Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/INkHUyfNTIJ2lGS2PiOZdY3gz1A.cer
File: INkHUyfNTIJ2lGS2PiOZdY3gz1A.cer (raw, json)
Hash identifier: TeuSe9y5tanu7dwv2rQ6FRep1N5Ck0I/xYbZ29vjcCY=
Subject key identifier: 20:D9:07:53:27:CD:4C:82:76:94:64:B6:3E:23:99:75:8D:E0:CF:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B78354E47EFB007D71F11BB30ECA753EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 06:18:38 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 214223
Validation: Failed, certificate revoked on Sun 18 Jan 2026 14:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:35:4e:47:ef:b0:07:d7:1f:11:bb:30:ec:a7:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20d9075327cd4c82769464b63e2399758de0cf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:4d:79:4c:13:a4:eb:c4:6f:3c:d6:78:f8:
2e:2b:d2:8f:fe:49:7c:b8:78:f8:82:c8:b7:42:19:
30:39:4a:a4:ea:77:2b:73:7d:cd:8b:54:11:21:58:
9a:c5:86:2c:d0:cb:6d:30:82:f5:5b:62:f6:09:d2:
f5:cb:7d:6e:9e:85:d0:06:f5:90:81:91:0e:4c:ac:
cd:aa:57:3d:6f:1c:d9:db:eb:3f:93:34:94:08:1a:
21:a2:f0:5a:28:2e:3b:6f:dd:a7:58:4f:8c:15:b5:
1f:b1:88:82:60:40:f5:1d:fa:95:36:8c:3d:d1:90:
37:ea:8a:89:7a:52:b5:d2:ee:54:3f:2d:85:78:de:
e9:92:a4:6c:d8:34:e5:85:4d:2a:a8:25:24:03:ec:
c1:2d:6a:6c:17:85:a6:3f:3b:2b:b4:b7:bf:54:f8:
a9:a9:89:83:a2:8b:a6:b6:d3:4c:c2:28:00:96:44:
6f:1e:92:71:84:51:9c:88:b0:8c:11:72:c3:5c:6f:
9b:04:d5:86:e8:5a:54:64:ce:63:6e:56:58:bc:1d:
60:ed:62:f5:5f:36:d3:7f:e9:52:f2:8c:b1:34:3f:
1d:aa:52:60:83:8f:33:20:42:ec:4c:3e:5a:f8:c2:
cc:fd:ad:48:8b:5b:7c:60:39:ed:e5:1b:1a:af:92:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D9:07:53:27:CD:4C:82:76:94:64:B6:3E:23:99:75:8D:E0:CF:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214223
Signature Algorithm: sha256WithRSAEncryption
14:c6:96:25:1b:95:80:88:45:40:50:54:e5:8f:9f:18:38:73:
2e:de:6e:91:ee:bd:d2:92:15:ca:92:18:4d:75:ad:95:19:4d:
6c:1d:07:42:2a:bf:7b:e0:be:9a:a2:f7:1c:5c:f3:1c:2c:3c:
86:77:ea:b8:e9:36:dc:6c:84:8d:93:63:ae:3b:b0:7e:79:06:
34:b7:70:11:55:5f:0b:5b:e3:96:d5:62:d5:56:2e:2c:53:90:
a9:a9:de:cd:b4:35:0d:85:20:e6:5f:65:26:b7:70:b9:1f:c8:
43:9a:d7:3f:d3:c0:0e:d0:8b:2a:9d:5c:0a:45:74:fd:39:bc:
39:de:ac:58:cb:5f:24:7e:86:a1:cf:05:1e:63:f4:ef:9b:09:
20:53:81:cf:82:4d:b7:65:68:dd:64:3f:44:9c:25:69:98:c5:
94:c3:1d:34:2e:3f:db:22:d0:fe:e6:41:3b:2a:df:83:46:42:
23:88:07:49:3f:5c:f8:ce:52:83:58:d4:f1:98:5f:f7:fd:67:
dd:ce:4d:68:9c:c5:c6:56:0a:fb:c4:d5:e4:8d:f8:14:a6:c4:
e5:f0:90:3e:1f:5d:c8:85:c5:c7:6b:ad:2f:33:79:d9:4b:23:
5f:cc:72:61:a9:e1:36:c4:74:9c:9c:61:9c:0f:b5:c7:7a:b7:
6a:19:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 01:04:41 2026 by rpki-client