
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
File: 4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer (raw, json)
Hash identifier: DTqUoZX8lurCHxuhTsy7RPUENuG73V3ubBAjCP77FBE=
Subject key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3D413FA1822B112D316A61C75AA4E1777135A0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 10 Mar 2026 05:54:06 +0000
Certificate not after: Tue 09 Mar 2027 05:59:06 +0000
Subordinate resources: IP: 103.68.111.0/24
IP: 2a06:1283::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:41:3f:a1:82:2b:11:2d:31:6a:61:c7:5a:a4:e1:77:71:35:a0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 10 05:54:06 2026 GMT
Not After : Mar 9 05:59:06 2027 GMT
Subject: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:c7:29:71:d2:05:1a:83:8d:23:e8:bc:e2:
81:83:cb:27:e7:f4:34:b3:98:25:79:41:5c:98:02:
74:e0:7c:80:78:01:5c:c7:79:57:6b:94:8e:ab:70:
83:52:c1:ba:be:89:b7:c7:c1:52:ad:3f:0a:12:4b:
76:93:08:50:9b:4e:17:f9:d9:9a:f3:90:97:39:60:
de:87:83:09:06:e5:5a:39:6b:50:b6:2e:67:25:0d:
ba:82:7a:e4:df:b7:fe:f4:c5:80:1c:e6:80:04:84:
b0:40:7f:b6:d7:3d:03:7b:15:24:06:7f:99:70:0a:
7a:7e:82:47:9e:a3:ed:a1:77:c8:3c:76:cb:dc:c4:
ec:10:7c:95:55:e3:e6:71:bf:36:1c:87:5c:14:fa:
0a:d1:83:6c:03:06:36:c5:9d:aa:73:cf:02:e7:23:
2d:de:6d:2b:1f:1b:af:8f:23:2d:04:81:e9:ce:29:
8d:5a:a3:84:e2:25:58:94:27:82:51:96:5a:1f:06:
ad:54:a5:c6:93:a3:55:d0:74:5a:2b:63:44:f8:b0:
26:63:90:44:ec:ce:f0:94:be:bd:2f:99:0a:b2:62:
3a:c1:23:1f:08:74:de:30:f1:96:66:f8:ef:09:b3:
fa:75:b4:be:a9:32:27:4b:ae:1b:4c:71:1d:1b:b1:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.111.0/24
IPv6:
2a06:1283::/32
Signature Algorithm: sha256WithRSAEncryption
72:47:d4:6b:f7:df:51:34:3c:59:44:3c:49:3c:2f:a3:66:60:
89:66:73:79:0c:a8:9d:71:3a:6f:23:90:af:ec:c2:d9:d0:c2:
a9:a9:5b:f3:f1:70:e9:78:a7:e0:78:30:f6:5b:a2:6a:58:0b:
cb:98:55:11:26:a0:d6:ac:ba:77:a9:65:46:83:46:cb:67:0a:
05:4f:39:bc:a7:e2:c7:cc:b9:17:47:42:15:22:22:e3:fc:12:
28:1c:19:57:d7:80:fc:69:26:5c:e9:77:3b:d8:22:fc:6f:2c:
4c:2d:11:b2:e0:65:4c:e7:92:16:ed:b6:48:bc:91:72:ee:71:
61:9a:3a:71:12:b7:7d:ef:0d:34:b9:79:9f:60:32:40:9d:ae:
12:54:e1:19:dd:9e:51:8c:ff:7e:25:26:8d:99:cc:44:07:de:
75:23:b2:46:95:6f:9c:e5:f4:ed:b5:d5:d6:39:ba:6f:f4:bc:
48:00:70:a8:d3:e6:83:00:db:3c:72:90:38:a1:3f:58:72:b5:
54:7c:33:78:bc:7e:c0:2a:45:54:db:1b:cb:d5:82:3d:45:6e:
c4:a2:9f:53:9e:2e:e9:53:19:70:d0:73:5a:e8:55:e8:95:a0:
59:68:63:7e:6f:2a:bf:fc:7f:5e:f0:3e:0f:19:be:0f:ab:7a:
64:45:53:aa
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIUPUE/oYIrES0xamHHWqThd3E1oN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAzMTAwNTU0MDZaFw0yNzAzMDkwNTU5MDZaMDMxMTAvBgNV
BAMTKDQ4MDdDMTE4QkQzNDg5MzRCNUNDNTlCM0U4QTdBOEMxNEYyOUMzRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcMcpcdIFGoONI+i84oGDyyfn
9DSzmCV5QVyYAnTgfIB4AVzHeVdrlI6rcINSwbq+ibfHwVKtPwoSS3aTCFCbThf5
2ZrzkJc5YN6HgwkG5Vo5a1C2LmclDbqCeuTft/70xYAc5oAEhLBAf7bXPQN7FSQG
f5lwCnp+gkeeo+2hd8g8dsvcxOwQfJVV4+ZxvzYch1wU+grRg2wDBjbFnapzzwLn
Iy3ebSsfG6+PIy0EgenOKY1ao4TiJViUJ4JRllofBq1UpcaTo1XQdForY0T4sCZj
kETszvCUvr0vmQqyYjrBIx8IdN4w8ZZm+O8Js/p1tL6pMidLrhtMcR0bsRrJAgMB
AAGjggLgMIIC3DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRIB8EYvTSJNLXM
WbPop6jBTynD+zAfBgNVHSMEGDAWgBTRS2/PKyxpvghen5WYcty+jqVBdzAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC83L0QxNEI2RkNGMkIyQzY5QkUwODVFOUY5NTk4NzJEQ0JFOEVBNTQxNzcu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wVXR2enlzc2FiNElYcC1WbUhMY3Zv
NmxRWGMuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5
Yy0yMDU4LTQzYmItOWFjNi01YWI0MmRmYmY0MDkvNC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJhZjcz
YTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS80LzQ4MDdDMTE4QkQzNDg5
MzRCNUNDNTlCM0U4QTdBOEMxNEYyOUMzRkIubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEAGdEbzANBAIAAjAHAwUAKgYSgzANBgkqhkiG9w0BAQsFAAOCAQEAckfUa/ff
UTQ8WUQ8STwvo2ZgiWZzeQyonXE6byOQr+zC2dDCqalb8/Fw6Xin4Hgw9luialgL
y5hVESag1qy6d6llRoNGy2cKBU85vKfix8y5F0dCFSIi4/wSKBwZV9eA/GkmXOl3
O9gi/G8sTC0RsuBlTOeSFu22SLyRcu5xYZo6cRK3fe8NNLl5n2AyQJ2uElThGd2e
UYz/fiUmjZnMRAfedSOyRpVvnOX07bXV1jm6b/S8SABwqNPmgwDbPHKQOKE/WHK1
VHwzeLx+wCpFVNsby9WCPUVuxKKfU54u6VMZcNBzWuhV6JWgWWhjfm8qv/x/XvA+
Dxm+D6t6ZEVTqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:52 2026 by rpki-client