This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
File:                     dag44CxhgA9z0wGd4KUfVntkvA4.cer (raw, json)
Hash identifier:          blRCOc2rWXHG5etGQBYe/saD1BD6JcPqGUtH2nJnv6o=
Subject key identifier:   75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7835448A41A8B1181E349795477737A7
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 06:18:35 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 44324
                          AS: 214720
                          IP: 2a0f:1cc0::/29
Validation:               Failed, certificate revoked on Sat 17 Jan 2026 20:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:44:8a:41:a8:b1:18:1e:34:97:95:47:77:37:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 06:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:88:b1:c7:7c:77:a6:61:7b:0f:f4:8c:93:
                    23:71:2e:de:b0:7d:71:81:26:1f:d2:33:27:b4:4d:
                    33:7c:65:31:84:78:60:d0:29:e3:77:08:d9:4d:ea:
                    a7:03:0b:a2:9a:9c:d0:af:ab:0e:42:96:98:f4:d0:
                    01:0c:f1:c9:4c:b4:f6:3c:96:30:19:49:e9:9b:27:
                    fc:cd:42:a7:1d:30:25:b0:30:01:84:ae:60:3b:7b:
                    c5:30:b8:38:48:37:03:f5:8a:2c:11:42:62:eb:ab:
                    00:23:98:54:4a:87:66:d5:f2:b5:b0:8a:e1:a3:a2:
                    2a:82:dc:1b:76:ad:7c:72:4a:d3:69:db:64:1d:72:
                    54:19:ea:93:a9:94:a4:55:59:1b:4c:78:ee:25:37:
                    cf:33:e2:31:ef:d1:cc:df:d4:7f:0b:db:32:bc:de:
                    3d:dd:99:46:ec:cc:e2:f7:99:00:4d:e9:6e:bd:67:
                    f6:2a:3c:c3:c4:bc:cd:d5:04:96:a8:e6:b6:56:8d:
                    00:9b:d9:f8:40:62:9a:22:41:2a:80:51:35:f9:bc:
                    aa:fc:fb:04:5d:4e:e5:67:e9:03:ca:88:ec:52:03:
                    a1:ae:e0:f1:aa:ed:0d:15:07:dc:20:9b:2a:b9:6d:
                    28:5f:ea:6d:1a:38:ac:62:1c:75:a0:98:f7:80:6a:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc0::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44324
                  214720

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:3d:c3:cb:63:60:f3:eb:fc:d9:d1:d4:d5:84:0f:a5:e0:
         87:40:11:56:b8:c5:15:83:e2:e0:87:36:54:f0:8c:71:60:fe:
         c7:b7:40:b4:af:bb:d3:5e:d2:ca:0e:b1:9e:ec:5f:1f:d5:58:
         29:44:fb:8c:2f:0b:c9:cf:9b:99:8e:fe:2f:58:fb:43:42:a3:
         9d:e9:68:91:e5:46:d2:86:2b:a9:2b:4a:57:cb:e4:0e:f1:da:
         a2:02:25:fa:c2:a0:a3:70:63:6b:bb:2d:a3:c1:de:96:4c:43:
         49:e7:7a:5c:d7:cf:48:60:f7:8c:64:ff:84:2e:82:fc:4b:f7:
         ee:ce:9b:1c:1b:9a:e1:56:cb:b4:45:03:dc:94:26:08:b8:db:
         5b:42:29:36:1f:bf:bd:2a:37:c9:f4:17:45:20:04:1e:23:15:
         b2:95:5e:3d:45:89:33:34:04:13:05:e6:86:f5:be:82:0c:46:
         1b:d2:4f:4b:05:c7:f0:18:2a:8d:64:72:8a:43:5a:bc:6f:0d:
         9b:63:5b:cf:67:49:7a:a7:41:da:93:c4:95:73:a8:76:69:0b:
         7f:ca:5f:f9:f5:9c:bc:e6:9e:c4:f0:e8:7d:13:ec:73:3f:13:
         95:af:05:ef:68:6f:1a:08:b5:be:93:4c:98:d9:e7:6f:2b:b4:
         78:1a:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----