This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
File:                     crjVM-JRm2ityzt741m5M1fiscs.cer (raw, json)
Hash identifier:          /X4aSkdC3kpRBF3SyGylLM/lJXWTt6hhUgeo9rjzKVQ=
Subject key identifier:   72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0197F397739260F58E7DB4DA51D60E6B5C0D
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 10 Jul 2025 09:07:58 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 201269
                          IP: 2001:67c:4f8::/48
                          IP: 2a0c:6500::/29
                          IP: 2a0c:68c0::/29
Validation:               Failed, certificate revoked on Thu 10 Jul 2025 09:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:f3:97:73:92:60:f5:8e:7d:b4:da:51:d6:0e:6b:5c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jul 10 09:07:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:cf:a6:0a:21:61:3e:db:92:0a:07:b8:5e:
                    64:2d:82:6d:ca:57:48:fd:c0:86:90:5b:9f:b4:34:
                    81:80:92:7b:5d:0a:4d:1b:43:79:a9:91:f3:d3:00:
                    41:d9:e5:25:00:a7:ed:a6:19:df:ce:6d:54:1a:86:
                    5f:42:84:b2:ef:28:a9:39:9f:b0:7d:4b:ef:a0:39:
                    4d:b2:6e:51:90:3a:06:b9:54:13:2b:e9:64:08:95:
                    43:9c:db:c9:8c:e6:f0:8d:38:dd:1f:bb:6d:6b:98:
                    a8:f7:e4:dd:9c:26:f7:be:50:19:09:f8:af:a2:4c:
                    75:cd:ef:88:af:b9:43:3a:e6:db:f4:2a:21:64:40:
                    61:bc:69:fb:94:b8:e1:7d:64:16:9e:21:c0:cb:28:
                    aa:32:ff:6b:5c:5f:55:36:c7:09:02:79:22:a2:78:
                    3e:62:ed:02:c6:07:61:f2:55:05:22:45:ec:e4:61:
                    9c:80:f8:cf:23:2d:01:5d:49:78:b9:39:86:58:a9:
                    22:7f:a0:79:76:27:2b:84:a5:b4:95:d5:06:b9:46:
                    73:dc:da:23:08:dc:cf:44:61:cc:55:12:b3:fc:d2:
                    fc:59:5a:b9:77:b4:0a:9b:3f:fd:40:6d:c5:df:c2:
                    18:ae:cf:ec:01:86:31:b2:00:b2:e0:7e:c1:a6:32:
                    34:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:4f8::/48
                  2a0c:6500::/29
                  2a0c:68c0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201269

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:0f:a4:bc:d1:3e:f6:02:89:ba:ea:96:8e:9b:36:d8:96:
         26:8e:7a:be:51:d0:ba:74:fc:3a:db:fc:ff:fb:fd:44:eb:23:
         c9:2e:cd:f0:85:b2:e9:94:46:cd:ab:d3:f5:75:7f:61:68:27:
         1d:d9:7b:b1:60:79:c9:42:b8:4d:a8:00:9e:05:25:6d:e6:e3:
         db:57:5f:ef:f9:e9:00:49:6e:2d:67:11:40:cb:ce:e6:96:78:
         f6:d5:29:30:91:70:2d:d2:76:a5:f3:20:12:96:9c:83:f6:59:
         08:b8:44:41:c2:27:96:cf:58:c8:47:11:f5:07:b5:8e:65:2e:
         6c:55:b5:3f:f8:ef:b4:b1:2c:36:7c:93:78:f8:46:9c:2c:83:
         4b:c7:69:21:36:83:0a:c0:2b:10:89:14:41:9c:e1:2b:b5:98:
         47:87:34:e0:d1:fa:e6:06:e4:78:15:f8:d9:f5:cc:a0:9a:b9:
         d0:c5:56:be:e6:57:98:8e:2f:31:1a:d9:8c:7b:da:1a:b7:de:
         cc:bc:73:d1:10:eb:c0:ef:96:bf:e5:d1:79:e0:d8:e9:c9:ae:
         3a:36:f8:67:a0:c4:89:56:3d:e2:ee:f0:04:07:79:cd:1e:af:
         14:cf:2f:1a:ea:5a:c8:82:c8:26:61:3a:be:3d:f9:ad:2c:ef:
         05:cb:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----