Certificate
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer
File: BBEBABAA438AC450DCBB53966538E554E6B5F7BE.cer (raw, json)
Hash identifier: A5T0f/kMVo0SOwQKo7QQ7m9n3RxnEN9qMKL5xhWsmKo=
Subject key identifier: BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 200004A57301636E6CA97D020896E397737E5877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 03 Sep 2026 20:08:48 +0000
Certificate not after: Thu 02 Sep 2027 20:13:48 +0000
Subordinate resources: IP: 2a14:7581:3900::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:00:04:a5:73:01:63:6e:6c:a9:7d:02:08:96:e3:97:73:7e:58:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 3 20:08:48 2026 GMT
Not After : Sep 2 20:13:48 2027 GMT
Subject: CN=BBEBABAA438AC450DCBB53966538E554E6B5F7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:81:66:fc:bf:19:e7:5d:32:1a:ec:27:50:
61:63:11:4e:eb:de:99:7a:5e:d6:55:7d:c7:00:76:
dc:23:e2:ec:0b:8c:6d:5f:ac:e9:c1:76:fb:4d:83:
5e:85:0d:4c:0f:10:01:e8:a3:86:a7:64:e1:fe:ee:
58:d4:56:31:0f:01:d9:a0:18:f7:3d:dc:32:a8:08:
5f:bc:08:91:d3:f3:0c:81:85:5b:26:e7:33:42:ed:
02:a0:2e:6d:7c:70:3f:49:9b:37:ab:e7:1c:b0:1a:
31:8d:96:4b:11:01:9c:2c:cd:d0:a6:06:79:65:1c:
58:d9:8d:e0:b6:70:86:cf:70:82:da:dc:3c:81:1d:
8d:14:f9:80:6d:05:da:74:91:96:4e:ff:8f:b8:1d:
c3:25:ca:04:20:58:4f:87:27:e5:f2:28:ab:d8:e3:
74:48:e8:bc:69:95:52:35:43:43:8e:19:bb:80:1f:
6a:e4:a6:6a:9d:e7:c5:f5:53:08:8c:b8:35:3a:6b:
15:21:cf:a0:71:b3:35:c0:90:27:b4:aa:21:00:72:
c2:a3:46:99:48:40:3d:99:06:c3:44:f3:c0:07:07:
33:8b:aa:01:8f:6c:a4:07:70:d2:07:94:d5:98:c9:
0a:40:12:3c:bc:c8:8f:ee:08:46:ca:db:7c:69:04:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BB:EB:AB:AA:43:8A:C4:50:DC:BB:53:96:65:38:E5:54:E6:B5:F7:BE
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/03791bfb-c1de-4bbf-8390-cc28b1d415ab/0/BBEBABAA438AC450DCBB53966538E554E6B5F7BE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3900::/40
Signature Algorithm: sha256WithRSAEncryption
7b:be:3b:98:03:34:fc:c4:78:3f:7b:4f:86:b4:52:72:3a:6d:
c0:d5:10:03:b7:1b:bc:db:06:d3:e1:0f:a7:38:ef:07:d3:ef:
61:99:06:5a:e2:a8:4c:e9:37:89:20:e2:1f:4c:6e:fd:6a:bf:
8e:a6:7b:09:74:18:99:40:60:17:96:e8:98:ac:cb:09:97:64:
dc:3c:29:6c:51:bd:90:9d:92:79:e3:4d:4c:79:c6:d4:9d:54:
39:b3:db:f1:d2:e2:93:4f:07:c4:97:6e:be:ca:9f:75:69:f6:
e8:0a:23:b5:80:f6:5e:33:0d:fc:7f:8b:85:00:1c:06:ba:f2:
6e:1d:8a:25:d0:e6:98:fa:3d:b4:80:a9:f6:27:88:7d:19:54:
de:99:61:24:d1:81:e7:7c:33:cf:db:98:f0:9c:2d:7c:c2:a5:
9f:e1:8e:e9:d1:be:14:f2:0c:9b:93:af:78:67:55:b6:be:aa:
9f:9e:d3:47:96:39:04:b4:67:42:7d:23:d7:7f:cd:e4:15:81:
b9:87:9e:c5:3e:6c:bc:15:21:03:69:01:d1:5a:bb:24:d6:36:
6d:62:55:7f:6b:ff:d2:e2:7c:d1:f0:76:41:5c:38:ad:24:02:
37:bc:de:c3:13:74:e2:f7:2d:64:f0:4b:b0:d0:64:73:b8:f2:
b3:55:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:55 2026 by rpki-client