
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
File: 6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer (raw, json)
Hash identifier: Z+JCit7vro2r1pgBlKb9tAXoL9LPjZeDZqlX5W7OQIc=
Subject key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 37C9877E1B9C7CCD4FC858A674F194792212EA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 23 Jul 2026 13:04:45 +0000
Certificate not after: Thu 22 Jul 2027 13:09:45 +0000
Subordinate resources: IP: 160.202.134.0/24
IP: 2a07:54c0::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c9:87:7e:1b:9c:7c:cd:4f:c8:58:a6:74:f1:94:79:22:12:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 23 13:04:45 2026 GMT
Not After : Jul 22 13:09:45 2027 GMT
Subject: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:87:52:ca:35:c0:d5:59:4b:89:7e:6c:84:
30:d4:51:b8:29:5b:e7:b2:51:f2:44:e5:d3:1d:d1:
06:48:84:8b:3a:77:9b:8a:5b:de:9c:68:da:0e:fc:
07:7c:cb:35:72:72:35:b3:76:0f:1c:e6:fa:16:c9:
7c:04:ff:9e:08:55:fe:01:3a:06:8d:1d:7b:66:a4:
8f:5e:05:7d:0b:ac:06:06:a4:c7:2a:9a:93:0e:b0:
72:28:a9:f5:f5:ae:e4:fa:5a:e2:41:ab:94:ea:a2:
99:88:a9:23:ec:28:1d:dd:8c:60:8c:33:b7:db:10:
8a:da:7d:5d:75:e0:53:14:5a:9e:3d:ac:bf:00:f2:
f9:97:3e:dd:9d:2e:85:d2:08:55:d4:f8:69:7f:a8:
f7:a8:6d:60:98:8f:80:31:0d:ce:b9:a2:5c:92:b2:
35:81:f3:64:92:d0:d9:a3:df:91:cf:64:9e:75:72:
14:cf:55:45:08:e1:00:68:89:93:a1:a0:c3:3f:0b:
21:cd:4a:7d:f2:a6:bd:2e:b6:05:9c:85:1c:bb:13:
48:1c:4d:81:9c:41:a0:6c:4d:67:ff:a2:a7:fe:4c:
f2:fd:1e:d9:74:ef:54:48:09:0d:ab:54:b4:b8:7d:
5e:bc:36:ab:9f:1c:59:c7:dc:78:d3:82:f9:0d:ac:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.134.0/24
IPv6:
2a07:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:7a:df:ad:d2:f0:61:b5:78:42:19:fb:98:a0:f3:cd:8e:0f:
fb:3c:5b:f3:22:af:80:a6:a8:58:d1:30:dc:e1:54:4f:a2:98:
cf:f5:88:d9:dc:65:ef:f9:c2:19:26:0c:76:08:77:8b:08:67:
f7:bb:3e:d9:45:f9:9d:d7:a0:e0:b1:5d:65:92:c3:45:be:e1:
28:5a:c3:bd:23:a5:4c:2c:05:60:2f:de:f5:b0:ed:3c:91:cc:
8e:b4:f1:1f:72:67:a4:e4:bd:18:81:cb:5a:74:f9:1d:07:f9:
cc:2d:89:9b:3d:43:e4:16:4a:44:73:50:ec:78:08:54:c3:23:
88:29:03:d4:77:15:8d:a4:e7:d6:8d:34:0e:f0:70:e7:ea:71:
fa:7b:3c:60:ec:2c:ff:e5:ab:21:80:7d:f2:f1:bd:05:a8:4f:
7f:ee:0a:cb:e2:86:99:7d:cc:2c:5f:91:b1:33:fd:3e:eb:25:
35:ee:a4:0f:72:f4:7e:df:44:58:40:8a:eb:b8:64:cd:00:6e:
5c:3b:a1:6e:2c:81:e5:4f:30:69:b5:ba:d2:14:aa:cc:47:ab:
8c:45:9c:09:59:e1:d4:9c:13:d2:a2:9e:90:1c:5a:7f:32:6e:
4b:76:fe:c0:d6:73:74:14:31:be:26:e7:17:42:95:c8:08:3d:
27:f8:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:51 2026 by rpki-client