This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
File:                     LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer (raw, json)
Hash identifier:          lzqw2W8M2EkodvTTAluP9VaiQFXMS5kIL+ZUVpWCqbc=
Subject key identifier:   2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B26716CBB6AD2EF8E70343C15DAA52A28
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 16 Dec 2025 09:15:26 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 45.66.60.0/22
Validation:               Failed, certificate revoked on Fri 19 Dec 2025 09:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:71:6c:bb:6a:d2:ef:8e:70:34:3c:15:da:a5:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 16 09:15:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e2674263aecd572673f87614919ca492c79faea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5d:ee:6a:f1:96:50:3e:26:f9:0b:f7:be:61:
                    b5:05:39:43:f0:61:6e:09:18:04:0d:4f:16:78:27:
                    e5:ca:67:46:e4:ab:14:ec:8d:c2:c2:27:58:59:e5:
                    67:42:ec:2b:63:e4:b9:d3:60:01:3e:b8:1c:ac:91:
                    a5:9c:58:e9:eb:f7:4e:32:5c:4d:46:dc:f7:3c:f2:
                    e4:43:7b:5f:2d:f3:81:a4:27:30:e1:32:f3:6a:3e:
                    a7:56:9f:e2:2d:6a:9d:3d:42:ef:ed:f0:fa:8d:23:
                    9c:69:99:71:af:c2:8f:4c:bc:9a:1d:1d:b2:06:a4:
                    bd:14:c2:40:c9:a6:76:6a:54:95:7c:ca:e6:49:95:
                    41:ea:c2:b8:89:93:00:3e:74:71:c1:08:fc:fb:b2:
                    a1:67:59:c5:de:85:8e:46:93:f3:37:2a:e8:0b:d2:
                    f1:f7:72:6c:ed:16:4d:8f:02:91:b5:0a:d3:ff:5f:
                    99:e2:0d:8c:15:0f:5a:5d:eb:41:b3:58:c5:28:21:
                    9b:b8:fa:37:f2:14:4a:12:f6:8c:bc:2f:5d:36:f7:
                    89:0a:cc:12:85:98:92:3a:ed:e6:a6:91:4e:be:df:
                    2e:6b:6c:fd:a7:cf:09:b6:ba:9a:fc:15:03:a7:04:
                    04:2a:e7:8b:90:82:b6:fe:9c:21:12:81:a8:e4:2f:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:4f:ce:13:d8:30:77:51:c8:d4:ee:a7:fe:4b:33:15:fa:16:
         d3:46:af:d5:31:d7:f3:d9:a5:47:16:4c:5b:3e:b0:8c:29:3c:
         bb:17:2f:50:b4:69:a9:54:ee:03:e9:73:6b:6b:03:9f:22:e6:
         1b:39:99:81:5c:5d:2d:73:82:d3:b0:cd:12:7e:d8:7c:fc:16:
         13:f5:8f:4a:2c:c1:77:54:bc:fc:3b:2e:85:6c:21:93:10:d2:
         ce:79:c3:0e:7e:b6:90:fe:6f:9f:69:e1:41:4e:5f:02:32:44:
         8a:58:40:e4:93:4f:9b:e6:bf:a6:ae:14:eb:89:57:16:8a:65:
         dd:58:99:95:b6:4a:0f:e0:86:77:43:ac:73:c6:2d:87:16:fd:
         1c:64:e9:44:a9:3c:f7:3a:dd:76:d0:96:bf:bf:62:d5:7f:18:
         d2:54:d3:73:e7:31:7d:3f:e2:e3:72:cf:0e:bc:73:1c:15:b7:
         dc:d5:72:5a:72:86:ab:f0:c9:cb:bd:f3:97:28:25:18:be:bf:
         f9:1b:53:58:a0:09:d9:8b:62:78:ba:96:ea:53:5a:e7:f5:67:
         87:2f:6c:20:ad:ab:1d:29:d3:14:93:37:62:87:4a:65:f3:a1:
         4c:0d:d4:08:34:5b:2a:f5:dd:f4:3a:e8:79:63:f2:9b:50:e2:
         5c:3a:93:61
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZsmcWy7atLvjnA0PBXapSooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUxMjE2MDkxNTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTI2NzQyNjNhZWNkNTcyNjczZjg3NjE0OTE5Y2E0OTJjNzlmYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+V3uavGWUD4m+Qv3vmG1BTlD8GFu
CRgEDU8WeCflymdG5KsU7I3CwidYWeVnQuwrY+S502ABPrgcrJGlnFjp6/dOMlxN
Rtz3PPLkQ3tfLfOBpCcw4TLzaj6nVp/iLWqdPULv7fD6jSOcaZlxr8KPTLyaHR2y
BqS9FMJAyaZ2alSVfMrmSZVB6sK4iZMAPnRxwQj8+7KhZ1nF3oWORpPzNyroC9Lx
93Js7RZNjwKRtQrT/1+Z4g2MFQ9aXetBs1jFKCGbuPo38hRKEvaMvC9dNveJCswS
hZiSOu3mppFOvt8ua2z9p88Jtrqa/BUDpwQEKueLkIK2/pwhEoGo5C9CHwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFC4mdCY67NVyZz+HYUkZykksefrqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JkN2My
MzFlLWEzM2MtNDU1NS1iNDJlLWQwMjA5Mzg0OTI5OS8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmQ3
YzIzMWUtYTMzYy00NTU1LWI0MmUtZDAyMDkzODQ5Mjk5LzAvMkUyNjc0MjYzQUVD
RDU3MjY3M0Y4NzYxNDkxOUNBNDkyQzc5RkFFQS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Ai1CPDANBgkqhkiG9w0BAQsFAAOCAQEAR0/OE9gwd1HI1O6n/kszFfoW00av1THX
89mlRxZMWz6wjCk8uxcvULRpqVTuA+lza2sDnyLmGzmZgVxdLXOC07DNEn7YfPwW
E/WPSizBd1S8/DsuhWwhkxDSznnDDn62kP5vn2nhQU5fAjJEilhA5JNPm+a/pq4U
64lXFopl3ViZlbZKD+CGd0Osc8Ythxb9HGTpRKk89zrddtCWv79i1X8Y0lTTc+cx
fT/i43LPDrxzHBW33NVyWnKGq/DJy73zlyglGL6/+RtTWKAJ2YtieLqW6lNa5/Vn
hy9sIK2rHSnTFJM3YodKZfOhTA3UCDRbKvXd9DroeWPym1DiXDqTYQ==
-----END CERTIFICATE-----