Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
File: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer (raw, json)
Hash identifier: UEak0LQwzsn8mxmJwbdEw9zR7OJAuXscPXD9aeOBE4o=
Subject key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 06E49F17A9CD221803129F6C05D4F6983D72F6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 18 Jun 2026 21:46:44 +0000
Certificate not after: Thu 17 Jun 2027 21:51:44 +0000
Subordinate resources: IP: 2a14:7581:3900::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e4:9f:17:a9:cd:22:18:03:12:9f:6c:05:d4:f6:98:3d:72:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 18 21:46:44 2026 GMT
Not After : Jun 17 21:51:44 2027 GMT
Subject: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:ac:db:5c:44:20:23:9e:58:80:69:d4:eb:
2e:2e:3f:f5:76:69:9b:ff:89:f5:ff:4b:4a:a9:9c:
4e:bb:46:cd:af:cf:d0:8c:7b:96:00:1e:72:93:25:
22:80:a3:71:c0:35:40:44:42:90:a5:7e:20:5f:50:
8b:4d:31:d6:59:94:37:cd:7e:a6:11:83:65:22:df:
e0:8c:9f:33:df:08:c5:5b:40:2a:8f:65:39:46:0d:
e5:1a:bb:16:60:cf:a8:c9:11:3e:f2:2f:19:4f:2c:
33:53:a4:67:13:9e:bd:fc:a4:21:70:06:1b:28:d8:
65:d2:c9:95:3e:91:48:e6:c6:2d:75:fb:b3:3c:0b:
d3:d4:2b:a9:db:2d:a8:c8:ca:19:41:db:6d:72:18:
be:66:4a:2e:4e:b3:7a:24:79:6d:d8:bc:e1:45:77:
09:70:c4:1a:a8:f1:b2:5d:a4:4a:58:db:e4:d4:b1:
eb:46:4c:20:5d:fc:a9:3a:f1:20:d8:72:e8:44:36:
32:f0:a7:f5:f0:64:2b:53:6d:c0:82:3d:e0:a7:a5:
aa:cc:2b:d0:fb:2a:c4:98:98:78:7b:73:0f:e1:a0:
e5:c3:6c:c7:dd:87:2b:3d:72:64:54:ca:d3:46:0c:
3e:ea:f1:83:ca:41:37:c2:c8:3c:e0:98:84:47:d0:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:3900::/40
Signature Algorithm: sha256WithRSAEncryption
61:58:48:e0:a4:b4:a3:47:e8:ba:d1:ef:b2:a9:33:79:cb:1a:
f9:8c:3b:cb:c0:f9:79:d4:8e:12:c4:6e:7b:97:3b:78:21:e2:
65:38:d1:76:ad:fa:8e:a2:6f:27:38:ad:eb:2a:2c:0d:c7:23:
b9:03:8a:bf:4f:58:c1:f5:b3:d1:b2:28:cc:fd:fb:37:a0:dd:
ec:69:76:4c:26:1e:9b:28:80:b6:21:85:6b:10:8b:aa:e7:05:
8a:11:75:47:9c:95:0e:29:15:0d:e4:f2:89:92:2b:6c:fd:d1:
cf:9d:fb:42:3b:22:d1:a0:b4:b9:02:79:2a:4f:f2:63:c5:2c:
a9:ab:06:d7:74:1c:0b:0d:e1:fd:9d:16:74:47:5e:f7:96:81:
a3:ce:3c:2d:5a:ab:0d:7d:7f:fc:ed:8b:a4:1c:3a:23:79:55:
b1:d7:d0:b5:bd:3f:61:56:47:9d:46:26:01:59:9f:b8:5e:d7:
64:3c:a2:09:e6:c6:2d:6c:ae:bf:a7:4c:62:4e:ef:d6:bc:a1:
db:d2:cd:df:21:2e:03:72:8d:30:57:45:bb:f3:2f:a8:7d:f4:
1a:80:f5:40:88:58:ac:b4:a7:4f:3d:d2:46:24:2c:c2:8a:9a:
eb:af:86:57:77:f3:66:28:99:9f:af:42:73:ea:1c:67:ec:1e:
4e:59:5c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:32:19 2026 by rpki-client