Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer (raw, json)
Hash identifier: H4hqK97ltgp2YaKzROSLrD9TpnBG2RKlBYqkKpYxlFM=
Subject key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7AC9563D01E13919191ADAF68BEF024D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 18:19:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 212717
IP: 2001:678:e24::/48
Validation: Failed, certificate revoked on Wed 07 Jan 2026 13:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:56:3d:01:e1:39:19:19:1a:da:f6:8b:ef:02:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:ef:cc:29:6e:39:08:76:78:70:02:ee:d3:
f9:b9:28:90:d8:63:13:6e:54:51:bd:9c:e9:a7:16:
89:2f:c2:db:dc:06:cd:8b:b4:78:93:81:79:aa:81:
fc:ec:c3:25:e1:e8:32:4c:ef:ae:d3:47:41:d5:67:
bf:72:d3:04:f9:7b:91:31:6e:bf:f4:87:d7:71:54:
cd:6d:f7:e8:c3:16:92:aa:b2:7f:e4:41:30:b3:6d:
61:f9:47:1a:b3:60:53:79:2f:c0:22:cb:ae:75:bf:
ce:1f:d7:d8:08:91:c2:21:37:06:63:da:28:8f:48:
c1:47:9b:16:eb:21:15:55:b7:1a:20:79:66:5e:c8:
bc:95:df:b7:fb:c7:df:e0:9a:0e:31:5d:1e:a2:5a:
82:64:e8:46:21:c2:63:3a:d4:2e:3f:10:e7:72:98:
65:41:39:0b:9a:9e:da:90:c2:11:d9:bf:25:0a:1b:
ad:98:7f:97:90:35:b0:12:64:6c:d2:e7:52:30:15:
27:36:1e:41:8c:ae:57:c1:0e:43:66:91:48:4f:1c:
ad:74:3c:d5:b8:3d:6c:fd:47:5d:50:ae:f8:4d:23:
9c:b6:7a:c6:ae:54:4c:72:44:1e:f8:3d:03:e8:83:
17:d3:c4:fe:ab:af:fb:8b:ea:2c:e5:ab:8f:ad:02:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e24::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212717
Signature Algorithm: sha256WithRSAEncryption
87:55:75:8c:e8:60:cc:ea:9c:d4:92:5b:5e:5b:f0:76:3c:dc:
9f:80:1c:a5:34:c4:be:3d:7c:ae:b3:8c:7a:de:4f:2d:1f:87:
bc:99:49:32:0a:17:04:b2:60:60:28:b8:b1:73:02:fd:b0:53:
a9:51:41:fc:e1:00:5d:b3:cc:0f:17:bb:96:94:da:61:3a:8e:
a8:95:5c:36:b7:10:cf:b0:28:c7:97:2e:1b:2d:e2:e5:1b:1a:
00:aa:99:8a:c3:07:34:09:f5:7f:83:d4:e9:d4:b1:b9:72:ba:
55:26:3a:5c:c3:de:8e:03:ec:6c:b4:e5:db:5f:36:19:7b:1b:
86:4b:cd:40:8b:01:66:7e:38:9b:90:b6:67:b5:b6:eb:0a:43:
c0:74:34:a6:09:6c:9e:48:b0:a3:54:8b:de:54:ba:27:d5:d4:
15:7e:49:76:56:42:85:4a:d2:9d:49:a1:48:3d:b7:71:a6:ce:
66:f9:4e:94:02:ec:56:d2:08:21:38:04:cc:21:a7:17:3e:51:
34:5a:c3:c8:73:5a:34:ab:19:97:07:54:af:62:1a:62:aa:c8:
73:bc:02:74:05:77:3f:ba:37:1f:5e:04:00:8a:24:7d:53:eb:
76:e9:69:c5:04:e4:1c:6a:45:d9:e0:b1:82:9f:0d:94:41:e3:
2b:ec:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:07 2026 by rpki-client