Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer (raw, json)
Hash identifier: f2RCmeS/IsZvli2jJnuP5T2Jnslct8RmVeCWrKIekEI=
Subject key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7D5D0C6E8A04D61D9D05EC17FFBEAE2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 06:20:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 60631
AS: 211505
IP: 130.185.72.0/21
IP: 185.8.172.0/22
IP: 185.208.174.0/23
IP: 2a03:2dc0::/32
Validation: Failed, certificate revoked on Fri 02 Jan 2026 14:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:0c:6e:8a:04:d6:1d:9d:05:ec:17:ff:be:ae:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:4d:2f:b7:c4:f0:a7:6f:d7:75:7d:df:f8:
8a:db:7e:c5:3e:9c:38:20:b7:77:0f:b6:3a:0b:04:
be:23:7b:e0:37:c5:64:e4:8b:9d:63:6f:0c:e1:99:
f1:3e:62:97:66:4f:c6:67:a1:52:9f:8a:4a:c8:71:
b6:6c:d8:90:e8:fe:c4:4a:3c:d8:60:2d:e3:be:ed:
2e:cb:29:9a:11:59:9c:b1:e7:46:48:d5:98:89:07:
62:7c:a4:d7:23:86:8c:fa:c5:7d:e1:ba:21:b7:d3:
27:1d:93:c4:bb:9b:cb:f6:dc:c2:85:fd:d1:dd:3a:
8f:58:a7:b2:97:30:13:5d:85:fe:af:20:bc:91:64:
64:2c:86:bc:a7:fb:67:1d:cd:a9:2b:ff:30:a5:30:
71:2f:83:f3:83:62:c5:8e:80:9a:c4:8a:eb:89:c1:
af:d4:48:c9:cb:03:96:61:0a:f3:81:75:58:2c:15:
6e:b7:02:62:4d:3a:6f:ad:89:26:92:01:98:00:3c:
41:c7:13:0f:a2:53:3b:13:11:f6:1b:d7:7a:b8:07:
8f:2c:f6:f0:50:15:3d:a2:c6:77:87:11:67:0d:22:
6b:74:54:02:83:66:e1:72:2c:38:d3:33:88:da:d4:
48:14:e3:dd:32:e6:7e:51:98:5c:9a:1d:46:92:e2:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60631
211505
Signature Algorithm: sha256WithRSAEncryption
63:5d:ed:8c:ef:21:66:e9:c1:b8:ea:91:ec:0c:0a:e5:5e:03:
bb:37:ba:bf:3e:5b:bb:56:a7:0f:67:37:44:64:8a:1c:01:41:
92:dc:4f:9f:ee:5d:b1:78:1d:58:bf:ce:3c:82:0e:8b:50:e3:
5f:cb:83:c0:0a:0c:04:c9:19:d6:2d:cf:e0:5f:a8:e6:7d:d7:
1a:92:a0:9e:61:81:2a:02:81:ca:c1:43:0a:e1:92:24:d5:a9:
aa:40:fe:72:aa:04:29:37:db:4b:6f:f3:9b:e6:e3:3d:37:0d:
df:6b:fc:70:8b:c3:b6:69:25:75:01:45:a4:4d:e5:4e:e6:84:
8f:2d:b1:b9:7d:76:6d:20:a7:0e:5d:62:f9:13:e9:68:ef:4c:
d6:dc:80:5b:0d:2a:0c:e9:70:b2:22:14:da:93:3d:ed:db:51:
0c:bc:00:2b:17:65:cd:1b:60:fb:39:6e:2d:9b:84:36:73:b2:
8e:a0:a9:4f:b1:d1:8d:59:9a:0b:bc:e0:58:15:96:dc:58:d5:
05:22:5a:4f:1e:19:bc:70:16:f1:56:6e:d8:64:24:d1:1a:49:
b8:40:47:37:61:0c:58:99:26:3b:5c:74:ae:50:2d:6e:86:df:
98:80:3d:25:ec:36:41:70:68:3b:3a:a7:c2:e7:2d:fe:b5:c8:
67:02:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:12 2026 by rpki-client