Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/E9AE8529E9A69A4FA376F17695E6EB8731823068.cer
File: E9AE8529E9A69A4FA376F17695E6EB8731823068.cer (raw, json)
Hash identifier: dFqdGNJGyhNc4FR0HT8lwz+FSurnI0qQ90Aym51itvE=
Subject key identifier: E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 05764B6BD8C2DECEAC414B179AFADE41BB7D107D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 27 Feb 2026 10:17:26 +0000
Certificate not after: Fri 26 Feb 2027 10:22:26 +0000
Subordinate resources: IP: 2a05:dfc5::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:76:4b:6b:d8:c2:de:ce:ac:41:4b:17:9a:fa:de:41:bb:7d:10:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Feb 27 10:17:26 2026 GMT
Not After : Feb 26 10:22:26 2027 GMT
Subject: CN=E9AE8529E9A69A4FA376F17695E6EB8731823068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:dc:40:30:a0:d5:66:6a:5c:e8:ed:ca:d4:
18:96:ec:e7:8f:43:f9:83:db:35:9a:96:5f:6b:4a:
62:26:ef:d4:61:85:e7:ea:fd:cd:f3:7c:55:2e:8c:
bb:94:89:80:d5:77:97:a1:d8:ff:9c:1f:f1:3a:03:
a2:3d:98:26:bb:2c:7b:12:a8:7c:ef:e9:e2:0a:70:
72:85:1b:ec:0b:4c:b9:20:90:95:6b:63:0b:8d:a6:
04:88:ad:71:0c:04:1e:5e:6e:d8:65:c4:ed:f9:3c:
5f:5d:56:d0:6e:50:ee:40:4a:bd:c6:c8:c5:96:09:
53:7e:96:2c:f5:1b:1c:72:11:1e:cd:a1:2e:d6:34:
10:0b:50:60:64:ac:f1:8b:dc:f6:63:ce:6a:10:be:
00:8c:6a:48:9d:71:e7:7d:e7:38:9e:b9:44:36:f0:
bf:65:28:15:d1:a2:f0:6a:a5:97:e8:9a:41:a9:0b:
b2:17:e5:d3:07:55:45:50:01:64:0b:cd:02:58:7b:
e8:26:d6:06:a8:9a:05:99:01:f9:8f:ea:3e:9c:ef:
ab:e2:34:d5:bb:b3:55:ba:76:5f:59:31:b8:49:64:
e5:ac:bf:50:38:5c:ec:de:43:e8:67:68:5d:cb:96:
52:aa:f6:ea:1a:0a:73:49:12:c2:e0:f8:cb:44:a6:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E9:AE:85:29:E9:A6:9A:4F:A3:76:F1:76:95:E6:EB:87:31:82:30:68
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/E9AE8529E9A69A4FA376F17695E6EB8731823068.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc5::/32
Signature Algorithm: sha256WithRSAEncryption
16:b4:6a:23:b2:ff:af:1f:d6:39:7a:4b:a0:ee:6b:bc:32:52:
47:de:41:e3:b8:81:85:3e:cc:e7:ac:40:2c:42:0c:df:1d:48:
9b:a6:c2:3d:23:80:76:e5:01:05:23:f8:d2:99:28:8d:31:3a:
02:88:cd:d1:88:0f:8a:b5:2c:ae:f2:ff:79:fd:30:d6:3b:96:
54:6a:f4:18:ab:49:05:f9:fd:38:4a:7e:be:d9:ab:41:a6:56:
9e:80:49:f4:19:16:2c:52:77:e7:fb:3f:b3:9f:4d:87:d6:7e:
92:94:5f:7b:18:4c:f1:c6:b4:59:b1:35:b3:91:fa:c6:c9:d2:
25:3c:f0:36:0a:06:41:1f:f2:2f:03:c6:04:20:99:ad:d1:70:
d3:69:4e:69:ae:a5:91:54:b9:17:fb:f5:d4:66:f0:2c:3a:b4:
8e:e1:db:38:fd:50:86:91:ba:39:ea:0a:36:98:0e:db:5c:23:
4f:35:0a:e9:2d:c1:8c:10:f6:90:04:5a:4e:a3:41:31:03:e3:
71:4a:fa:25:d1:98:00:76:9f:1c:fd:3d:10:11:97:e8:55:5b:
6c:04:6f:c9:71:92:af:d6:bb:9b:07:c8:de:4b:9e:c2:49:d6:
70:7d:a0:7d:04:12:76:82:5a:2a:09:03:4d:17:a0:cf:a7:da:
35:5f:e9:94
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUBXZLa9jC3s6sQUsXmvreQbt9EH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAyMjcxMDE3MjZaFw0yNzAyMjYxMDIyMjZaMDMxMTAvBgNV
BAMTKEU5QUU4NTI5RTlBNjlBNEZBMzc2RjE3Njk1RTZFQjg3MzE4MjMwNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAdxAMKDVZmpc6O3K1BiW7OeP
Q/mD2zWall9rSmIm79Rhhefq/c3zfFUujLuUiYDVd5eh2P+cH/E6A6I9mCa7LHsS
qHzv6eIKcHKFG+wLTLkgkJVrYwuNpgSIrXEMBB5ebthlxO35PF9dVtBuUO5ASr3G
yMWWCVN+liz1GxxyER7NoS7WNBALUGBkrPGL3PZjzmoQvgCMakidced95zieuUQ2
8L9lKBXRovBqpZfomkGpC7IX5dMHVUVQAWQLzQJYe+gm1gaomgWZAfmP6j6c76vi
NNW7s1W6dl9ZMbhJZOWsv1A4XOzeQ+hnaF3LllKq9uoaCnNJEsLg+MtEpi+PAgMB
AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTproUp6aaaT6N2
8XaV5uuHMYIwaDAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3
Ny03Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhl
OTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS85L0U5QUU4NTI5RTlBNjlB
NEZBMzc2RjE3Njk1RTZFQjg3MzE4MjMwNjgubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACoF38UwDQYJKoZIhvcNAQELBQADggEBABa0aiOy/68f1jl6S6Dua7wyUkfe
QeO4gYU+zOesQCxCDN8dSJumwj0jgHblAQUj+NKZKI0xOgKIzdGID4q1LK7y/3n9
MNY7llRq9BirSQX5/ThKfr7Zq0GmVp6ASfQZFixSd+f7P7OfTYfWfpKUX3sYTPHG
tFmxNbOR+sbJ0iU88DYKBkEf8i8DxgQgma3RcNNpTmmupZFUuRf79dRm8Cw6tI7h
2zj9UIaRujnqCjaYDttcI081CuktwYwQ9pAEWk6jQTED43FK+iXRmAB2nxz9PRAR
l+hVW2wEb8lxkq/Wu5sHyN5LnsJJ1nB9oH0EEnaCWioJA00XoM+n2jVf6ZQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:54 2026 by rpki-client