$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer File: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (raw, json) Hash identifier: vYGonux44s3TgewlYrrqNYb7AvM/5XVRjdpid9S48+w= Subject key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 75C8221635355A377C70E8FF894438D11094A6E0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sun 19 Jul 2026 20:23:29 +0000 Certificate not after: Sun 18 Jul 2027 20:28:29 +0000 Subordinate resources: IP: 2a0a:d685:1000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c8:22:16:35:35:5a:37:7c:70:e8:ff:89:44:38:d1:10:94:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jul 19 20:23:29 2026 GMT Not After : Jul 18 20:28:29 2027 GMT Subject: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:4e:81:4c:54:6b:d6:a8:c1:93:a7:fa:ad: ec:00:73:a6:4a:f6:12:5e:19:52:94:44:c0:20:ad: ea:54:8e:99:dd:04:91:00:24:e0:1b:f6:fd:b3:8f: 15:ea:e8:09:4e:c6:f9:12:04:bc:97:5e:40:52:b1: c3:7c:34:69:2e:7b:28:9d:75:15:c7:6c:cf:9f:a6: d9:23:cf:fa:fb:5f:9f:0f:83:0d:a7:6b:43:e9:da: e9:ed:f5:b5:07:64:59:ce:69:03:9f:a5:6d:ab:74: 19:77:05:7d:25:56:e5:d3:2d:c4:70:61:23:fc:65: 1d:29:2b:eb:99:d2:0f:72:16:cc:ca:ac:81:16:72: 43:08:cf:04:c2:24:08:df:59:4f:94:e9:29:5e:63: 0e:c8:63:27:b6:9f:dc:b5:88:c7:07:0f:b3:24:c1: c5:5e:ba:92:c9:b1:df:fb:c6:6b:b6:a0:60:77:ea: 5a:41:21:3c:11:c6:94:73:11:9d:9c:96:f4:6d:73: 42:ba:da:7e:9b:4e:f1:94:70:2d:54:c5:62:52:84: cc:b5:19:60:cc:68:eb:ac:a0:c9:71:21:5f:9f:5d: 1f:9d:80:20:0a:03:0c:2b:ff:90:07:b5:ec:01:62: bb:d5:4e:80:9a:c7:2e:3f:90:f0:ec:ed:fd:78:3d: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1000::/36 Signature Algorithm: sha256WithRSAEncryption 89:32:b7:51:39:f2:5a:87:a8:0c:e4:e0:d8:b7:62:10:de:12: 76:36:5f:a5:de:7c:78:ed:20:2a:5e:0f:ad:9d:e8:b7:51:40: 5c:c4:c6:ff:15:34:80:4b:16:3b:91:79:42:60:9c:8b:31:db: 53:19:1f:32:d5:4a:8d:09:f1:f9:51:ff:73:f1:df:b6:79:db: 9a:ee:0b:ce:de:5c:cc:f6:32:ff:33:1a:4a:3c:95:f9:12:ba: ac:a6:41:74:4d:ae:7d:b9:97:e3:b2:6d:35:72:3c:b2:76:cc: 53:b3:3f:cd:8d:d6:a9:c5:fa:a5:4d:22:ca:d4:e3:76:fd:a5: 70:ca:74:39:c7:90:51:e3:4f:8c:64:fd:72:21:f8:db:55:76: 96:99:89:b1:04:1f:ab:44:bf:85:e4:f5:4e:93:a0:bb:de:18: 48:02:21:0f:8e:3a:a6:46:9f:e6:6c:d8:d7:a9:9e:9e:82:0a: dc:aa:a2:e6:c1:1b:68:78:98:3e:3c:a6:7e:36:3b:e3:ad:36: 09:b3:6f:27:90:8f:fd:b8:63:45:61:45:f7:89:a8:c8:54:8e: d2:68:92:18:92:16:8c:2b:61:ab:47:7a:46:fc:68:24:f4:e9: 09:4d:6a:fe:23:f3:b1:62:04:92:9d:49:b0:81:24:9d:d2:96: b4:95:0c:c8 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUdcgiFjU1Wjd8cOj/iUQ40RCUpuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA3MTkyMDIzMjlaFw0yNzA3MTgyMDI4MjlaMDMxMTAvBgNV BAMTKDMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HU6BTFRr1qjBk6f6rewAc6ZK 9hJeGVKURMAgrepUjpndBJEAJOAb9v2zjxXq6AlOxvkSBLyXXkBSscN8NGkueyid dRXHbM+fptkjz/r7X58Pgw2na0Pp2unt9bUHZFnOaQOfpW2rdBl3BX0lVuXTLcRw YSP8ZR0pK+uZ0g9yFszKrIEWckMIzwTCJAjfWU+U6SleYw7IYye2n9y1iMcHD7Mk wcVeupLJsd/7xmu2oGB36lpBITwRxpRzEZ2clvRtc0K62n6bTvGUcC1UxWJShMy1 GWDMaOusoMlxIV+fXR+dgCAKAwwr/5AHtewBYrvVToCaxy4/kPDs7f14PaY9AgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxXsCOVAvLyHD+ s4gyJ04Eji4fgDAfBgNVHSMEGDAWgBSAg4Zz7Skdwaz64Dfoj5x6eLcSfjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRi YmE1ZTU3YmIvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJi NGJiYTVlNTdiYi8yLzMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUy RTFGODAubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoK1oUQMA0GCSqGSIb3DQEB CwUAA4IBAQCJMrdROfJah6gM5ODYt2IQ3hJ2Nl+l3nx47SAqXg+tnei3UUBcxMb/ FTSASxY7kXlCYJyLMdtTGR8y1UqNCfH5Uf9z8d+2edua7gvO3lzM9jL/MxpKPJX5 ErqspkF0Ta59uZfjsm01cjyydsxTsz/NjdapxfqlTSLK1ON2/aVwynQ5x5BR40+M ZP1yIfjbVXaWmYmxBB+rRL+F5PVOk6C73hhIAiEPjjqmRp/mbNjXqZ6eggrcqqLm wRtoeJg+PKZ+NjvjrTYJs28nkI/9uGNFYUX3iajIVI7SaJIYkhaMK2GrR3pG/Ggk 9OkJTWr+I/OxYgSSnUmwgSSd0pa0lQzI -----END CERTIFICATE-----Generated at Tue Jul 21 23:28:56 2026 by rpki-client