$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/140CF895225100CF571959173341D92070FF6E7C.cer File: 140CF895225100CF571959173341D92070FF6E7C.cer (raw, json) Hash identifier: GiVhe5wCSmxcIMA/bvZQYg7bw4oKTm6bJhvYg/eFDeY= Subject key identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C Authority key identifier: 83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E Certificate issuer: /CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Certificate serial: 0365EB8AC92DD247FCA9F27A1ECA271FDBA9A919 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 08 Sep 2026 02:53:47 +0000 Certificate not after: Tue 07 Sep 2027 02:58:47 +0000 Subordinate resources: IP: 2a14:7586:6200::/40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 17:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:65:eb:8a:c9:2d:d2:47:fc:a9:f2:7a:1e:ca:27:1f:db:a9:a9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83DE7037B8E20566D2FE89BA8917883B6B964E3E Validity Not Before: Sep 8 02:53:47 2026 GMT Not After : Sep 7 02:58:47 2027 GMT Subject: CN=140CF895225100CF571959173341D92070FF6E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:f4:0e:13:ea:ee:77:cd:5c:13:74:ed:1f: 1b:17:1e:e0:1e:cc:cf:6a:22:e8:99:3d:65:d7:65: 09:3e:7b:a5:c8:16:2a:1d:be:23:b7:30:5a:c0:dc: a9:7d:c2:6a:3f:67:1e:d9:e9:d6:18:ab:44:2f:1d: 61:24:99:40:e6:cb:bd:3a:ee:bb:49:4c:55:37:26: af:fb:a6:e3:16:8d:f4:22:c5:03:44:e0:61:14:77: 03:5b:8d:82:92:3d:ec:d6:c2:c0:47:2f:0e:2a:43: dc:df:88:5a:d3:17:70:34:74:96:b4:d7:d3:6d:8f: 0e:40:dd:ab:f0:1e:95:b5:59:72:e3:f3:bf:3a:28: 6e:46:dc:47:f7:1c:a7:9a:60:55:d6:e5:02:86:29: 95:cd:d1:6a:cb:a9:49:fe:be:4b:c0:7a:e8:ad:e3: e6:0d:c1:f3:7c:4a:75:4b:d3:d8:c4:04:09:43:8c: 07:92:44:62:ce:cc:90:55:d4:a2:77:01:b3:56:1a: b7:ec:72:7b:21:bf:d8:0c:62:a8:24:23:dd:d5:97: f1:f7:db:b2:3d:0a:c8:6c:5c:47:10:af:26:9e:2a: 62:ea:20:cb:5f:be:76:c7:cb:46:fd:e2:ae:f0:28: e5:a3:a7:a6:75:de:b9:89:f6:3b:9f:c7:a3:10:06: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:0C:F8:95:22:51:00:CF:57:19:59:17:33:41:D9:20:70:FF:6E:7C X509v3 Authority Key Identifier: keyid:83:DE:70:37:B8:E2:05:66:D2:FE:89:BA:89:17:88:3B:6B:96:4E:3E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/1/140CF895225100CF571959173341D92070FF6E7C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:6200::/40 Signature Algorithm: sha256WithRSAEncryption 18:34:a8:09:82:78:2a:07:7a:9d:a9:c7:c1:41:d9:74:b5:0b: 9a:21:2c:49:bf:7e:36:00:7f:71:0e:67:51:db:12:95:a4:6c: 05:e7:c5:1a:17:7c:6e:bd:9f:33:f0:02:f6:84:03:92:8d:04: 68:71:28:2c:9a:86:42:de:09:73:02:4f:9f:dc:b3:45:d2:45: 32:b6:e6:8e:0b:a3:f3:8c:70:64:73:10:8d:8c:f8:cf:75:32: a3:44:bb:6f:e6:9a:9b:36:bf:4d:f3:c5:b8:60:78:49:24:1b: 01:ce:5f:c0:87:a9:6a:75:9c:f2:cf:fd:86:25:17:8f:37:a4: 78:06:e6:a2:85:82:5d:8d:04:c9:6f:f0:78:78:70:a6:44:14: 31:71:f8:51:42:44:b5:e0:24:d6:aa:c1:e7:66:b0:af:f4:87: b0:f1:76:e7:e0:a6:7e:fe:c7:64:c6:b5:3e:7c:a5:9a:78:1c: fe:31:07:81:ca:88:89:45:ab:a8:0b:c3:bb:22:42:b0:f4:b8: d0:f3:cd:ce:8a:9e:66:52:05:4f:52:df:ca:d7:70:20:c7:02: 85:1b:14:e7:ce:f1:ea:a3:15:13:19:88:6f:50:7e:9f:86:d3: 3b:af:94:ab:bb:18:c1:bb:5f:e1:72:30:e8:4b:32:5e:e5:3e: c6:a4:0e:a4 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUA2Xriskt0kf8qfJ6HsonH9upqRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNERTcwMzdCOEUyMDU2NkQyRkU4OUJBODkxNzg4M0I2 Qjk2NEUzRTAeFw0yNjA5MDgwMjUzNDdaFw0yNzA5MDcwMjU4NDdaMDMxMTAvBgNV BAMTKDE0MENGODk1MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBGRjZFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZV/QOE+rud81cE3TtHxsXHuAe zM9qIuiZPWXXZQk+e6XIFiodviO3MFrA3Kl9wmo/Zx7Z6dYYq0QvHWEkmUDmy706 7rtJTFU3Jq/7puMWjfQixQNE4GEUdwNbjYKSPezWwsBHLw4qQ9zfiFrTF3A0dJa0 19Ntjw5A3avwHpW1WXLj8786KG5G3Ef3HKeaYFXW5QKGKZXN0WrLqUn+vkvAeuit 4+YNwfN8SnVL09jEBAlDjAeSRGLOzJBV1KJ3AbNWGrfscnshv9gMYqgkI93Vl/H3 27I9CshsXEcQryaeKmLqIMtfvnbHy0b94q7wKOWjp6Z13rmJ9jufx6MQBvZJAgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQUDPiVIlEAz1cZ WRczQdkgcP9ufDAfBgNVHSMEGDAWgBSD3nA3uOIFZtL+ibqJF4g7a5ZOPjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lODA1ZWE1Yy1kN2EzLTQ4 NDgtODM3Yi00Njk3Y2NkZDZlZmUvMy84M0RFNzAzN0I4RTIwNTY2RDJGRTg5QkE4 OTE3ODgzQjZCOTY0RTNFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wLzgzREU3MDM3 QjhFMjA1NjZEMkZFODlCQTg5MTc4ODNCNkI5NjRFM0UuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS8xNTE3YjVkMC0zMzE3LTRiNDktOGVjNS1iZTkw YmM3MDA2MmYvMS8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJl OTBiYzcwMDYyZi8xLzE0MENGODk1MjI1MTAwQ0Y1NzE5NTkxNzMzNDFEOTIwNzBG RjZFN0MubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYZiMA0GCSqGSIb3DQEB CwUAA4IBAQAYNKgJgngqB3qdqcfBQdl0tQuaISxJv342AH9xDmdR2xKVpGwF58Ua F3xuvZ8z8AL2hAOSjQRocSgsmoZC3glzAk+f3LNF0kUytuaOC6PzjHBkcxCNjPjP dTKjRLtv5pqbNr9N88W4YHhJJBsBzl/Ah6lqdZzyz/2GJRePN6R4BuaihYJdjQTJ b/B4eHCmRBQxcfhRQkS14CTWqsHnZrCv9Iew8Xbn4KZ+/sdkxrU+fKWaeBz+MQeB yoiJRauoC8O7IkKw9LjQ883Oip5mUgVPUt/K13AgxwKFGxTnzvHqoxUTGYhvUH6f htM7r5SruxjBu1/hcjDoSzJe5T7GpA6k -----END CERTIFICATE-----Generated at Thu Sep 10 11:12:40 2026 by rpki-client