Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/1DB41D8CB909418AA27BBDED06CFB5857401E676.cer
File: 1DB41D8CB909418AA27BBDED06CFB5857401E676.cer (raw, json)
Hash identifier: GgfW5GLvAv5OBIP6ArECwOx82Kfhdf/6AmX8PKrpg+4=
Subject key identifier: 1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3898CFA1D10025F8F1A06349A8BBBA064C4D447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 06 Mar 2026 21:24:46 +0000
Certificate not after: Fri 05 Mar 2027 21:29:46 +0000
Subordinate resources: IP: 2a06:a002::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:98:cf:a1:d1:00:25:f8:f1:a0:63:49:a8:bb:ba:06:4c:4d:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 6 21:24:46 2026 GMT
Not After : Mar 5 21:29:46 2027 GMT
Subject: CN=1DB41D8CB909418AA27BBDED06CFB5857401E676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:b1:81:fb:60:bd:15:cb:d8:c5:c3:7c:9a:
97:df:e5:8a:22:01:f9:86:0c:83:9c:94:5f:9a:b2:
76:d7:6e:6b:b1:9d:e5:4f:ed:bc:c9:24:ca:fb:ed:
0e:51:4a:7b:12:12:71:84:2a:1b:9d:f9:d5:4c:0f:
f7:02:c5:f3:c4:3a:b3:49:a9:13:fe:23:40:4b:7d:
86:85:c8:85:35:93:87:70:6d:e0:c8:16:db:ee:e0:
b1:63:b1:99:7e:b7:05:90:cb:00:69:fa:4a:a6:58:
77:63:56:9f:58:a2:dd:f0:45:08:18:a7:25:e7:23:
a7:d8:0c:25:90:f4:5f:37:cb:95:bf:fc:6a:20:5f:
bc:c3:ad:c2:c0:d9:35:36:0f:98:f9:46:29:c3:8d:
95:55:68:c0:fa:ae:46:39:c3:2f:6b:c6:12:e4:df:
cf:43:9d:b1:35:8b:fd:d7:f1:0a:88:b5:de:cd:f6:
80:9b:00:9c:27:67:8a:d4:d0:88:c7:ac:98:a2:52:
0e:4b:77:af:11:24:c8:5f:b6:55:83:98:41:5a:47:
6d:03:78:fb:84:9a:a3:a0:44:f6:0e:dd:39:30:db:
e0:8e:4e:1a:a1:4f:6b:8b:c0:e9:cf:1c:97:cc:03:
0e:cb:65:cf:44:fe:d2:6f:25:31:e1:be:33:cc:6e:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1D:B4:1D:8C:B9:09:41:8A:A2:7B:BD:ED:06:CF:B5:85:74:01:E6:76
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/3/1DB41D8CB909418AA27BBDED06CFB5857401E676.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a002::/32
Signature Algorithm: sha256WithRSAEncryption
5e:96:1f:41:fb:9b:8c:e7:b3:d3:b2:45:dc:7a:33:98:29:e2:
c0:04:98:b5:7e:1e:f5:db:45:92:39:14:30:86:0d:cc:02:81:
84:60:56:5f:9d:b3:90:1c:04:c4:89:cf:b1:3b:16:a7:07:bd:
0d:cc:9f:b7:59:ce:28:07:d0:53:03:99:8f:cc:20:2f:12:03:
cf:b4:58:b7:ed:ad:a4:3c:09:37:33:6f:eb:7e:6c:91:19:4a:
d3:8b:cc:c4:b3:8e:4c:b8:77:9b:60:d4:d0:54:30:a5:4b:79:
61:e4:76:f4:a1:a1:16:5a:ce:9e:0d:6c:7d:df:36:65:ec:f2:
7b:32:bc:e6:87:b6:58:43:37:c2:6b:ec:a6:64:4b:e5:dc:63:
5e:3f:0b:ec:98:5f:a1:eb:47:79:71:af:b9:7d:c0:e6:96:b8:
33:fe:1d:89:04:4d:df:ed:33:86:61:f7:77:d4:55:e5:e5:f1:
d3:e9:90:72:ae:c0:44:67:7d:d6:12:f4:f7:c0:ce:de:50:88:
14:c1:1f:f1:d6:7d:62:e1:12:e9:ce:b2:21:ba:29:73:b1:1f:
50:75:4a:6d:c0:6b:70:9a:e1:8a:a8:e8:54:7f:75:30:3b:06:
cb:e3:f3:2b:ae:2f:9e:19:92:bd:25:94:9c:58:ab:78:bb:56:
4d:98:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:14 2026 by rpki-client