Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.cer (raw, json)
Hash identifier: lpiXA4mz+JwWxY3RtzOFurH1RejM+Dzv4nRlvJRPXUw=
Subject key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0CD01E2ED571E1B02287D865DA07F6B39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Sep 2026 06:44:08 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.1.204.0/24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 11:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:01:e2:ed:57:1e:1b:02:28:7d:86:5d:a0:7f:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 06:44:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:76:e6:83:70:3f:e6:6d:1b:49:02:9b:78:
fc:fd:e3:24:ec:ec:55:e0:9d:9b:40:ea:49:68:4d:
85:5c:0f:a5:fa:28:9c:6e:d1:6c:e2:2d:40:38:78:
6a:ed:84:e9:e2:c9:39:f2:4f:50:46:60:13:d7:2b:
68:e6:81:4f:fc:5d:89:8a:50:e8:2c:69:2d:08:9f:
bb:a2:35:c0:a7:e5:b4:b2:73:fa:56:d7:1f:ae:0a:
4e:7c:75:26:e1:b0:43:0a:53:0f:e6:40:6c:0d:a3:
bb:0e:b7:60:ac:a4:84:0c:7e:01:62:72:9b:a5:4f:
f2:8e:01:4c:fb:2d:bd:a1:49:77:6e:58:1f:ff:63:
64:7e:30:dc:01:c2:92:6b:a7:68:4f:52:c6:ac:c1:
26:37:e8:af:bf:72:c8:2c:5d:f5:9c:e4:7b:5d:bc:
73:cc:8d:1e:9f:f8:68:35:65:bd:a0:db:80:ac:32:
56:84:3b:29:08:31:1b:a5:c1:21:fd:a9:b4:aa:c1:
c4:64:2c:15:b0:63:10:88:4c:ee:ac:e5:54:c1:8a:
72:d0:bd:df:12:8c:2d:c1:09:3e:5e:6f:f9:2e:ef:
b2:d4:2f:40:9e:75:0f:24:bc:45:a8:73:d2:7c:78:
89:b3:2d:ac:eb:c5:5a:0a:5a:f6:b8:b9:9e:54:16:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.204.0/24
Signature Algorithm: sha256WithRSAEncryption
39:de:43:a9:eb:e0:a3:d0:8a:83:c4:77:3c:e2:3d:d0:1c:53:
17:5a:7c:12:45:74:e7:3d:4b:e6:e6:00:ce:d4:db:d0:24:0d:
c3:1a:02:7d:4b:64:5a:57:a2:02:3a:a9:e4:10:d6:b3:c1:10:
e7:d4:72:9d:bb:08:5b:b6:fe:57:4f:8d:f0:8b:c5:16:d1:fa:
43:bf:d0:d3:dc:55:07:64:58:eb:fe:9a:4e:29:f9:0f:77:d0:
53:f7:44:d6:f4:a0:79:a6:8c:82:08:1b:9c:fb:bd:eb:b0:7d:
40:0f:1e:62:d8:69:1d:09:a4:99:ce:80:88:aa:56:95:96:a0:
c4:76:11:fc:a9:db:22:d1:6a:db:f2:e7:bb:ff:39:aa:ef:05:
22:a6:cb:ee:19:75:87:68:73:ec:16:1d:e2:a9:52:f8:0a:be:
88:bc:93:22:27:f7:d7:aa:42:97:f0:db:a2:4b:f0:e2:62:c1:
29:4d:55:60:13:b6:dc:64:bd:d0:dc:f5:b3:4a:eb:6c:65:8d:
ba:34:a4:42:69:30:f6:54:4c:22:cb:1f:fe:4b:03:0c:44:08:
25:77:c9:53:3f:d6:5a:d6:b9:50:26:6f:15:8e:52:f7:e9:57:
9d:bc:7c:a8:b7:87:c0:52:fe:7c:4e:63:96:4f:95:a7:e3:66:
26:6d:61:ff
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAaDNAeLtVx4bAih9hl2gf2s5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwOTIzMDY0NDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2RmMGE3NWM5ZWY2ODFiOGQyMzM2N2RiZThlZGFkMDUzZjNiZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pN25oNwP+ZtG0kCm3j8/eMk7OxV
4J2bQOpJaE2FXA+l+iicbtFs4i1AOHhq7YTp4sk58k9QRmAT1yto5oFP/F2JilDo
LGktCJ+7ojXAp+W0snP6VtcfrgpOfHUm4bBDClMP5kBsDaO7DrdgrKSEDH4BYnKb
pU/yjgFM+y29oUl3blgf/2NkfjDcAcKSa6doT1LGrMEmN+ivv3LILF31nOR7Xbxz
zI0en/hoNWW9oNuArDJWhDspCDEbpcEh/am0qsHEZCwVsGMQiEzurOVUwYpy0L3f
EowtwQk+Xm/5Lu+y1C9AnnUPJLxFqHPSfHiJsy2s68VaClr2uLmeVBYa+wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPPfCnXJ72gbjSM2fb6O2tBT872VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzRjYjcy
Yi0zZjgyLTQ2ZDItYmYyNS1hYjhhYmNjNjkwMTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvNGNiNzJi
LTNmODItNDZkMi1iZjI1LWFiOGFiY2M2OTAxNi8xLzg5OEtkY252YUJ1Tkl6Wjl2
bzdhMEZQenZaVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgHMMA0GCSqGSIb3DQEBCwUAA4IBAQA53kOp
6+Cj0IqDxHc84j3QHFMXWnwSRXTnPUvm5gDO1NvQJA3DGgJ9S2RaV6ICOqnkENaz
wRDn1HKduwhbtv5XT43wi8UW0fpDv9DT3FUHZFjr/ppOKfkPd9BT90TW9KB5poyC
CBuc+73rsH1ADx5i2GkdCaSZzoCIqlaVlqDEdhH8qdsi0Wrb8ue7/zmq7wUipsvu
GXWHaHPsFh3iqVL4Cr6IvJMiJ/fXqkKX8NuiS/DiYsEpTVVgE7bcZL3Q3PWzSuts
ZY26NKRCaTD2VEwiyx/+SwMMRAgld8lTP9Za1rlQJm8VjlL36VedvHyot4fAUv58
TmOWT5Wn42YmbWH/
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:04:23 2026 by rpki-client