Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
File: 6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer (raw, json)
Hash identifier: 6g8mo9BpuyYZwy4Bx+Y4zXs6Vp3TNEg2+qnhTq5RDMg=
Subject key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5E1DEEA0C2F0655467DE246C3D1226E7D15EF3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 04:10:50 +0000
Certificate not after: Wed 22 Sep 2027 04:15:50 +0000
Subordinate resources: IP: 160.202.134.0/24
IP: 2a07:54c0::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1d:ee:a0:c2:f0:65:54:67:de:24:6c:3d:12:26:e7:d1:5e:f3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 23 04:10:50 2026 GMT
Not After : Sep 22 04:15:50 2027 GMT
Subject: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:87:52:ca:35:c0:d5:59:4b:89:7e:6c:84:
30:d4:51:b8:29:5b:e7:b2:51:f2:44:e5:d3:1d:d1:
06:48:84:8b:3a:77:9b:8a:5b:de:9c:68:da:0e:fc:
07:7c:cb:35:72:72:35:b3:76:0f:1c:e6:fa:16:c9:
7c:04:ff:9e:08:55:fe:01:3a:06:8d:1d:7b:66:a4:
8f:5e:05:7d:0b:ac:06:06:a4:c7:2a:9a:93:0e:b0:
72:28:a9:f5:f5:ae:e4:fa:5a:e2:41:ab:94:ea:a2:
99:88:a9:23:ec:28:1d:dd:8c:60:8c:33:b7:db:10:
8a:da:7d:5d:75:e0:53:14:5a:9e:3d:ac:bf:00:f2:
f9:97:3e:dd:9d:2e:85:d2:08:55:d4:f8:69:7f:a8:
f7:a8:6d:60:98:8f:80:31:0d:ce:b9:a2:5c:92:b2:
35:81:f3:64:92:d0:d9:a3:df:91:cf:64:9e:75:72:
14:cf:55:45:08:e1:00:68:89:93:a1:a0:c3:3f:0b:
21:cd:4a:7d:f2:a6:bd:2e:b6:05:9c:85:1c:bb:13:
48:1c:4d:81:9c:41:a0:6c:4d:67:ff:a2:a7:fe:4c:
f2:fd:1e:d9:74:ef:54:48:09:0d:ab:54:b4:b8:7d:
5e:bc:36:ab:9f:1c:59:c7:dc:78:d3:82:f9:0d:ac:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.134.0/24
IPv6:
2a07:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:e7:89:42:98:a3:22:38:f1:fa:a4:c1:4b:7a:23:ad:8e:84:
6a:a2:40:c9:85:ad:1c:27:ae:24:ab:8d:2b:bc:02:53:69:77:
9d:59:db:bc:59:18:af:c5:19:ce:fa:3d:d0:01:52:63:a8:01:
20:4d:46:95:98:2b:0b:d0:9e:95:f2:0b:e5:a7:6d:7f:ea:4a:
ad:b5:b2:f8:69:af:aa:28:d7:b5:e7:9b:45:f0:33:a1:d5:27:
7e:72:26:27:a8:0b:10:df:2a:54:86:40:df:e8:dd:7a:08:18:
54:af:af:fb:51:57:df:72:08:6b:b8:2c:33:99:28:1c:cf:c7:
a8:1e:34:56:8e:1e:e8:6c:79:02:91:f9:18:5d:8e:e1:3f:a7:
de:6b:f0:0b:83:05:a3:6d:ae:4b:91:8f:92:8c:dd:52:1e:b4:
cc:98:33:b6:de:25:b0:67:32:3b:7a:ff:e3:3f:4c:8b:42:b6:
b4:3b:1c:ea:43:ca:76:3a:e8:90:ec:4d:15:b2:a7:93:38:d8:
0b:ef:c3:dc:4c:56:92:09:e8:ee:8c:25:84:d2:0f:7d:f9:5e:
3a:67:40:c9:e8:e5:43:8b:91:47:0c:b2:59:ef:ab:1a:a3:7c:
67:10:ea:06:0e:39:50:ba:bd:d7:2f:e8:77:be:67:db:8f:c7:
46:f5:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:27:56 2026 by rpki-client