
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
File: OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer (raw, json)
Hash identifier: /yvuyFYCW/q0TofCvROr07coJzFLo+I5wKI4XupTRA4=
Subject key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7BA50A24F52656B3E6A1F51DEB9F4A11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 22:19:32 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 197433
Validation: Failed, certificate revoked on Mon 02 Feb 2026 13:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:0a:24:f5:26:56:b3:e6:a1:f5:1d:eb:9f:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:8f:f4:cf:8c:bc:66:cf:43:71:f1:f8:99:
08:de:1e:b5:f9:8b:d6:fd:ec:81:ae:3c:a8:4c:8a:
53:fd:e5:9f:b2:3f:d8:39:8b:ee:f3:70:2b:3e:bb:
9c:5a:e8:44:1f:47:f3:87:69:50:b4:39:ec:69:1f:
a1:ce:d9:5f:fe:3d:54:af:16:c6:b2:c7:7a:a3:6b:
7f:93:fb:b5:3e:0a:f6:2e:31:6a:0f:31:4f:3b:9c:
9c:15:ef:84:6f:70:76:01:5a:c3:54:fa:68:84:f5:
36:81:13:a4:8d:ef:d0:39:7f:76:d1:5f:1c:5a:51:
34:7a:bb:d8:06:81:a5:db:03:45:99:fe:05:a6:78:
fd:56:ab:db:64:ed:ca:77:fb:5e:38:5f:f9:7b:47:
92:38:a2:bc:6d:7c:fe:51:98:66:1b:44:ee:bf:12:
84:92:68:26:ac:d3:cb:fc:29:6e:a9:01:1a:ee:0f:
b0:a2:14:a9:8e:14:aa:f0:8f:ce:39:25:31:95:cd:
76:c3:d5:09:35:cc:70:74:ef:b1:fe:e5:5e:ec:02:
c3:6e:58:60:b1:5f:3d:50:82:9c:4f:d6:df:2b:a8:
78:f4:cf:4d:41:43:b5:0d:b6:2e:09:be:0c:10:5e:
7d:67:81:7e:25:39:45:bd:a5:f2:38:64:ed:2c:65:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197433
Signature Algorithm: sha256WithRSAEncryption
13:f4:c5:0c:50:55:44:c0:22:c7:ba:cb:41:cf:0d:3e:ba:03:
45:5c:1f:6c:a8:62:09:b9:3e:7e:f3:6a:af:73:0b:f9:60:64:
be:0d:4f:50:9d:de:4f:aa:d9:ad:98:9c:86:2b:18:5f:31:d3:
e8:8f:44:8d:3a:35:89:1f:1d:5e:91:2b:5c:4b:cd:69:ca:1f:
54:09:c2:80:79:99:56:17:e0:2a:ad:de:e1:75:3f:02:0a:33:
7e:27:d3:d4:91:d5:dc:af:19:e4:fc:02:f0:bb:e5:cc:b1:f6:
ea:d5:6b:00:bc:f4:72:5d:e6:5b:e7:ac:2d:d3:75:c8:21:4c:
71:cf:5d:1b:44:ab:ea:4f:ea:00:cb:ea:ef:83:73:2d:e1:d4:
30:82:99:f7:f4:04:94:36:b6:f0:9c:a6:13:4d:fc:6a:63:13:
40:e3:8f:96:cf:fd:bb:3b:ce:85:f5:53:af:f6:b8:98:d0:60:
05:36:65:e5:dd:04:41:16:e4:d4:bc:cb:0c:17:1e:21:05:15:
b4:14:f1:0f:7a:a4:fb:13:11:51:0d:56:d8:fa:d2:c5:65:29:
3f:a3:15:ec:6a:24:f3:9b:63:84:80:e1:57:0c:b1:de:ba:98:
9c:47:2d:07:53:4e:9d:c2:d6:01:d6:48:b3:37:c9:c4:4d:a3:
39:4f:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:51:33 2026 by rpki-client