Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/CECA73092344CA9B6F74C1A83D6C747962186C47.cer
File: CECA73092344CA9B6F74C1A83D6C747962186C47.cer (raw, json)
Hash identifier: b48GK6pu25XY5rjJoB5+/XNdDquj2B3LVIXEIFMClFk=
Subject key identifier: CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 2CAE1204A571D4714A31C05F9458E7C0B1035266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 03 Jun 2026 13:33:24 +0000
Certificate not after: Wed 02 Jun 2027 13:38:24 +0000
Subordinate resources: IP: 2a0f:1cc5:2700::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ae:12:04:a5:71:d4:71:4a:31:c0:5f:94:58:e7:c0:b1:03:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 3 13:33:24 2026 GMT
Not After : Jun 2 13:38:24 2027 GMT
Subject: CN=CECA73092344CA9B6F74C1A83D6C747962186C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:9d:f8:09:83:04:3e:79:79:ec:e7:90:bc:
71:16:1b:a7:92:c4:63:d8:e6:69:83:a2:91:28:35:
ce:2e:87:53:07:8f:20:41:ee:27:fb:4b:9a:38:50:
3f:bf:4e:81:eb:a8:82:56:cf:0d:43:22:59:52:8f:
91:a1:40:5b:31:a9:77:e6:de:10:a0:bd:05:32:79:
ab:67:75:29:69:35:91:c9:18:62:ff:31:a6:fa:1d:
ae:34:04:68:3a:b2:d8:76:8f:b0:b2:7b:33:b1:39:
c5:f6:43:4e:5d:50:66:ed:32:61:05:8e:37:32:e6:
bf:b0:90:ef:f9:72:b2:d7:b5:df:7c:ff:ae:97:43:
48:4d:d1:d5:00:a3:46:48:2c:58:76:66:42:77:c1:
b9:fb:bd:de:de:22:f4:f3:80:48:52:a2:29:2b:76:
f7:37:55:20:d3:3c:08:cf:b0:a1:5a:44:2b:92:e1:
43:56:25:cd:80:31:58:48:c6:e9:d1:cf:d4:25:5e:
26:e3:0d:e6:47:bd:8e:b7:6a:51:b2:dc:21:2d:09:
35:f1:41:d0:04:19:b3:35:c1:b5:01:9a:bd:18:fe:
52:69:12:b4:23:7c:2c:04:23:30:cd:44:8d:49:df:
b6:f1:ff:78:9f:1e:26:b6:1c:e6:da:ac:c2:7c:4b:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CE:CA:73:09:23:44:CA:9B:6F:74:C1:A8:3D:6C:74:79:62:18:6C:47
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/2/CECA73092344CA9B6F74C1A83D6C747962186C47.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:2700::/40
Signature Algorithm: sha256WithRSAEncryption
71:e0:6a:9c:34:fa:86:9d:af:d4:f4:b6:7a:08:48:cf:be:af:
be:52:48:6c:2c:c6:3c:51:82:8b:32:d2:16:cc:b2:72:d6:a7:
ce:d4:27:94:1e:cf:c5:51:21:5d:a4:7d:70:d6:27:db:1e:d6:
6b:7e:ab:26:7c:21:56:80:bf:7e:2a:53:57:f5:8d:ab:59:ad:
08:ae:3e:5b:2d:32:bc:ce:66:67:f7:94:54:d0:83:98:8b:1f:
76:78:1f:a7:57:4d:5f:7b:24:d1:3b:4c:5d:3f:d2:02:f8:ff:
a6:87:34:43:56:e5:d1:11:5a:af:20:f4:e2:37:58:04:74:ae:
4a:62:c9:57:1b:03:52:a8:3d:98:4c:10:28:a1:f7:35:4c:7f:
1f:90:40:ae:9c:96:a8:c2:57:63:50:48:c8:2e:f7:ca:4f:46:
df:28:aa:e6:12:03:51:c4:b3:9f:f7:98:d8:b4:95:ae:ac:97:
39:d1:8b:6a:92:1e:4a:3c:78:ac:5d:a2:b1:48:66:67:95:3c:
93:cb:00:9d:0d:3b:f5:17:17:6d:ba:59:ec:68:72:ce:9d:71:
a0:11:be:e7:5d:5a:6a:0e:23:c4:07:a1:0c:fb:9b:70:e3:e0:
f5:96:8a:d4:1a:b1:43:8e:63:79:d9:95:7a:de:01:30:23:3d:
be:18:32:84
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIULK4SBKVx1HFKMcBflFjnwLEDUmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWJlMjQwMDIxYTI4N2YyOTg5NzNkOWVhMjhkZmM4MDcz
NWZkNTgwMDAeFw0yNjA2MDMxMzMzMjRaFw0yNzA2MDIxMzM4MjRaMDMxMTAvBgNV
BAMTKENFQ0E3MzA5MjM0NENBOUI2Rjc0QzFBODNENkM3NDc5NjIxODZDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeJ34CYMEPnl57OeQvHEWG6eS
xGPY5mmDopEoNc4uh1MHjyBB7if7S5o4UD+/ToHrqIJWzw1DIllSj5GhQFsxqXfm
3hCgvQUyeatndSlpNZHJGGL/Mab6Ha40BGg6sth2j7CyezOxOcX2Q05dUGbtMmEF
jjcy5r+wkO/5crLXtd98/66XQ0hN0dUAo0ZILFh2ZkJ3wbn7vd7eIvTzgEhSoikr
dvc3VSDTPAjPsKFaRCuS4UNWJc2AMVhIxunRz9QlXibjDeZHvY63alGy3CEtCTXx
QdAEGbM1wbUBmr0Y/lJpErQjfCwEIzDNRI1J37bx/3ifHia2HObarMJ8S2qPAgMB
AAGjggLjMIIC3zAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTOynMJI0TKm290
wag9bHR5YhhsRzAfBgNVHSMEGDAWgBQb4kACGih/KYlz2eoo38gHNf1YADAOBgNV
HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJhLTQ5
MzktOTVlOS0wMDc3YjgwYjRmMGUvMC8xQkUyNDAwMjFBMjg3RjI5ODk3M0Q5RUEy
OERGQzgwNzM1RkQ1ODAwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKG
SHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvRy1KQUFo
b29meW1KYzlucUtOX0lCelg5V0FBLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0w
XwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvMjI4NWJlNmYtNTExMS00YzNjLTgyNTQtZDJlNDE1NTEwMjg0LzIv
MIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS8yMjg1YmU2Zi01MTExLTRjM2MtODI1NC1kMmU0MTU1MTAyODQv
Mi9DRUNBNzMwOTIzNDRDQTlCNkY3NEMxQTgzRDZDNzQ3OTYyMTg2QzQ3Lm1mdDA8
BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqDxzFJzANBgkqhkiG9w0BAQsFAAOCAQEAceBq
nDT6hp2v1PS2eghIz76vvlJIbCzGPFGCizLSFsyyctanztQnlB7PxVEhXaR9cNYn
2x7Wa36rJnwhVoC/fipTV/WNq1mtCK4+Wy0yvM5mZ/eUVNCDmIsfdngfp1dNX3sk
0TtMXT/SAvj/poc0Q1bl0RFaryD04jdYBHSuSmLJVxsDUqg9mEwQKKH3NUx/H5BA
rpyWqMJXY1BIyC73yk9G3yiq5hIDUcSzn/eY2LSVrqyXOdGLapIeSjx4rF2isUhm
Z5U8k8sAnQ079RcXbbpZ7Ghyzp1xoBG+511aag4jxAehDPubcOPg9ZaK1BqxQ45j
edmVet4BMCM9vhgyhA==
-----END CERTIFICATE-----
Generated at Sun Jun 7 09:13:03 2026 by rpki-client