Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
File: 6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer (raw, json)
Hash identifier: 5/OsKtrcx5RzTStoXVdcXt4UDeFVMR/S1NdMuzPbquo=
Subject key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0BFEEBFB6F942C0CB78EF7866332449925A25860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sun 20 Sep 2026 08:51:10 +0000
Certificate not after: Sun 19 Sep 2027 08:56:10 +0000
Subordinate resources: IP: 160.202.134.0/24
IP: 2a07:54c0::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fe:eb:fb:6f:94:2c:0c:b7:8e:f7:86:63:32:44:99:25:a2:58:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 20 08:51:10 2026 GMT
Not After : Sep 19 08:56:10 2027 GMT
Subject: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:87:52:ca:35:c0:d5:59:4b:89:7e:6c:84:
30:d4:51:b8:29:5b:e7:b2:51:f2:44:e5:d3:1d:d1:
06:48:84:8b:3a:77:9b:8a:5b:de:9c:68:da:0e:fc:
07:7c:cb:35:72:72:35:b3:76:0f:1c:e6:fa:16:c9:
7c:04:ff:9e:08:55:fe:01:3a:06:8d:1d:7b:66:a4:
8f:5e:05:7d:0b:ac:06:06:a4:c7:2a:9a:93:0e:b0:
72:28:a9:f5:f5:ae:e4:fa:5a:e2:41:ab:94:ea:a2:
99:88:a9:23:ec:28:1d:dd:8c:60:8c:33:b7:db:10:
8a:da:7d:5d:75:e0:53:14:5a:9e:3d:ac:bf:00:f2:
f9:97:3e:dd:9d:2e:85:d2:08:55:d4:f8:69:7f:a8:
f7:a8:6d:60:98:8f:80:31:0d:ce:b9:a2:5c:92:b2:
35:81:f3:64:92:d0:d9:a3:df:91:cf:64:9e:75:72:
14:cf:55:45:08:e1:00:68:89:93:a1:a0:c3:3f:0b:
21:cd:4a:7d:f2:a6:bd:2e:b6:05:9c:85:1c:bb:13:
48:1c:4d:81:9c:41:a0:6c:4d:67:ff:a2:a7:fe:4c:
f2:fd:1e:d9:74:ef:54:48:09:0d:ab:54:b4:b8:7d:
5e:bc:36:ab:9f:1c:59:c7:dc:78:d3:82:f9:0d:ac:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.134.0/24
IPv6:
2a07:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:ac:14:8d:c8:38:4f:18:c7:56:e8:d3:02:5a:a2:0d:09:e2:
1b:f9:d7:2e:ac:a4:73:5d:76:36:c5:79:31:65:46:35:73:49:
ac:45:48:b6:77:5a:c6:14:9a:50:80:da:69:0c:53:4f:98:fc:
48:88:2d:9f:4a:ce:98:c3:3e:82:30:37:19:1e:1b:04:3c:d2:
f8:aa:7d:d4:69:17:b7:47:f5:3a:f4:24:ef:05:df:51:35:18:
d7:ca:e3:0d:6d:6b:ee:f1:bf:23:2c:47:76:6c:0c:ae:e0:fb:
37:97:1e:24:45:92:a5:0d:b5:cf:9b:fb:b8:88:78:e9:dd:0f:
d1:47:27:68:9a:41:b3:db:ac:3b:9a:c6:54:30:f5:ad:a0:34:
f8:0d:07:a0:99:b5:c3:d6:57:3b:c6:79:40:80:37:ae:f3:bb:
3a:79:a3:10:57:d5:24:ad:c9:38:73:10:f9:ac:cc:13:82:cc:
62:ac:ce:4f:35:b1:ef:c4:e3:52:4f:09:ed:e4:27:fd:ca:9d:
d3:17:1f:91:65:1d:97:7d:a0:3b:07:1b:0e:7c:24:9f:b1:94:
4a:7e:8d:04:fe:7f:e2:63:d8:09:33:01:83:0a:e8:5c:b8:76:
b5:df:c2:3a:58:b3:2b:df:73:f6:bd:60:c4:40:a9:67:79:d0:
39:e0:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:39:23 2026 by rpki-client