Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
File: 06DB699D191D4B0289910C88E99CF94A671142F5.cer (raw, json)
Hash identifier: E4NpcakK9/UE6R8kPCZSjy3jjJHuVv36mGr/KfNYkSs=
Subject key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7FC69BE1715C1119438EEE7C42C47A319EE71F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Apr 2026 20:51:09 +0000
Certificate not after: Mon 26 Apr 2027 20:56:09 +0000
Subordinate resources: IP: 83.142.31.0/24
IP: 2a06:9f41::/32
IP: 2a06:9f46::/32
IP: 2a0d:d906::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c6:9b:e1:71:5c:11:19:43:8e:ee:7c:42:c4:7a:31:9e:e7:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Apr 27 20:51:09 2026 GMT
Not After : Apr 26 20:56:09 2027 GMT
Subject: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:be:be:52:97:48:c9:50:70:bf:44:35:1f:
09:f6:d0:20:70:ca:e4:8a:00:5a:f6:b1:58:90:f8:
69:cf:14:d0:c2:6a:6d:37:63:f6:b3:52:5e:1a:0a:
93:ee:85:d4:73:50:03:9f:17:ea:58:9e:20:bc:43:
61:e0:11:d9:ba:d5:76:15:48:03:ba:ba:5a:35:17:
1a:89:47:4e:83:2f:a1:e5:83:70:bd:08:a9:ef:d5:
2a:a5:bc:34:c5:60:4d:c2:a9:77:dd:4c:fc:3f:0a:
81:e1:b9:cc:20:54:e6:be:2f:65:d0:b7:65:cd:5b:
6a:ec:95:ea:a3:33:9f:f9:5d:f0:04:51:fa:08:dd:
3a:bc:f1:79:3f:fc:2e:7a:aa:ce:72:20:92:16:7e:
01:75:61:5b:b6:80:e4:81:25:69:08:50:c6:78:50:
2b:4b:2f:56:49:1b:70:a6:2b:e4:61:90:f3:09:9a:
58:0d:5d:f2:16:58:55:ff:d4:72:59:16:78:80:bc:
ec:2b:f6:39:22:62:c3:00:5d:63:84:f4:0b:21:68:
e0:ff:23:48:bb:63:42:63:77:b2:48:17:a9:5e:ed:
b2:fd:03:58:00:ce:8c:48:ee:9b:21:e6:25:de:20:
a5:55:4e:2d:d0:f2:38:db:21:e9:95:f5:4c:4d:9f:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.31.0/24
IPv6:
2a06:9f41::/32
2a06:9f46::/32
2a0d:d906::/32
Signature Algorithm: sha256WithRSAEncryption
46:b2:42:63:23:5a:98:72:84:26:71:41:a2:db:0a:f5:05:12:
68:27:6f:1f:d7:92:43:bc:fe:c8:9c:d7:bd:a3:84:f1:cd:ac:
b3:52:1b:5a:89:c6:33:d3:bb:ae:31:77:71:93:83:76:a8:f2:
e9:57:8c:f0:e0:5e:1d:bc:89:3a:9b:53:32:35:c6:fb:17:98:
b6:87:e1:ad:39:aa:ad:38:40:a8:e9:83:e8:57:58:b8:93:d6:
32:bf:f3:ed:6b:38:58:c2:fc:e5:1c:cd:9a:8b:ad:ee:ef:3d:
1e:0b:ed:da:84:51:80:1a:a6:4b:95:c1:4b:54:5f:3b:39:51:
63:25:02:58:5b:ac:5e:ae:f0:af:0d:b7:70:b7:30:7d:79:58:
9b:80:f0:4c:d3:e3:99:a4:8a:e5:f0:39:88:60:75:22:63:0e:
c2:00:e6:c6:c1:d7:63:7b:72:5a:2d:84:5c:b7:cc:5a:45:fd:
53:03:65:ff:18:f9:95:f7:32:56:bd:bf:e3:56:ba:e1:80:40:
cd:5c:05:24:7a:44:cd:c8:f1:74:47:02:0b:43:f2:ca:e8:7e:
03:dd:53:d3:a8:40:e0:d5:8a:b3:b4:10:b7:24:ca:f8:39:3b:
9c:94:d5:a6:44:2c:77:13:7f:f4:fb:2e:2b:e8:ad:c2:e7:c3:
82:76:85:2f
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgIUf8ab4XFcERlDju58QsR6MZ7nH58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA0MjcyMDUxMDlaFw0yNzA0MjYyMDU2MDlaMDMxMTAvBgNV
BAMTKDA2REI2OTlEMTkxRDRCMDI4OTkxMEM4OEU5OUNGOTRBNjcxMTQyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDr6+UpdIyVBwv0Q1Hwn20CBw
yuSKAFr2sViQ+GnPFNDCam03Y/azUl4aCpPuhdRzUAOfF+pYniC8Q2HgEdm61XYV
SAO6ulo1FxqJR06DL6Hlg3C9CKnv1SqlvDTFYE3CqXfdTPw/CoHhucwgVOa+L2XQ
t2XNW2rsleqjM5/5XfAEUfoI3Tq88Xk//C56qs5yIJIWfgF1YVu2gOSBJWkIUMZ4
UCtLL1ZJG3CmK+RhkPMJmlgNXfIWWFX/1HJZFniAvOwr9jkiYsMAXWOE9AshaOD/
I0i7Y0Jjd7JIF6le7bL9A1gAzoxI7psh5iXeIKVVTi3Q8jjbIemV9UxNnygnAgMB
AAGjggLuMIIC6jAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQG22mdGR1LAomR
DIjpnPlKZxFC9TAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0
ZC03ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMwMTE5
NDRkLTdlYjMtNGY2My1hMTU5LWNmZjAyYzAyNmFiZi8yLzA2REI2OTlEMTkxRDRC
MDI4OTkxMEM4OEU5OUNGOTRBNjcxMTQyRjUubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswDAQCAAEw
BgMEAFOOHzAbBAIAAjAVAwUAKgafQQMFACoGn0YDBQAqDdkGMA0GCSqGSIb3DQEB
CwUAA4IBAQBGskJjI1qYcoQmcUGi2wr1BRJoJ28f15JDvP7InNe9o4TxzayzUhta
icYz07uuMXdxk4N2qPLpV4zw4F4dvIk6m1MyNcb7F5i2h+GtOaqtOECo6YPoV1i4
k9Yyv/PtazhYwvzlHM2ai63u7z0eC+3ahFGAGqZLlcFLVF87OVFjJQJYW6xervCv
DbdwtzB9eVibgPBM0+OZpIrl8DmIYHUiYw7CAObGwddje3JaLYRct8xaRf1TA2X/
GPmV9zJWvb/jVrrhgEDNXAUkekTNyPF0RwILQ/LK6H4D3VPTqEDg1YqztBC3JMr4
OTuclNWmRCx3E3/0+y4r6K3C58OCdoUv
-----END CERTIFICATE-----
Generated at Tue May 12 22:08:16 2026 by rpki-client