Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
File: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (raw, json)
Hash identifier: OcnJsnAo4CdRAC7bovVtlzwtakZNX8H8/1jz+FIMvfo=
Subject key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial: 5B888C97CB0AC123328BFAB1BD4BB8B9C9ADA7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Manifest: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
caRepository: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Wed 20 May 2026 07:41:23 +0000
Certificate not after: Wed 19 May 2027 07:46:23 +0000
Subordinate resources: IP: 5.83.192.0/19
IP: 37.1.224.0/21
IP: 37.230.48.0/20
IP: 77.75.192.0/21
IP: 109.107.48.0/20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:88:8c:97:cb:0a:c1:23:32:8b:fa:b1:bd:4b:b8:b9:c9:ad:a7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Validity
Not Before: May 20 07:41:23 2026 GMT
Not After : May 19 07:46:23 2027 GMT
Subject: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:1d:ed:3f:0d:51:75:72:45:24:70:52:50:
c2:58:bd:54:fe:13:38:02:af:81:14:09:a9:0e:c1:
f1:01:b1:fb:99:1b:5e:dc:cd:76:6d:df:7a:4c:32:
e1:7e:2f:ec:ef:f9:9d:c8:4a:34:62:19:00:a7:9a:
d4:dd:46:92:98:02:98:a1:c1:8f:a7:1f:0e:52:c7:
63:c6:f5:4e:18:2d:38:d5:56:43:ff:f4:a0:36:ac:
40:4c:64:9d:64:7c:df:e4:3d:b3:0e:ca:7e:1b:ad:
a0:48:dd:e0:40:d2:39:67:e0:50:99:48:92:84:30:
e4:05:be:52:b1:4d:5c:4d:25:89:0d:61:ee:98:1a:
28:17:04:ec:8b:42:19:3e:6a:01:f9:65:b5:63:d5:
43:ad:8a:bc:3b:97:53:23:da:3f:c5:fb:03:e6:72:
e8:7e:a4:09:64:6b:ca:76:5f:b6:c4:0e:eb:38:19:
12:d6:ff:f5:37:18:bf:8e:b6:33:bc:af:a6:5e:d7:
70:3c:b3:d8:e8:7a:40:00:a4:19:38:39:55:34:dd:
ce:41:8b:7b:e3:ac:cc:2c:33:04:c5:99:32:ce:3c:
06:67:1d:23:99:c4:f3:c7:36:10:b4:07:c4:d3:bc:
fb:14:dd:f8:4a:82:ec:2c:9d:f7:b7:f4:43:86:b2:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Authority Key Identifier:
keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/19
37.1.224.0/21
37.230.48.0/20
77.75.192.0/21
109.107.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:9e:f5:75:21:36:42:fa:a6:77:8a:0c:02:d8:66:08:13:9a:
b6:ba:f0:82:18:9c:17:03:16:c5:60:94:33:08:e0:56:71:de:
20:d0:84:cb:47:aa:57:82:ed:8c:04:01:93:49:1d:9a:9f:a6:
d8:b7:b1:7e:41:79:cc:68:b9:6a:92:84:97:04:c9:29:07:29:
94:cd:7e:31:87:6a:49:13:6f:4f:ed:c7:3a:be:30:0e:03:ff:
1d:3e:a8:4c:4d:76:89:1e:44:5c:30:39:43:5e:d3:ac:f8:2e:
74:fa:37:e9:a8:6f:16:0b:62:26:c7:77:83:0f:d2:1d:24:20:
90:e6:72:0d:48:92:14:00:f1:66:25:58:41:4d:95:04:4b:0e:
40:5c:a6:27:9e:0c:9f:0d:a4:df:05:d4:46:bd:67:22:85:e8:
40:3a:aa:ad:5d:45:ce:12:e4:7b:a4:0c:d1:4b:f2:44:26:3f:
bc:20:48:45:1b:84:b7:08:5e:48:6a:b5:57:7f:de:0f:cb:fc:
bd:20:3a:22:b4:96:b1:76:4c:93:9b:8b:12:d0:fa:c8:cc:4b:
bd:29:1a:bb:b8:7b:c0:48:e9:07:ba:44:b2:92:ed:9d:3f:fd:
68:3a:89:2f:9b:80:94:56:8e:69:e4:2e:58:8d:31:44:38:5b:
c5:b7:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 00:53:35 2026 by rpki-client