$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/315EC08E540BCBC870FEB38832274E048E2E1F80.cer File: 315EC08E540BCBC870FEB38832274E048E2E1F80.cer (raw, json) Hash identifier: 9m0xCfQJFqthoaClvF4I5amZBD7zqwTDPas3YWk1zWg= Subject key identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 Authority key identifier: 80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E Certificate issuer: /CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Certificate serial: 1F5736494698C2CCB463B61A9A45EB5FE69B6EB9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 06 Jun 2026 03:22:43 +0000 Certificate not after: Sat 05 Jun 2027 03:27:43 +0000 Subordinate resources: IP: 2a0a:d685:1000::/36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/0E70AE0ACD0BE83D2D458CA207B1D4FFA3C3E4EA.mft rsync://rpki.ripe.net/repository/DEFAULT/DnCuCs0L6D0tRYyiB7HU_6PD5Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 19:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:57:36:49:46:98:c2:cc:b4:63:b6:1a:9a:45:eb:5f:e6:9b:6e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80838673ED291DC1ACFAE037E88F9C7A78B7127E Validity Not Before: Jun 6 03:22:43 2026 GMT Not After : Jun 5 03:27:43 2027 GMT Subject: CN=315EC08E540BCBC870FEB38832274E048E2E1F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:4e:81:4c:54:6b:d6:a8:c1:93:a7:fa:ad: ec:00:73:a6:4a:f6:12:5e:19:52:94:44:c0:20:ad: ea:54:8e:99:dd:04:91:00:24:e0:1b:f6:fd:b3:8f: 15:ea:e8:09:4e:c6:f9:12:04:bc:97:5e:40:52:b1: c3:7c:34:69:2e:7b:28:9d:75:15:c7:6c:cf:9f:a6: d9:23:cf:fa:fb:5f:9f:0f:83:0d:a7:6b:43:e9:da: e9:ed:f5:b5:07:64:59:ce:69:03:9f:a5:6d:ab:74: 19:77:05:7d:25:56:e5:d3:2d:c4:70:61:23:fc:65: 1d:29:2b:eb:99:d2:0f:72:16:cc:ca:ac:81:16:72: 43:08:cf:04:c2:24:08:df:59:4f:94:e9:29:5e:63: 0e:c8:63:27:b6:9f:dc:b5:88:c7:07:0f:b3:24:c1: c5:5e:ba:92:c9:b1:df:fb:c6:6b:b6:a0:60:77:ea: 5a:41:21:3c:11:c6:94:73:11:9d:9c:96:f4:6d:73: 42:ba:da:7e:9b:4e:f1:94:70:2d:54:c5:62:52:84: cc:b5:19:60:cc:68:eb:ac:a0:c9:71:21:5f:9f:5d: 1f:9d:80:20:0a:03:0c:2b:ff:90:07:b5:ec:01:62: bb:d5:4e:80:9a:c7:2e:3f:90:f0:ec:ed:fd:78:3d: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:5E:C0:8E:54:0B:CB:C8:70:FE:B3:88:32:27:4E:04:8E:2E:1F:80 X509v3 Authority Key Identifier: keyid:80:83:86:73:ED:29:1D:C1:AC:FA:E0:37:E8:8F:9C:7A:78:B7:12:7E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/5/80838673ED291DC1ACFAE037E88F9C7A78B7127E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/0/80838673ED291DC1ACFAE037E88F9C7A78B7127E.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/2/315EC08E540BCBC870FEB38832274E048E2E1F80.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d685:1000::/36 Signature Algorithm: sha256WithRSAEncryption 0a:ff:69:4b:7b:22:a5:4a:00:13:50:23:31:71:70:96:97:a0: 8d:be:17:c9:a2:30:2a:1a:f9:2e:e8:22:b3:2e:ae:aa:8a:b7: 8b:09:d4:a1:47:c2:d2:62:d4:54:13:2c:7c:f3:0c:e8:9a:11: ca:38:59:f9:f4:86:ea:25:5a:e1:8c:ca:af:47:bf:cc:78:c5: c1:03:8c:9e:5f:ea:a7:0f:0a:de:69:2d:a5:cf:26:43:22:81: 6f:5a:a2:c6:87:47:46:a9:f7:26:88:fa:28:1b:ac:06:74:ed: 66:1b:b1:a7:5f:6f:14:b2:d6:6c:13:9b:e5:74:5f:23:86:31: 49:9d:3b:2a:7e:61:5d:0c:74:fd:c2:74:af:4a:e7:47:95:7e: 00:a8:09:49:6b:ce:af:de:1e:8e:45:cf:f7:10:a8:98:2f:24: b1:f8:86:e1:3b:79:ca:63:7a:54:09:02:d5:10:3c:a8:52:a6: 0b:13:04:e5:11:9c:60:e4:fa:23:26:be:13:1c:b5:f9:dc:bc: 48:97:8e:cb:4b:71:ca:23:6c:88:4d:8a:ed:42:38:ec:9c:2d: 81:e1:52:ee:92:bb:6c:14:73:8c:51:d0:b3:73:2a:e1:be:c4: df:dc:a1:7f:ed:3c:98:c5:f2:d5:7f:9d:80:d9:e8:19:89:fd: bb:38:f6:7d -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIUH1c2SUaYwsy0Y7YamkXrX+abbrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA4Mzg2NzNFRDI5MURDMUFDRkFFMDM3RTg4RjlDN0E3 OEI3MTI3RTAeFw0yNjA2MDYwMzIyNDNaFw0yNzA2MDUwMzI3NDNaMDMxMTAvBgNV BAMTKDMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUyRTFGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HU6BTFRr1qjBk6f6rewAc6ZK 9hJeGVKURMAgrepUjpndBJEAJOAb9v2zjxXq6AlOxvkSBLyXXkBSscN8NGkueyid dRXHbM+fptkjz/r7X58Pgw2na0Pp2unt9bUHZFnOaQOfpW2rdBl3BX0lVuXTLcRw YSP8ZR0pK+uZ0g9yFszKrIEWckMIzwTCJAjfWU+U6SleYw7IYye2n9y1iMcHD7Mk wcVeupLJsd/7xmu2oGB36lpBITwRxpRzEZ2clvRtc0K62n6bTvGUcC1UxWJShMy1 GWDMaOusoMlxIV+fXR+dgCAKAwwr/5AHtewBYrvVToCaxy4/kPDs7f14PaY9AgMB AAGjggMeMIIDGjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxXsCOVAvLyHD+ s4gyJ04Eji4fgDAfBgNVHSMEGDAWgBSAg4Zz7Skdwaz64Dfoj5x6eLcSfjAOBgNV HQ8BAf8EBAMCAQYwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0yZmFlLTQ4 YTgtOTc5My0zM2VlYzA2N2NlMzkvNS84MDgzODY3M0VEMjkxREMxQUNGQUUwMzdF ODhGOUM3QTc4QjcxMjdFLmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAzLTc0M2IxNWVjMmE4ZS8wLzgwODM4Njcz RUQyOTFEQzFBQ0ZBRTAzN0U4OEY5QzdBNzhCNzEyN0UuY2VyMIIBPwYIKwYBBQUH AQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9kOWJkMzg4OC05MzAyLTRiNmYtYTAxNy0yYjRi YmE1ZTU3YmIvMi8wgYsGCCsGAQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Q5YmQzODg4LTkzMDItNGI2Zi1hMDE3LTJi NGJiYTVlNTdiYi8yLzMxNUVDMDhFNTQwQkNCQzg3MEZFQjM4ODMyMjc0RTA0OEUy RTFGODAubWZ0MDwGCCsGAQUFBzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJp cGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoK1oUQMA0GCSqGSIb3DQEB CwUAA4IBAQAK/2lLeyKlSgATUCMxcXCWl6CNvhfJojAqGvku6CKzLq6qireLCdSh R8LSYtRUEyx88wzomhHKOFn59IbqJVrhjMqvR7/MeMXBA4yeX+qnDwreaS2lzyZD IoFvWqLGh0dGqfcmiPooG6wGdO1mG7GnX28UstZsE5vldF8jhjFJnTsqfmFdDHT9 wnSvSudHlX4AqAlJa86v3h6ORc/3EKiYLySx+IbhO3nKY3pUCQLVEDyoUqYLEwTl EZxg5PojJr4THLX53LxIl47LS3HKI2yITYrtQjjsnC2B4VLukrtsFHOMUdCzcyrh vsTf3KF/7TyYxfLVf52A2egZif27OPZ9 -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:13 2026 by rpki-client