Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer
File: 9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer (raw, json)
Hash identifier: fVRXLewxCScQlSZG700lbOsFBN8pMmvNo8u6MBFOyyk=
Subject key identifier: 9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5009168A1C4832387B6F809A1F5F6EF8793C9D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 27 Jun 2026 07:01:33 +0000
Certificate not after: Sat 26 Jun 2027 07:06:33 +0000
Subordinate resources: IP: 167.104.218.0/24
IP: 2a06:a000::/32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:09:16:8a:1c:48:32:38:7b:6f:80:9a:1f:5f:6e:f8:79:3c:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 27 07:01:33 2026 GMT
Not After : Jun 26 07:06:33 2027 GMT
Subject: CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:70:30:d3:e4:cd:55:0e:1b:b1:c2:e0:80:
6d:35:9f:8c:8b:4a:9f:19:09:e7:fa:86:e1:40:f2:
5e:52:c8:f7:53:23:ec:d2:d6:19:74:69:d8:a7:d5:
65:e9:6a:ed:c9:e4:f1:b0:a1:0f:b5:91:59:f6:2a:
fc:d0:81:cc:52:d5:74:56:a0:b0:ab:78:81:4a:8d:
71:4e:3b:1a:9e:68:83:42:32:1d:88:97:a0:82:07:
c8:69:5c:1e:9d:78:cf:70:af:21:52:ee:b8:64:64:
bd:83:eb:db:09:d3:21:0a:bc:d9:ab:b3:4b:d8:59:
52:91:b1:a8:e6:a0:0a:29:19:ff:23:bf:ba:d9:8b:
37:3d:80:06:a0:05:cd:d0:ca:7c:99:ac:d5:0e:4f:
e8:a7:b8:e8:0c:6a:f7:a7:f6:fb:10:85:b1:4f:d9:
16:09:64:2a:ac:02:ca:9d:e2:91:3a:32:52:a6:c0:
3e:e9:1f:37:f4:9d:3d:5b:13:c6:03:57:c0:e7:d7:
49:9d:ec:40:0c:12:7f:55:7f:f5:ca:39:ce:2e:ce:
40:0e:41:9e:cd:75:1e:92:38:b0:a3:97:23:38:4e:
17:b1:63:04:d7:ac:4e:b9:15:ad:e3:f9:fe:7e:17:
ac:2e:8d:4c:60:f4:bc:fd:ee:a6:74:ea:39:5c:74:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.218.0/24
IPv6:
2a06:a000::/32
Signature Algorithm: sha256WithRSAEncryption
2b:ab:99:74:14:55:08:54:9b:9f:ee:51:0f:aa:ec:3a:61:42:
e6:38:33:00:d8:0f:fa:ca:75:95:6c:2f:86:d8:33:fb:9f:1e:
28:42:4f:c3:d9:f3:36:9d:e0:70:f9:9c:74:af:98:d7:d0:71:
b4:f6:ab:14:00:30:7e:31:36:f8:1c:23:0f:b1:70:f2:4a:bc:
95:cc:de:e2:2b:de:1e:5c:81:48:9b:16:31:74:49:d4:68:81:
c5:eb:0d:69:d1:15:75:9b:3d:7a:bc:6b:c0:a9:03:5b:1e:f1:
68:fc:43:f9:11:9f:7e:3f:fb:21:41:0f:b3:aa:eb:80:15:b0:
52:76:14:45:de:89:75:e4:09:ec:3a:5a:33:46:b3:8b:01:f3:
45:91:e6:a5:7b:26:e6:61:57:d1:5e:c9:8e:2d:48:53:17:f1:
fe:41:fe:f9:f2:56:9b:86:3b:8c:66:6e:ad:0f:2b:63:7f:e9:
ee:32:93:de:f1:b3:8d:c0:ce:27:db:bb:07:ee:99:97:13:0d:
ee:c5:fd:38:ca:4a:83:0a:f6:57:13:46:22:11:88:d5:40:e9:
ad:f8:7e:db:8b:c0:42:f2:b8:73:eb:e0:05:62:da:b4:aa:13:
f8:4c:9f:7f:ba:f9:09:fa:da:2f:3e:c6:04:cc:94:e3:9b:f7:
b5:5d:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 14:16:43 2026 by rpki-client