Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer
File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer (raw, json)
Hash identifier: 7TBAc8I50fAsle8mCiVpFIJ0IbYwmzWrSQpscH8/nFE=
Subject key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3BC6D4F1F3BA5E684F0274892EC584DBE0172F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Sep 2026 04:06:49 +0000
Certificate not after: Mon 06 Sep 2027 04:11:49 +0000
Subordinate resources: IP: 136.148.75.0/24
IP: 206.53.0.0/24
IP: 2a0d:d905::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c6:d4:f1:f3:ba:5e:68:4f:02:74:89:2e:c5:84:db:e0:17:2f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 7 04:06:49 2026 GMT
Not After : Sep 6 04:11:49 2027 GMT
Subject: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:7e:33:0f:c3:f6:fc:c7:f2:eb:87:ed:b6:
ff:28:38:fe:9e:a9:bb:bc:1a:2d:13:54:8a:4a:6e:
8d:12:42:46:40:8f:87:ee:4f:ca:43:25:c7:f9:9c:
60:30:f9:d8:86:47:d0:16:64:a0:b4:a3:2f:c3:cb:
12:6d:da:a7:de:a6:cd:3b:0d:f5:77:ab:64:8c:5a:
03:07:c1:26:34:a5:33:6d:2e:46:bf:08:9b:48:d2:
35:70:63:bf:31:71:31:77:f8:40:00:80:c9:a6:9f:
a8:48:03:84:2d:79:d4:1d:d8:2b:f0:69:5e:26:4a:
51:5b:b2:15:aa:82:74:72:ab:d7:48:41:d3:56:82:
0e:8c:32:6b:28:ad:4c:53:71:05:ad:bc:01:56:a4:
29:1c:b0:77:94:e9:8e:20:ea:b1:ed:ab:25:4a:97:
b5:00:9c:ed:df:b1:67:5f:71:91:34:38:84:3c:7c:
09:3e:c8:a8:bf:0e:cd:c7:1b:cc:2d:28:38:6f:b1:
49:b7:f7:08:03:a5:8f:1b:c3:f8:4a:5a:45:64:34:
b3:39:36:25:4b:05:ff:22:d8:3e:26:aa:31:da:5f:
49:e9:19:a5:bd:ab:90:3a:a2:ce:bd:f4:e4:d1:6d:
2b:a4:35:71:dc:59:e8:f0:af:34:53:7e:12:6c:da:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.75.0/24
206.53.0.0/24
IPv6:
2a0d:d905::/32
Signature Algorithm: sha256WithRSAEncryption
9c:2c:81:1b:74:60:d6:18:4f:8e:7d:47:45:28:69:50:11:72:
7f:6d:69:45:32:a9:22:4a:c1:55:e0:ed:61:d6:e1:e3:d7:bd:
6c:13:12:bc:d0:41:5d:6c:f1:14:63:3e:fb:c0:1c:be:26:cd:
0f:f9:ee:f5:d2:01:fc:9b:bc:77:a3:61:a7:b2:53:14:b1:7c:
58:f8:22:c5:e9:77:5a:a8:52:b2:0c:a5:06:80:f2:5b:6a:6e:
aa:8a:e7:a9:30:44:1c:cd:06:e8:b5:03:d9:51:a5:6e:8c:ad:
26:29:27:96:55:3f:ed:65:bd:e8:07:8a:52:07:17:2e:c0:9e:
67:59:d3:fc:59:0f:6a:7c:71:75:cb:b4:36:21:ac:28:ce:2b:
cb:b1:4e:97:98:22:38:82:8d:94:5c:0a:8d:ed:1c:8e:38:bd:
31:7c:2f:aa:e8:20:f1:8e:1d:04:35:5e:6d:72:a6:b1:b0:21:
9c:6e:2f:24:0d:b6:fe:f6:23:bf:9f:4e:16:ed:08:51:e4:44:
74:3b:c3:fc:d4:f9:e0:b7:ef:c4:1e:1d:e0:b3:fd:4a:73:52:
9a:29:c2:51:89:4c:16:87:96:e3:6d:bf:db:0a:02:58:db:97:
b4:c1:4d:a9:69:89:f0:e6:6e:63:00:f1:90:5b:1f:9a:37:fa:
34:23:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:34:06 2026 by rpki-client