Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
File: 6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer (raw, json)
Hash identifier: rjHlvLB8MWhNHoG5+1v3zJPxk2Q1bIQpB60vPkmw3nM=
Subject key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 25D6971F624705D84C05249DEED1E5422387DEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 10 Oct 2026 22:11:39 +0000
Certificate not after: Sat 09 Oct 2027 22:16:39 +0000
Subordinate resources: IP: 160.202.134.0/24
IP: 2a07:54c0::/29
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d6:97:1f:62:47:05:d8:4c:05:24:9d:ee:d1:e5:42:23:87:de:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 10 22:11:39 2026 GMT
Not After : Oct 9 22:16:39 2027 GMT
Subject: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:87:52:ca:35:c0:d5:59:4b:89:7e:6c:84:
30:d4:51:b8:29:5b:e7:b2:51:f2:44:e5:d3:1d:d1:
06:48:84:8b:3a:77:9b:8a:5b:de:9c:68:da:0e:fc:
07:7c:cb:35:72:72:35:b3:76:0f:1c:e6:fa:16:c9:
7c:04:ff:9e:08:55:fe:01:3a:06:8d:1d:7b:66:a4:
8f:5e:05:7d:0b:ac:06:06:a4:c7:2a:9a:93:0e:b0:
72:28:a9:f5:f5:ae:e4:fa:5a:e2:41:ab:94:ea:a2:
99:88:a9:23:ec:28:1d:dd:8c:60:8c:33:b7:db:10:
8a:da:7d:5d:75:e0:53:14:5a:9e:3d:ac:bf:00:f2:
f9:97:3e:dd:9d:2e:85:d2:08:55:d4:f8:69:7f:a8:
f7:a8:6d:60:98:8f:80:31:0d:ce:b9:a2:5c:92:b2:
35:81:f3:64:92:d0:d9:a3:df:91:cf:64:9e:75:72:
14:cf:55:45:08:e1:00:68:89:93:a1:a0:c3:3f:0b:
21:cd:4a:7d:f2:a6:bd:2e:b6:05:9c:85:1c:bb:13:
48:1c:4d:81:9c:41:a0:6c:4d:67:ff:a2:a7:fe:4c:
f2:fd:1e:d9:74:ef:54:48:09:0d:ab:54:b4:b8:7d:
5e:bc:36:ab:9f:1c:59:c7:dc:78:d3:82:f9:0d:ac:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.134.0/24
IPv6:
2a07:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:29:73:ad:64:69:80:25:73:5d:1f:67:c9:29:6b:1d:ae:7e:
c6:23:5d:a0:3e:2e:a6:4e:e6:b4:53:b8:3a:15:80:3d:45:67:
e5:f3:b5:29:63:08:82:7a:4f:0a:5e:ee:06:4b:f0:6a:7f:05:
a6:05:13:3b:18:38:f1:f6:bd:7a:74:af:a1:4d:60:93:81:9e:
c9:42:d8:d4:52:1d:e3:40:4f:ea:ef:8b:18:88:2e:4f:61:93:
68:b7:4a:73:f2:91:3e:d8:44:f2:b6:c5:f3:0f:09:16:03:28:
78:07:09:36:ef:b0:1b:46:e5:6c:8a:c0:1f:d9:c5:cd:e4:4b:
b9:51:48:88:b1:2b:55:55:13:81:8b:a4:ca:1a:3f:03:f2:e6:
88:a6:e1:cc:c7:b6:89:82:90:f8:1a:45:72:0a:a5:9b:85:bb:
fd:8e:ae:4a:b6:82:93:b8:12:b1:7e:3b:9a:85:2b:80:8d:40:
c1:12:aa:f8:d6:6f:e4:a0:f3:e2:bb:7f:dd:88:67:35:f7:b0:
86:1c:e7:fd:95:03:9f:38:66:dc:cc:b0:6a:07:af:2c:b3:29:
3f:77:e7:84:8f:93:33:3c:65:0f:f7:ee:e8:11:cc:86:38:98:
ca:0e:9b:1c:ce:23:8e:33:85:73:04:ec:b2:64:87:df:09:1d:
aa:e7:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:03:13 2026 by rpki-client