Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer (raw, json)
Hash identifier: DX9DcEyttSWIVl2CurR2ZTN7hn7QOwzxG37xZKA/6+k=
Subject key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7B5D753AB2660F5D5A58CDCF5BEDFF04247A70E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 05 Jun 2026 05:28:06 +0000
Certificate not after: Fri 04 Jun 2027 05:33:06 +0000
Subordinate resources: IP: 2a14:7580:f300::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5d:75:3a:b2:66:0f:5d:5a:58:cd:cf:5b:ed:ff:04:24:7a:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 5 05:28:06 2026 GMT
Not After : Jun 4 05:33:06 2027 GMT
Subject: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:75:cb:9b:50:1c:89:9c:a5:fd:9d:b5:ed:
4b:9c:f5:6d:86:32:6f:43:cb:f0:00:91:83:b8:6c:
6e:48:e4:2e:e5:ad:e0:e7:05:0b:c6:76:6d:ff:29:
af:70:82:c4:b2:e9:ee:e1:eb:30:6a:17:e5:0d:cb:
c7:21:ef:b1:b8:d4:aa:16:0c:dd:14:b2:e5:61:66:
59:40:20:9c:fa:31:06:c9:b5:bc:21:ce:89:a5:a3:
c5:11:ea:12:92:98:2e:5c:c9:2e:d4:4e:a0:ad:53:
4c:50:88:f6:11:c5:db:4e:eb:d1:8e:be:ae:05:b1:
76:b9:ae:fe:7c:a8:15:9f:ba:5b:f9:08:b8:98:2b:
8b:94:81:dd:66:25:2f:37:38:92:e3:c4:05:7e:c8:
3f:67:24:01:76:c7:0e:9d:84:48:6a:bf:fa:f9:7a:
6e:86:c6:d9:1c:fe:d8:46:cb:cf:d3:d1:4d:15:7b:
d4:fa:bb:50:25:27:3c:07:91:ac:59:4c:47:1f:08:
92:4a:92:f1:47:d7:c3:52:5b:0d:c3:40:bb:6d:3b:
0e:08:a8:30:fd:a0:9b:81:2f:7e:f0:f3:85:de:0d:
61:72:a6:4b:ad:4e:4b:1c:65:62:88:0e:00:fa:96:
7e:ee:f7:a5:13:9b:e5:80:66:44:be:95:8c:6c:93:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f300::/40
Signature Algorithm: sha256WithRSAEncryption
7d:f3:19:72:0c:44:1d:43:7d:84:fa:4b:b0:02:b0:19:86:3e:
2e:5a:08:d0:cc:43:b3:99:3d:b1:2e:81:5b:f4:28:bc:c0:5e:
4e:af:29:2c:21:3c:13:8b:9a:e8:a1:35:21:94:02:88:70:62:
2d:fa:78:d1:a0:af:49:de:37:37:55:60:83:9d:09:8c:d7:67:
b5:c4:33:f6:65:37:da:ea:e9:cc:f0:21:43:4f:58:7f:fe:6b:
3f:8e:b4:05:01:55:cd:29:cc:9d:51:2e:1f:f5:aa:d5:89:e2:
37:e8:e1:22:96:68:ac:94:5e:4a:3d:42:4c:40:45:5d:d7:96:
89:cf:f0:a1:c9:69:0f:45:f6:dc:b7:30:f6:33:d9:86:83:04:
aa:d4:10:fd:1c:53:1d:60:9e:d1:a0:9a:1b:73:4c:f4:84:b1:
97:84:f9:4d:9d:d7:03:58:0f:19:92:c9:ed:88:af:82:36:1c:
74:bd:3e:a9:2e:cf:89:c5:19:1d:39:71:d7:03:06:ac:a0:70:
05:15:28:f9:05:57:5a:1d:92:77:18:04:07:6f:a5:4a:4a:40:
d1:87:bc:b8:45:66:5b:ca:25:e1:c4:b8:ce:5d:cc:a9:65:49:
7b:17:06:27:86:df:8f:ba:53:77:bd:a8:09:f1:56:6b:3c:4d:
5d:b8:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:33:18 2026 by rpki-client