This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer File: f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7.cer (raw, json) Hash identifier: deP+jcOnGoHEzflgzK6r/XbrvM7SqSGylBARV6vLt7Y= Subject key identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Authority key identifier: D3:4F:20:B1:A7:C4:06:D9:A3:43:21:ED:FF:F4:B7:9E:99:15:A0:E5 Certificate issuer: /CN=02c7706b-3baf-42cb-bdf7-782b036252b3 Certificate serial: 010D0C9F4328584A64684BC0B83942FB99FAC500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 03 Jul 2025 04:51:44 +0000 Certificate not after: Wed 06 Oct 2027 04:51:44 +0000 Subordinate resources: AS: 26556 IP: 23.172.120.0/24 IP: 23.178.72.0/24 IP: 2602:f96d::/36 Validation: Failed, certificate revoked on Thu 03 Jul 2025 08:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:64:68:4b:c0:b8:39:42:fb:99:fa:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c7706b-3baf-42cb-bdf7-782b036252b3 Validity Not Before: Jul 3 04:51:44 2025 GMT Not After : Oct 6 04:51:44 2027 GMT Subject: CN=f44c82daba9eca746b0d00f5ec1c709454be6125661b92bda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:48:43:64:86:d2:3f:2c:c9:51:33:6b:dd: 02:aa:67:de:2f:62:15:3b:e4:18:ec:64:03:0b:27: 71:da:66:5c:10:ef:72:89:74:57:a7:4c:7a:37:c2: 50:1c:bc:7b:0c:9b:6a:fe:a3:d4:86:91:ce:cf:81: a9:51:70:c3:9f:14:03:ce:a8:f0:a1:e1:e0:e5:54: fc:a5:91:79:42:61:67:65:0d:53:3c:94:c0:fc:36: f8:4b:ff:86:13:67:5c:a7:59:fe:ad:68:38:bd:88: 24:23:a2:96:6a:35:69:f3:77:86:e3:c2:f1:27:0a: d8:ab:44:bf:b3:c7:2c:4c:2f:f3:19:8e:01:d4:08: 36:a6:a1:b8:c4:c4:38:97:1a:03:60:ec:fa:73:dd: 71:21:cf:1d:b0:6b:ac:a4:6d:5a:cd:fe:27:74:9a: b6:65:9c:c8:f6:64:8b:ca:b8:d1:84:75:39:da:3e: d9:b6:9f:db:e0:81:39:46:bb:ec:00:6f:c1:93:5f: 13:fb:e6:13:37:e0:72:56:65:d0:41:da:2c:8d:49: e9:d6:fe:30:2d:42:44:ef:59:ee:51:a2:58:10:50: b5:6b:0c:bb:79:62:bc:c0:92:f2:39:43:d0:7b:c6: 9e:0d:59:d6:a5:81:f3:49:60:e9:6c:1f:17:2f:4a: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:DA:48:C3:AF:BC:A0:FF:D9:21:54:7E:F0:9F:77:6A:F8:A2:EA Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/1/24F5DA48C3AFBCA0FFD921547EF09F776AF8A2EA.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl X509v3 Authority Key Identifier: keyid:D3:4F:20:B1:A7:C4:06:D9:A3:43:21:ED:FF:F4:B7:9E:99:15:A0:E5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.120.0/24 23.178.72.0/24 IPv6: 2602:f96d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26556 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e8:06:35:94:db:8a:44:93:46:71:47:d4:8d:0b:70:60:40: bd:a2:98:17:54:65:3e:f9:35:f5:1e:e1:1d:04:b8:df:0f:88: 4c:ca:4a:56:7c:70:3f:91:3a:67:34:34:c7:6e:12:85:e0:2b: fa:16:95:48:51:eb:05:0e:df:0f:43:7c:53:4e:af:75:10:ae: 85:16:3c:94:95:f6:51:25:b1:b3:43:91:1a:ac:c5:6e:d6:47: 09:27:54:fa:a7:ba:c2:5b:4f:37:51:16:66:9e:39:88:b1:5b: 51:84:07:b1:54:f2:cc:f0:cb:30:06:91:30:5c:9c:25:42:88: c6:68:a3:22:cf:c3:53:80:7f:a8:af:b4:1a:98:60:f4:a7:ca: 9a:11:69:db:4a:c6:db:8d:b0:5f:98:75:4e:bc:a9:e2:e5:da: e9:1b:e0:c9:13:f7:f0:d9:4b:c6:1b:ed:34:1b:2c:18:09:30: 49:2c:bb:84:56:87:8b:5e:04:b0:3d:a5:37:74:1c:ad:ba:dc: 36:22:65:a7:6b:72:38:ba:5b:33:c0:b8:80:5a:59:03:fd:3d: e1:a2:a3:9a:a7:e1:80:c1:03:b6:11:cf:94:f0:d4:9c:76:68: 50:65:66:1a:7a:c3:f3:e6:d4:cd:10:6b:6b:10:a1:f7:19:d2: c1:40:39:05 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEpkaEvAuDlC+5n6xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgyYjAzNjI1 MmIzMB4XDTI1MDcwMzA0NTE0NFoXDTI3MTAwNjA0NTE0NFowPTE7MDkGA1UEAxMy ZjQ0YzgyZGFiYTllY2E3NDZiMGQwMGY1ZWMxYzcwOTQ1NGJlNjEyNTY2MWI5MmJk YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgbkhDZIbSPyzJUTNr 3QKqZ94vYhU75BjsZAMLJ3HaZlwQ73KJdFenTHo3wlAcvHsMm2r+o9SGkc7PgalR cMOfFAPOqPCh4eDlVPylkXlCYWdlDVM8lMD8NvhL/4YTZ1ynWf6taDi9iCQjopZq NWnzd4bjwvEnCtirRL+zxyxML/MZjgHUCDamobjExDiXGgNg7Ppz3XEhzx2wa6yk bVrN/id0mrZlnMj2ZIvKuNGEdTnaPtm2n9vggTlGu+wAb8GTXxP75hM34HJWZdBB 2iyNSenW/jAtQkTvWe5RolgQULVrDLt5YrzAkvI5Q9B7xp4NWdalgfNJYOlsHxcv SqGBAgMBAAGjggPyMIID7jAdBgNVHQ4EFgQUJPXaSMOvvKD/2SFUfvCfd2r4ouow ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlm OS05YjZjLTljOWYzODk4OTk1ZC8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00 OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzEvMjRGNURBNDhDM0FGQkNBMEZGRDkyMTU0 N0VGMDlGNzc2QUY4QTJFQS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4 MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03ODJiMDM2MjUyYjMvMDJjNzcw NmItM2JhZi00MmNiLWJkZjctNzgyYjAzNjI1MmIzLmNybDAfBgNVHSMEGDAWgBTT TyCxp8QG2aNDIe3/9LeemRWg5TAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzAy Yzc3MDZiLTNiYWYtNDJjYi1iZGY3LTc4MmIwMzYyNTJiMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXrHgDBAAXskgwDgQCAAIwCAMGBCYC+W0AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAme8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGToBjWU24pEk0ZxR9SN C3BgQL2imBdUZT75NfUe4R0EuN8PiEzKSlZ8cD+ROmc0NMduEoXgK/oWlUhR6wUO 3w9DfFNOr3UQroUWPJSV9lElsbNDkRqsxW7WRwknVPqnusJbTzdRFmaeOYixW1GE B7FU8szwyzAGkTBcnCVCiMZooyLPw1OAf6ivtBqYYPSnypoRadtKxtuNsF+YdU68 qeLl2ukb4MkT9/DZS8Yb7TQbLBgJMEksu4RWh4teBLA9pTd0HK263DYiZadrcji6 WzPAuIBaWQP9PeGio5qn4YDBA7YRz5Tw1Jx2aFBlZhp6w/Pm1M0Qa2sQofcZ0sFA OQU= -----END CERTIFICATE-----Generated at Wed Dec 17 19:40:09 2025 by rpki-client