Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer
File: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer (raw, json)
Hash identifier: 8qz6ohTKsmQQiTVt/5B4D0nwZnVw06bNk0EVPQjEK/I=
Subject key identifier: D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 03BEF7312B3C021DAD6EEBD8AFEC53E7C9D10A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 02 Jun 2026 13:36:23 +0000
Certificate not after: Tue 01 Jun 2027 13:41:23 +0000
Subordinate resources: IP: 2a0f:1cc5:f00::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:be:f7:31:2b:3c:02:1d:ad:6e:eb:d8:af:ec:53:e7:c9:d1:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Jun 2 13:36:23 2026 GMT
Not After : Jun 1 13:41:23 2027 GMT
Subject: CN=D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:9d:5a:ca:44:99:e7:ca:09:87:f5:25:3b:
21:ee:19:69:42:26:c2:aa:9f:4b:13:33:3a:1e:a3:
88:cc:ce:a6:79:e0:d1:6e:22:a9:cf:bd:a6:35:01:
73:c8:59:44:fe:50:80:b9:c6:e3:1e:9e:eb:a5:e1:
d4:80:d9:77:1c:51:32:d6:9d:05:72:64:82:bc:7c:
db:7c:9f:66:3f:ae:b8:7d:73:18:61:40:d5:be:dc:
ee:e7:4f:71:c5:fa:1b:79:07:0f:f0:a2:9d:f3:f7:
3f:60:0d:a0:25:66:07:41:1a:5c:c4:0c:c3:d7:05:
47:4b:d0:26:50:28:85:3b:1e:28:2b:6c:ac:a9:db:
2e:73:45:7d:27:6e:5e:9a:a5:ac:8b:93:ab:c8:9a:
a4:43:66:08:ea:cb:2e:72:09:ea:7b:ad:46:41:03:
82:c3:8a:87:3b:e4:df:89:77:cc:b9:cf:a9:7e:41:
fd:22:35:65:f7:d8:c1:ab:89:7f:6e:c4:fb:77:08:
c2:c2:b9:1c:50:4e:4d:cb:76:38:aa:51:9c:5c:21:
bf:31:db:a6:c5:a1:a1:ce:68:37:fe:98:7f:13:bf:
e6:d1:dc:8b:ae:46:a7:e2:64:f9:5d:5f:7d:de:9e:
c3:70:49:eb:16:8a:92:69:39:16:ee:09:ad:5f:fc:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:EE:63:D9:B1:D2:D5:C6:FA:DC:9A:16:9E:9B:4A:F6:44:CF:37:E9
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/4/D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:f00::/40
Signature Algorithm: sha256WithRSAEncryption
87:05:95:01:3e:83:7b:9e:56:13:c1:08:3f:9d:3e:83:b8:ab:
86:87:82:d9:45:30:ba:95:a4:a2:c1:77:43:bc:34:31:20:f3:
c3:28:bb:5c:45:f4:65:71:94:24:99:8d:2f:1c:12:b5:b5:a8:
d8:5d:1b:f1:68:45:d3:8a:86:d3:ed:7e:7e:98:35:08:a0:e1:
65:6c:6b:a1:b9:bd:d5:b7:f4:ce:24:50:61:c5:da:41:14:39:
36:94:6e:62:85:3e:e0:63:9c:96:fe:8e:00:a3:d5:1e:04:5e:
59:9b:21:f3:40:64:b8:0c:f4:cd:0a:da:51:62:18:2b:de:d7:
50:fb:49:75:2b:95:02:a4:a3:cc:9b:6f:2a:0f:c7:d7:0d:74:
ca:8e:ca:96:71:1d:e6:17:4e:c5:ba:a5:0b:a2:0e:37:f3:2f:
60:dc:c4:4f:af:0e:18:9b:b6:cd:22:71:b9:02:4b:83:eb:74:
d5:7c:89:52:bf:43:f6:d6:64:63:f0:70:a9:4a:14:4f:33:f4:
70:30:4a:94:65:bc:46:3a:b8:21:3e:9a:a5:48:28:58:ce:ae:
22:aa:f0:25:2e:82:22:52:35:5b:f5:10:d7:cd:4a:40:c8:33:
d2:66:9a:9b:9b:38:4a:ff:8d:11:be:46:a9:dd:e8:c9:3c:39:
c0:f6:d2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:51:31 2026 by rpki-client