Certificate
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer
File: D7770473EB8533D901B96CE41EC2543FE56C7B1B.cer (raw, json)
Hash identifier: vHJG4uY8pzPCaaW7XRRW6f9J9ryj0KMHAYmoXvw2GT8=
Subject key identifier: D7:77:04:73:EB:85:33:D9:01:B9:6C:E4:1E:C2:54:3F:E5:6C:7B:1B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1BE84EDF6DD3AFD11198B1FE4F610291FDE4D290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 30 Sep 2026 23:25:20 +0000
Certificate not after: Wed 29 Sep 2027 23:30:20 +0000
Subordinate resources: IP: 216.86.69.0/24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e8:4e:df:6d:d3:af:d1:11:98:b1:fe:4f:61:02:91:fd:e4:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 30 23:25:20 2026 GMT
Not After : Sep 29 23:30:20 2027 GMT
Subject: CN=D7770473EB8533D901B96CE41EC2543FE56C7B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f2:b0:92:fb:25:87:32:0b:b3:ad:48:19:a7:
2f:41:0b:39:1d:db:1e:1e:b6:8c:9c:61:aa:4d:b1:
d4:1a:e6:28:eb:36:6f:88:f0:ba:2e:91:d8:b6:86:
84:f0:64:1b:01:11:62:7c:dd:82:a8:c8:2d:75:d4:
28:a5:7b:b9:9c:d9:01:3a:18:d4:92:21:89:4f:30:
e0:37:d4:88:c7:de:a8:d0:de:97:0e:c0:36:28:fd:
c7:16:0b:06:36:b9:0c:59:b2:2d:80:5e:bf:2f:b3:
4a:4d:9c:32:17:ee:96:70:f5:fc:25:b8:84:1f:f3:
95:46:a0:83:6e:83:80:d5:c8:65:b0:8a:7f:e5:e9:
56:13:33:75:17:5c:ef:b6:b6:db:36:93:57:a9:d1:
9a:55:f1:b3:4a:d8:0f:86:f4:e1:d1:e1:c3:9d:d0:
48:bf:eb:84:a6:7a:f5:c2:8e:e2:d4:13:8b:7b:f8:
da:4e:ce:d2:fd:8e:6e:60:14:2b:e3:9a:9b:27:72:
1c:8f:55:e4:84:1d:a1:af:61:3c:dd:72:92:d9:a9:
40:00:d5:1e:89:c7:a4:a6:77:5f:78:eb:5b:46:1e:
8f:72:ce:6d:20:57:5d:ee:a6:01:16:30:7e:48:3f:
d9:c8:50:86:e6:3a:3a:ed:df:b5:4d:3e:2d:63:f4:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D7:77:04:73:EB:85:33:D9:01:B9:6C:E4:1E:C2:54:3F:E5:6C:7B:1B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2b11072-d941-4c02-832b-d546aff3c5d8/1/D7770473EB8533D901B96CE41EC2543FE56C7B1B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.86.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b3:d6:1a:35:5c:6f:86:90:16:6f:a3:03:bf:58:ed:ba:ae:
7d:10:cd:1d:66:8d:bf:4d:ba:7f:74:96:16:a0:85:31:35:af:
e8:50:f4:d2:8b:95:5f:64:3d:24:95:b5:5c:03:51:56:5c:f3:
cc:9d:1d:73:4d:85:f1:44:74:aa:d5:5c:48:81:03:4e:83:5b:
48:5a:f7:b9:cd:d7:9e:9c:75:a0:9d:3e:5f:a3:5c:b4:b7:91:
0c:2e:23:01:1f:72:e1:1c:31:57:a9:b2:7a:8a:91:bc:02:b9:
87:43:db:10:2f:05:ca:14:11:3c:25:b5:23:2a:b0:85:6c:70:
00:77:c0:69:56:46:ac:2b:38:5e:28:78:d4:e7:82:0c:1b:ff:
09:70:e5:c3:c0:91:10:8a:5b:48:87:88:e3:c1:be:88:48:32:
f4:ef:f0:45:19:64:4e:3c:ed:c2:ba:ac:d5:1f:e4:2a:2f:59:
fb:15:38:a9:7e:a3:24:c5:43:78:49:49:ba:a3:04:a6:72:b4:
9c:3f:f7:da:d0:4e:f4:92:4a:f3:c6:1e:48:1f:14:fe:f5:5b:
20:6c:40:03:30:3a:b2:eb:bd:e4:ea:83:f0:f9:12:27:de:55:
cc:60:fe:d9:06:6c:6e:fe:c8:0c:cd:6e:f3:ae:b7:5f:ff:92:
63:48:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:10 2026 by rpki-client