Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer
File: 15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.cer (raw, json)
Hash identifier: jBkaBwr8+GDCPad2/OOK+khIIIOrtoST3bP3NweoM1c=
Subject key identifier: 15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 153029DD14AB3C1C8217E16D55DC7E5DCDCBB730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Apr 2026 23:57:31 +0000
Certificate not after: Thu 01 Apr 2027 00:02:31 +0000
Subordinate resources: IP: 206.245.166.0/24
IP: 2a0a:6047::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:30:29:dd:14:ab:3c:1c:82:17:e1:6d:55:dc:7e:5d:cd:cb:b7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Apr 1 23:57:31 2026 GMT
Not After : Apr 1 00:02:31 2027 GMT
Subject: CN=15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:8a:5f:05:d6:0b:5d:c0:bb:69:76:4a:45:
7c:9e:8f:9a:16:71:26:b6:78:4a:e4:cf:96:c3:15:
4c:0b:c8:a1:20:f2:44:7d:c9:b9:74:14:a3:e2:a6:
7d:02:72:f3:6a:12:04:31:81:e4:13:9e:4e:39:b0:
7d:c1:ba:d9:14:d5:13:ca:43:a7:91:2c:13:3e:80:
5b:bb:c0:ce:1d:4d:bd:54:b5:6f:3c:f1:13:b4:a5:
03:f7:8e:26:69:ef:49:f0:08:ef:38:04:55:bc:a0:
37:ad:d4:a6:27:a6:d5:67:a6:88:8b:b7:73:13:a3:
6a:33:89:1c:57:bb:84:fd:2a:c2:b8:81:a8:d2:36:
d0:7b:27:a4:d0:fd:bc:e5:19:13:22:c9:03:48:8f:
09:8e:78:f4:35:d8:05:ab:b4:13:ea:3a:ee:7a:42:
b7:ae:aa:68:5a:72:46:c3:a4:fa:98:c5:ec:df:3d:
91:47:6d:d4:2d:41:53:0f:4d:06:19:1a:d7:56:ff:
1d:15:87:2a:cb:ea:f0:53:5f:dc:7b:85:76:8a:24:
c6:77:87:80:7b:3a:23:60:6f:2b:d2:ed:33:d4:37:
87:fe:a7:41:57:21:3a:d6:d4:56:bc:b2:46:34:aa:
70:fc:9d:b2:6f:5a:34:83:0f:26:90:f8:24:e5:e2:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
15:C5:EB:6C:15:A7:32:AD:C3:1B:15:CF:7A:9F:0F:E4:3C:3B:23:58
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b2d61ce3-e091-40f0-92ed-d9f01c94afd1/1/15C5EB6C15A732ADC31B15CF7A9F0FE43C3B2358.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.166.0/24
IPv6:
2a0a:6047::/32
Signature Algorithm: sha256WithRSAEncryption
87:4a:75:b4:d6:60:cc:6e:8e:39:4f:72:dd:96:d3:3f:af:22:
28:03:c1:5b:10:92:08:af:4d:53:d5:6e:64:90:c2:82:ac:67:
e6:64:9b:38:15:4d:0a:1e:6c:ea:45:5a:4f:29:c0:16:a3:54:
1b:f0:04:07:04:77:12:b2:dd:85:65:81:37:60:65:5c:ad:03:
bd:d5:c7:46:23:06:03:84:36:2d:85:02:81:58:dd:00:f1:0e:
f1:c4:db:15:2b:c2:a7:2e:a0:24:e2:c1:e6:b2:8b:6e:e6:26:
7a:da:bb:81:b7:a6:78:d2:f6:b6:d3:06:c7:73:e7:5f:e2:34:
87:39:87:e0:32:20:46:ce:5b:71:64:74:a0:8e:41:e1:e3:34:
f9:85:37:cf:fc:a8:c8:59:91:df:66:5b:f6:7e:53:fc:af:88:
36:49:c4:8b:49:f8:7b:f6:49:8c:4f:72:4d:0a:bd:dd:51:0c:
4e:90:8c:77:a1:65:45:0d:d2:c1:85:59:1e:fd:68:ab:77:e3:
86:30:04:9f:89:31:a6:2b:29:57:0d:7d:fc:5f:cf:a4:e4:2c:
eb:06:a2:ee:5d:43:aa:8d:22:cc:b9:0f:e7:ed:ba:c0:76:eb:
99:70:db:f1:26:35:2f:05:82:8b:45:89:ca:6e:83:cf:7c:a8:
83:48:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:40:01 2026 by rpki-client