
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
File: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer (raw, json)
Hash identifier: F/m4T2/xXcDtvjPL7VF/LPVbjCkjmNbn5P0CWEZbcpE=
Subject key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 33F3EE3C2005A0F3364A3CF049FD1EB91515B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 02 Mar 2026 03:22:21 +0000
Certificate not after: Mon 01 Mar 2027 03:27:21 +0000
Subordinate resources: IP: 111.235.151.0/24
IP: 2a09:54c3::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f3:ee:3c:20:05:a0:f3:36:4a:3c:f0:49:fd:1e:b9:15:15:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 2 03:22:21 2026 GMT
Not After : Mar 1 03:27:21 2027 GMT
Subject: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:8d:1b:a7:8f:7d:d6:d4:55:2a:9a:1e:e5:
c5:d5:4e:20:5f:ce:51:55:ac:3e:62:37:02:95:b0:
56:bb:01:59:b4:54:20:ce:4b:24:ac:29:52:64:a9:
90:d2:53:24:84:b5:8e:36:cc:bd:92:d3:50:b6:b9:
aa:06:0b:71:d6:27:9b:cf:1e:68:4a:36:b4:03:20:
55:bc:83:97:ac:1a:96:70:3c:af:36:13:63:f3:2c:
54:82:f8:40:42:f9:6f:21:e9:f7:85:68:b7:57:c6:
34:0e:b4:a5:b3:53:99:c9:7a:8a:6b:6e:43:a7:3f:
ea:22:33:57:fc:7e:7e:ad:01:4a:bd:0f:45:82:0c:
35:3a:ec:dd:6e:88:e5:79:89:b5:2a:d1:4a:4a:77:
48:b6:0f:e8:51:f0:bb:41:36:31:be:f1:4c:78:4b:
52:47:79:1f:4b:9d:e3:50:fa:a5:d6:44:f2:03:c2:
ae:be:b2:33:85:d1:c4:61:28:8d:99:67:54:e1:74:
4b:3f:32:df:9b:a5:a9:4f:84:60:9e:0f:4c:99:a7:
30:90:ff:f1:ba:fd:28:cc:7f:f2:b5:23:e4:bc:ab:
8d:be:cd:17:f8:3a:62:59:05:0e:0e:cb:94:02:95:
44:44:59:c0:df:9b:7b:f1:07:1e:e0:48:8a:54:4a:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.235.151.0/24
IPv6:
2a09:54c3::/32
Signature Algorithm: sha256WithRSAEncryption
a7:a7:0d:6c:58:55:17:24:05:3d:ed:a5:aa:fc:f2:65:9c:3d:
1a:c2:64:71:65:60:33:e8:37:15:87:8d:61:61:53:d9:d3:73:
e1:76:62:f8:51:91:dc:d1:6b:c1:dd:8f:ad:f4:ec:4a:c4:f9:
9f:b0:97:67:5e:fc:86:77:9b:6e:79:92:c8:49:83:a5:86:83:
a9:dc:e5:07:bf:c2:8b:f4:6e:7c:59:03:f9:f1:a6:cc:9c:53:
a4:0d:2d:b3:1a:ac:e7:a6:09:5d:7d:5d:37:ac:3b:d3:e7:3b:
b9:06:d6:38:d4:34:8a:3f:ff:d2:f4:4c:fd:f4:38:c4:3f:75:
7d:f2:43:c8:9d:6c:ae:30:32:5d:f8:54:3a:7e:78:28:c9:d8:
48:70:40:24:00:ee:8f:e4:8a:91:ca:0d:0f:65:73:5c:ec:65:
1f:7e:b0:28:e4:b4:81:91:68:c2:9f:ba:7b:c8:33:f5:2f:21:
38:cb:73:7b:ca:b7:85:fd:d3:ed:55:01:71:81:f5:46:88:6b:
12:76:01:ff:02:a0:31:07:24:aa:59:d3:21:60:e6:c9:5d:f5:
00:a2:57:bf:be:5c:0e:96:f4:f9:a0:62:f7:73:32:9a:17:bc:
4c:f6:90:d9:b7:98:4c:b3:06:c0:ed:28:e6:ed:3a:a4:56:30:
fa:ce:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:39 2026 by rpki-client