4b:de:21:58:b6:61:
07:be:39:3b:5e:9c:fe:be:52:1b:0c:7c:77:9a:fe:
14:44:fe:7e:1b:ae:7c:c5:70:83:50:9b:04:3d:1c:
02:b4:e6:b1:91:62:ad:f7:a3:bb:27:29:f6:fe:46:
fa:1b:3e:83:3f:b4:43:9c:40:6a:8b:35:ba:af:d1:
a9:ee:1c:d5:c9:c5:be:ac:41:c9:26:33:7d:24:52:
64:4e:0c:02:f6:a9:99:98:fd:71:02:bd:3f:83:df:
b6:13:9c:85:b7:f9:5b:e0:78:26:eb:dd:a4:4f:bf:
69:1c:41:5f:a6:f7:af:2d:4d:7e:87:0a:9f:ca:bd:
73:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7582:4000::/35
2a14:7583:ef50::-2a14:7583:ef6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:17:df:d0:b1:5f:ce:40:cd:e7:e2:55:e2:fc:8a:84:b8:ec:
9b:7c:53:1c:28:89:81:5b:f6:a1:84:68:c8:c0:cd:4e:96:ba:
3a:af:e1:37:88:98:85:0e:ca:ec:ba:31:16:25:04:fb:9e:28:
32:0a:69:4c:c6:4c:ad:4c:06:3e:26:a2:92:cd:6d:04:52:dd:
b5:f8:c7:5b:ea:d2:55:e2:45:2a:87:43:47:03:5b:66:88:69:
0b:ca:58:41:ac:7f:9d:c1:0b:4e:0b:32:69:3f:60:2f:7d:40:
5c:b9:aa:ed:48:e9:db:a1:68:65:cc:05:db:ce:29:78:33:35:
51:e5:a9:cb:dc:13:e7:06:de:21:e8:8b:bd:9f:47:dd:ac:24:
7e:5e:ad:a6:62:8e:ec:39:f3:78:92:d7:27:95:ef:fb:b9:16:
27:6b:63:99:4c:1b:83:67:ff:26:a8:10:d9:cb:e0:58:7c:14:
22:46:34:97:10:79:3f:0d:4d:ca:3b:1b:57:8d:d2:0c:05:46:
50:8d:cf:ae:09:f7:9d:fb:0b:90:ed:f6:3c:69:76:64:14:36:
34:45:48:4b:08:c7:db:dd:7f:fb:8e:53:15:d5:c5:f9:0e:c0:
5a:17:bd:6e:e6:8c:5e:a9:0a:a1:8b:0f:94:91:4a:9a:37:e7:
29:fc:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:56:34 2026 by rpki-client