Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer
File: 3E79C5264AB5000AFC4D60DE568B75AD67FEC129.cer (raw, json)
Hash identifier: Hk4gRbZqrAzvlocj+6jha8Zg1h2rfyPre8BtA3N/l40=
Subject key identifier: 3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5CBB70FF54281604BA74C881D3C256D548023CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 20 Aug 2026 03:31:44 +0000
Certificate not after: Thu 19 Aug 2027 03:36:44 +0000
Subordinate resources: IP: 85.155.126.0/24
IP: 2a06:a004::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:bb:70:ff:54:28:16:04:ba:74:c8:81:d3:c2:56:d5:48:02:3c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 20 03:31:44 2026 GMT
Not After : Aug 19 03:36:44 2027 GMT
Subject: CN=3E79C5264AB5000AFC4D60DE568B75AD67FEC129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:45:8c:f6:32:cd:29:9c:49:aa:4f:0d:eb:
26:a2:d3:55:d0:76:c4:e9:29:9b:b0:ee:fd:f2:cb:
e4:34:3c:71:8b:df:a5:97:9f:b5:af:d6:02:82:0a:
0e:26:bd:58:a2:21:c0:73:0b:e4:87:2b:f2:4c:4f:
da:5c:11:99:c1:de:3d:44:7a:db:0b:be:f2:d8:38:
93:27:da:f0:56:ac:cf:82:f5:9b:89:6e:8a:0c:1f:
e5:a1:93:ab:e8:9b:f8:82:2e:7b:ce:7f:25:76:fa:
9e:a2:90:b5:b6:12:cd:d4:6f:d3:f4:08:07:68:47:
28:8f:58:4a:3c:56:a8:af:00:f2:45:13:7c:05:57:
9b:28:c0:f3:38:08:83:1c:8e:48:0a:48:7c:19:8f:
9f:24:ca:c2:05:aa:bf:88:92:ce:d8:e8:68:55:fa:
aa:ae:b0:51:75:99:bf:1b:a8:15:86:63:7d:52:9e:
11:84:87:dd:cc:81:49:a5:22:b5:a2:3c:02:33:a1:
68:ea:f7:9b:a9:49:79:c2:af:6f:8e:89:81:19:fe:
73:cb:8d:60:4a:3d:b1:8a:89:8b:4d:d8:ff:fc:67:
2b:fe:64:4b:d7:59:f3:ab:05:db:76:14:bf:ca:aa:
c6:63:50:50:04:fe:c6:4b:c9:d5:54:c8:a8:0b:cb:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3E:79:C5:26:4A:B5:00:0A:FC:4D:60:DE:56:8B:75:AD:67:FE:C1:29
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2e257df-9930-44e6-866e-41a489865232/1/3E79C5264AB5000AFC4D60DE568B75AD67FEC129.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.126.0/24
IPv6:
2a06:a004::/32
Signature Algorithm: sha256WithRSAEncryption
4c:2a:7c:7d:29:78:9e:c1:bc:a9:0f:b3:d2:be:82:2c:58:0f:
80:a3:fb:76:a4:0e:af:77:2c:b2:17:8e:d2:5a:3c:f0:75:e1:
57:b6:1c:2a:0e:3d:d8:25:b9:d7:2c:da:c3:c8:ea:f2:6a:8a:
d0:cb:59:b8:d6:c8:ba:ef:e4:c3:04:16:a4:1b:76:7c:a4:b6:
92:b7:75:01:83:98:55:e5:5f:12:e1:e3:d0:50:90:7e:b7:76:
bb:55:d3:7d:c7:82:97:07:a0:c0:94:1c:81:5c:d6:72:85:f6:
1b:2e:44:aa:e8:2f:48:4c:2a:ae:f2:0c:b8:c2:85:09:85:d0:
1c:1a:c7:48:c9:44:42:e7:17:f5:fa:95:99:a7:f5:1f:6a:f8:
f0:c2:df:72:9d:5a:c1:51:d8:d3:1b:11:bf:9a:04:5b:0c:5d:
89:3c:8c:79:88:6b:5a:d3:66:3d:a3:27:fa:b8:d2:d4:c3:e3:
f4:08:1e:c3:fe:3a:c5:bf:3d:05:30:6d:f6:28:1f:8b:d9:5f:
64:93:d7:a9:bb:87:e8:4e:06:ae:21:b5:b2:d9:73:93:25:cf:
2c:bf:38:cc:3a:1f:a6:79:d1:49:0b:ae:e1:2c:cf:a1:3d:39:
55:ba:6d:ea:1f:0f:09:a0:a9:95:0d:05:64:37:8d:12:47:eb:
d2:e5:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 09:19:33 2026 by rpki-client