Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer
File: 9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.cer (raw, json)
Hash identifier: JYU+3GK7UVXe5bDXvcVlcZ19/Jq/zu6W/5mGuWqYiJc=
Subject key identifier: 9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2D89C16EED68B5DF3426CE7A330C212377C3D8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 12 May 2026 19:48:52 +0000
Certificate not after: Tue 11 May 2027 19:53:52 +0000
Subordinate resources: IP: 167.104.218.0/24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 01:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:89:c1:6e:ed:68:b5:df:34:26:ce:7a:33:0c:21:23:77:c3:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: May 12 19:48:52 2026 GMT
Not After : May 11 19:53:52 2027 GMT
Subject: CN=9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:70:30:d3:e4:cd:55:0e:1b:b1:c2:e0:80:
6d:35:9f:8c:8b:4a:9f:19:09:e7:fa:86:e1:40:f2:
5e:52:c8:f7:53:23:ec:d2:d6:19:74:69:d8:a7:d5:
65:e9:6a:ed:c9:e4:f1:b0:a1:0f:b5:91:59:f6:2a:
fc:d0:81:cc:52:d5:74:56:a0:b0:ab:78:81:4a:8d:
71:4e:3b:1a:9e:68:83:42:32:1d:88:97:a0:82:07:
c8:69:5c:1e:9d:78:cf:70:af:21:52:ee:b8:64:64:
bd:83:eb:db:09:d3:21:0a:bc:d9:ab:b3:4b:d8:59:
52:91:b1:a8:e6:a0:0a:29:19:ff:23:bf:ba:d9:8b:
37:3d:80:06:a0:05:cd:d0:ca:7c:99:ac:d5:0e:4f:
e8:a7:b8:e8:0c:6a:f7:a7:f6:fb:10:85:b1:4f:d9:
16:09:64:2a:ac:02:ca:9d:e2:91:3a:32:52:a6:c0:
3e:e9:1f:37:f4:9d:3d:5b:13:c6:03:57:c0:e7:d7:
49:9d:ec:40:0c:12:7f:55:7f:f5:ca:39:ce:2e:ce:
40:0e:41:9e:cd:75:1e:92:38:b0:a3:97:23:38:4e:
17:b1:63:04:d7:ac:4e:b9:15:ad:e3:f9:fe:7e:17:
ac:2e:8d:4c:60:f4:bc:fd:ee:a6:74:ea:39:5c:74:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:CA:3A:DC:B9:C8:3E:51:A0:C9:59:10:4B:16:72:DC:E7:B1:B6:72
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/2/9CCA3ADCB9C83E51A0C959104B1672DCE7B1B672.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5c:d5:9b:30:b7:53:18:ef:ae:61:76:44:0a:88:7c:5e:c8:
bd:29:c1:78:66:a9:02:04:9f:f7:1f:17:61:f8:28:16:74:37:
ea:5c:31:bb:b9:0a:d5:36:65:36:17:01:46:ce:07:62:3a:69:
8d:ef:94:18:af:bf:c7:59:af:49:5a:a3:a6:e1:93:b4:48:03:
ba:0a:34:17:63:37:68:03:1d:b5:c5:54:27:e5:62:00:68:6a:
f4:de:d3:60:eb:d1:14:00:8a:dd:81:3a:6e:55:c8:d5:d0:60:
dc:24:94:f3:97:ac:f2:36:18:c8:6a:a2:b1:e6:4b:ed:eb:23:
08:fa:52:af:a9:0d:61:5d:f4:fe:7b:7e:23:97:01:df:00:35:
0c:d2:08:bd:14:dc:31:a7:38:ac:75:be:dd:f7:0b:89:38:4c:
b8:d8:16:f0:84:2f:9a:b6:09:b6:1f:64:63:cd:88:01:1f:8e:
99:44:cb:94:f8:44:ff:3e:be:b4:f3:ab:85:af:f7:15:ec:68:
a9:85:47:0f:5b:e2:ca:a7:4c:52:ae:44:13:b5:46:51:c9:9f:
c9:a7:3f:37:9c:09:77:14:7d:6d:38:78:69:31:25:ee:dc:9e:
d0:5f:81:bb:b3:75:86:ff:b8:42:cb:72:38:fd:d5:5a:23:4f:
68:f8:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 14:45:40 2026 by rpki-client