Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
File: 4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer (raw, json)
Hash identifier: AdiL+xa0KYKycOCukV0sDE6GGa8YDN9veENG0NWDt00=
Subject key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3A3DA72F1C76E7FCC1FD46A777F47350DB85BEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 13 May 2026 17:17:18 +0000
Certificate not after: Wed 12 May 2027 17:22:18 +0000
Subordinate resources: IP: 103.68.111.0/24
IP: 167.104.220.0/24
IP: 2a06:1283::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3d:a7:2f:1c:76:e7:fc:c1:fd:46:a7:77:f4:73:50:db:85:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: May 13 17:17:18 2026 GMT
Not After : May 12 17:22:18 2027 GMT
Subject: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:c7:29:71:d2:05:1a:83:8d:23:e8:bc:e2:
81:83:cb:27:e7:f4:34:b3:98:25:79:41:5c:98:02:
74:e0:7c:80:78:01:5c:c7:79:57:6b:94:8e:ab:70:
83:52:c1:ba:be:89:b7:c7:c1:52:ad:3f:0a:12:4b:
76:93:08:50:9b:4e:17:f9:d9:9a:f3:90:97:39:60:
de:87:83:09:06:e5:5a:39:6b:50:b6:2e:67:25:0d:
ba:82:7a:e4:df:b7:fe:f4:c5:80:1c:e6:80:04:84:
b0:40:7f:b6:d7:3d:03:7b:15:24:06:7f:99:70:0a:
7a:7e:82:47:9e:a3:ed:a1:77:c8:3c:76:cb:dc:c4:
ec:10:7c:95:55:e3:e6:71:bf:36:1c:87:5c:14:fa:
0a:d1:83:6c:03:06:36:c5:9d:aa:73:cf:02:e7:23:
2d:de:6d:2b:1f:1b:af:8f:23:2d:04:81:e9:ce:29:
8d:5a:a3:84:e2:25:58:94:27:82:51:96:5a:1f:06:
ad:54:a5:c6:93:a3:55:d0:74:5a:2b:63:44:f8:b0:
26:63:90:44:ec:ce:f0:94:be:bd:2f:99:0a:b2:62:
3a:c1:23:1f:08:74:de:30:f1:96:66:f8:ef:09:b3:
fa:75:b4:be:a9:32:27:4b:ae:1b:4c:71:1d:1b:b1:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.111.0/24
167.104.220.0/24
IPv6:
2a06:1283::/32
Signature Algorithm: sha256WithRSAEncryption
03:52:b4:0d:cf:0a:b0:a8:8e:25:49:3c:07:a2:ee:cd:9f:45:
00:dc:fc:3a:17:b1:25:9c:7a:50:d7:c3:44:32:37:44:8a:15:
71:25:df:ea:f3:b0:76:65:32:f8:89:2a:6d:8e:26:77:7b:47:
72:fc:4e:0f:37:09:43:19:f7:97:5c:05:48:f6:3c:67:3b:7c:
ef:e8:d2:35:8a:42:07:fd:f1:1e:21:84:c6:3b:4c:30:44:88:
c5:b7:ef:cf:8f:de:03:d5:60:db:d6:a1:9f:e9:ba:b5:2f:c6:
9d:82:f3:75:93:83:66:4c:40:be:10:a9:ef:44:3f:94:62:8b:
ac:c3:7d:75:8e:98:dd:ac:26:69:f8:a4:1e:13:58:00:d0:86:
36:07:96:5b:b3:ed:ce:56:af:0a:cb:22:95:cc:96:cc:7d:20:
dc:53:8e:11:80:6a:a3:a0:48:16:78:bb:dc:6b:5b:e7:9b:c6:
76:12:7f:45:92:91:f4:25:4a:9b:87:9f:26:ae:66:85:bc:84:
da:1a:7d:ce:bd:6a:46:ad:82:42:aa:d9:a8:bf:84:cb:48:3d:
46:e8:a3:5b:6d:54:db:e6:2f:26:93:7b:e1:f1:17:8a:6b:a2:
2f:0e:24:59:73:8a:94:4c:db:d4:9a:e1:4f:de:28:0a:1f:0f:
b8:df:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:49:37 2026 by rpki-client