Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/2A91778ACCE76333081468D9784DE132C2985976.cer
File: 2A91778ACCE76333081468D9784DE132C2985976.cer (raw, json)
Hash identifier: k79O7mJIJslkmNMaHL/mjBLBylSynBeE9RXhHSAtAbs=
Subject key identifier: 2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 6B12DEFEEC488DED5FA8621F968D11DAF82F1C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 12:13:29 +0000
Certificate not after: Tue 01 Jun 2027 12:18:29 +0000
Subordinate resources: IP: 2a0f:1cc5:2600::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:12:de:fe:ec:48:8d:ed:5f:a8:62:1f:96:8d:11:da:f8:2f:1c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 12:13:29 2026 GMT
Not After : Jun 1 12:18:29 2027 GMT
Subject: CN=2A91778ACCE76333081468D9784DE132C2985976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:73:c9:d9:0f:13:94:4d:96:1c:45:c2:34:
f7:5f:9d:b7:1c:6e:f3:4b:91:28:d1:f0:6d:ff:27:
ba:90:75:21:2b:cd:42:71:a9:b7:07:c8:48:b8:d4:
2c:36:dd:4b:44:d7:5e:99:57:dc:c2:0d:39:dc:9b:
c9:53:35:92:1c:37:6f:5d:4a:66:cc:5a:fd:e2:65:
32:bb:9a:39:b7:d3:a1:3d:2d:e8:15:76:e9:3a:34:
d9:4e:21:21:60:9b:a2:a3:dd:d1:ad:d8:aa:85:24:
8e:fd:1b:9f:35:65:21:90:56:43:29:01:f1:3b:27:
38:d8:27:5e:7f:60:63:b5:f7:0b:69:42:4a:51:e4:
fa:1d:ea:22:8b:3d:7c:17:c4:97:6c:de:41:a1:f6:
07:74:a2:47:64:d7:48:78:68:dd:2c:cb:66:5a:26:
b3:34:31:9a:ea:11:d5:40:43:f3:19:c6:7d:49:12:
5d:51:de:2a:90:08:cd:60:cc:ef:55:88:29:dc:e9:
d8:e8:17:97:81:e1:68:b2:80:7c:d1:6d:b4:15:b4:
4d:ae:60:53:e8:e4:21:58:b5:19:85:14:25:6e:a9:
34:16:80:94:82:c3:41:12:25:3a:28:fc:ed:65:ee:
84:fc:55:4f:99:43:20:e6:25:57:ae:84:c9:cd:ad:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:91:77:8A:CC:E7:63:33:08:14:68:D9:78:4D:E1:32:C2:98:59:76
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/1/2A91778ACCE76333081468D9784DE132C2985976.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2600::/40
Signature Algorithm: sha256WithRSAEncryption
59:4e:e0:cd:c1:b3:20:5a:a0:b9:ce:1f:45:e3:71:65:11:30:
31:be:70:67:1a:d6:c7:00:dd:57:97:94:65:92:4e:44:69:26:
66:92:77:5a:c3:46:79:14:ee:d9:ca:f5:01:ac:cb:48:45:d1:
36:88:e9:e9:b2:2e:99:9a:9d:00:6a:34:dc:8c:9d:53:a6:85:
49:f4:04:fb:03:11:e1:84:2b:30:eb:56:f5:b1:73:f8:9b:3b:
e9:dc:ec:1b:24:06:5b:dc:bd:15:77:31:e5:52:97:f4:55:4c:
25:81:36:0f:32:4c:8a:30:64:71:17:ef:97:ce:6a:26:30:7e:
5c:13:cb:8b:f7:72:8b:d2:1c:9e:06:f6:bc:00:8c:33:8b:74:
9d:3c:d1:c6:a1:08:58:d6:23:8b:42:c6:70:d4:8d:f4:e0:fb:
db:d5:7a:8f:d9:87:ac:d7:d7:30:22:8f:d7:93:28:1a:93:65:
6e:7f:54:39:d5:5c:08:65:d3:43:55:36:63:f0:07:3f:5a:89:
c4:f4:75:7b:ea:36:ce:c2:cd:f1:f1:fd:66:6e:20:37:31:54:
70:06:5e:28:0d:d9:10:c1:b1:8b:6e:c2:f9:39:4e:9c:6e:15:
c3:22:6e:23:50:bf:cd:0b:8b:f6:da:60:95:6b:5d:6b:df:67:
6f:1c:43:4c
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUaxLe/uxIje1fqGIflo0R2vgvHB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDIxMjEzMjlaFw0yNzA2MDExMjE4MjlaMDMxMTAvBgNV
BAMTKDJBOTE3NzhBQ0NFNzYzMzMwODE0NjhEOTc4NERFMTMyQzI5ODU5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkknPJ2Q8TlE2WHEXCNPdfnbcc
bvNLkSjR8G3/J7qQdSErzUJxqbcHyEi41Cw23UtE116ZV9zCDTncm8lTNZIcN29d
SmbMWv3iZTK7mjm306E9LegVduk6NNlOISFgm6Kj3dGt2KqFJI79G581ZSGQVkMp
AfE7JzjYJ15/YGO19wtpQkpR5Pod6iKLPXwXxJds3kGh9gd0okdk10h4aN0sy2Za
JrM0MZrqEdVAQ/MZxn1JEl1R3iqQCM1gzO9ViCnc6djoF5eB4WiygHzRbbQVtE2u
YFPo5CFYtRmFFCVuqTQWgJSCw0ESJToo/O1l7oT8VU+ZQyDmJVeuhMnNrddJAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQqkXeKzOdjMwgU
aNl4TeEywphZdjAfBgNVHSMEGDAWgBQb4kACGih/KYlz2eoo38gHNf1YADAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8xQkUyNDAwMjFBMjg3RjI5ODk3M0Q5RUEy
OERGQzgwNzM1RkQ1ODAwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRy1KQUFo
b29meW1KYzlucUtOX0lCelg5V0FBLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvNDBjYmE2MWQtNDA1Ni00NmE5LTkzOTItYTYxZGZjNTAwZGM5LzEv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS80MGNiYTYxZC00MDU2LTQ2YTktOTM5Mi1hNjFkZmM1MDBkYzkv
MS8yQTkxNzc4QUNDRTc2MzMzMDgxNDY4RDk3ODRERTEzMkMyOTg1OTc2Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFJjANBgkqhkiG9w0BAQsFAAOCAQEAWU7g
zcGzIFqguc4fReNxZREwMb5wZxrWxwDdV5eUZZJORGkmZpJ3WsNGeRTu2cr1AazL
SEXRNojp6bIumZqdAGo03IydU6aFSfQE+wMR4YQrMOtW9bFz+Js76dzsGyQGW9y9
FXcx5VKX9FVMJYE2DzJMijBkcRfvl85qJjB+XBPLi/dyi9Icngb2vACMM4t0nTzR
xqEIWNYji0LGcNSN9OD729V6j9mHrNfXMCKP15MoGpNlbn9UOdVcCGXTQ1U2Y/AH
P1qJxPR1e+o2zsLN8fH9Zm4gNzFUcAZeKA3ZEMGxi27C+TlOnG4VwyJuI1C/zQuL
9tpglWtda99nbxxDTA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:23 2026 by rpki-client