This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
File:                     GVmXqL_GmLjrnoco7K8SpSezV98.cer (raw, json)
Hash identifier:          2UVA4eajDtHX1GvstEbkyUjisofWkVt9CTGDJzz+JDQ=
Subject key identifier:   19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B0D48B6112F5ABE664C1139C8047A0BBE
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 11 Dec 2025 12:00:27 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    IP: 185.152.52.0/22
                          IP: 2a07:7f00::/29
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:48:b6:11:2f:5a:be:66:4c:11:39:c8:04:7a:0b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Dec 11 12:00:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:77:ee:fa:19:20:29:b3:0b:5a:84:24:5c:
                    92:0f:01:f9:f4:c2:d9:da:1f:73:a5:e9:44:36:5f:
                    e6:5c:08:64:74:be:4d:0f:e6:c4:04:c4:b3:8d:9c:
                    4a:dc:d8:d5:ef:16:8c:59:60:dd:b5:1f:ea:63:75:
                    a4:28:b7:bd:15:de:9b:78:a8:ab:d8:76:48:14:64:
                    c9:e0:cd:07:8c:bd:3f:7e:35:28:92:6b:af:59:c4:
                    7e:fc:dc:d5:d7:bb:ef:0d:c6:99:e3:d2:2f:93:0a:
                    52:b3:76:ee:d1:ad:a5:34:bc:a9:81:e6:73:01:77:
                    12:16:54:0e:18:2d:74:38:0b:a6:52:6f:ba:14:b9:
                    81:7b:a5:73:fe:a8:8c:8b:1b:3d:18:38:04:12:55:
                    72:87:63:b2:dc:66:de:f9:d8:e4:c0:60:ea:14:c5:
                    d2:a8:c0:8c:21:ce:8d:aa:54:29:1b:ed:df:62:0d:
                    11:d6:29:53:26:40:45:71:f2:24:dd:ce:06:d2:d8:
                    1b:4e:29:00:77:1c:84:35:de:b0:d8:7b:a8:f7:df:
                    fa:90:95:7d:e8:49:72:16:37:a2:3f:51:b0:af:35:
                    a9:b6:e2:fd:6b:c5:0f:9f:fc:26:56:d6:80:f9:62:
                    25:80:a0:1f:10:91:40:35:96:e8:11:0e:c9:54:8e:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.152.52.0/22
                IPv6:
                  2a07:7f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:6b:b0:95:04:2a:88:0f:ed:38:4f:9c:b1:0e:9d:f5:e9:62:
         5d:dd:39:f3:84:9b:3b:6c:d1:e6:b1:5e:c0:0f:bd:90:f4:51:
         6f:1f:35:1a:cc:d1:96:ac:91:7e:c6:2d:45:12:c9:2b:d4:7a:
         4a:01:d7:2d:b4:7e:f2:ff:a3:48:b5:50:0a:70:81:c8:f7:88:
         c1:06:c2:58:41:0c:07:42:8d:ff:63:49:c1:7a:52:7a:9d:23:
         5c:ab:94:cf:40:38:87:9c:15:bd:d1:29:f8:e1:86:0b:7c:fb:
         36:b7:f4:89:78:81:3f:34:48:0a:42:9b:8d:34:db:2a:c6:f7:
         9f:d0:df:31:eb:58:84:a9:92:1d:2d:24:cf:9c:88:ba:0e:40:
         3a:03:ab:a2:5e:ae:70:fb:ab:89:4b:1f:b2:09:2a:a8:35:63:
         fe:a8:5c:96:ae:9e:a5:7a:ee:0d:36:d2:00:74:44:52:7e:1c:
         50:9e:25:10:0c:51:6d:af:67:5e:54:45:36:c6:7f:46:c2:69:
         1c:6a:36:29:13:c2:3e:d4:9d:84:76:a8:b2:f3:c8:59:b8:dd:
         3e:8d:28:ff:d8:9a:4c:6e:4f:f3:ac:fa:6b:77:96:66:ef:54:
         3c:f8:cd:66:69:3a:c9:27:b8:c5:fe:db:0f:ab:65:37:05:b7:
         2c:54:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----