This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jJszq_XD6U1IQ1eScD7tcaTimZU.cer
File:                     jJszq_XD6U1IQ1eScD7tcaTimZU.cer (raw, json)
Hash identifier:          ao33psk1kSIPPnopMTMdBPzn9VZwohz0mdwQn06Lpw8=
Subject key identifier:   8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01857245E6C07B38478DFB07FFCB3D515162
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 11:37:41 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 217.8.117.0/24
                          IP: 2a12:2d80::/29
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:45:e6:c0:7b:38:47:8d:fb:07:ff:cb:3d:51:51:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 11:37:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c9b33abf5c3e94d48435792703eed71a4e29995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:a6:2b:05:54:cf:dc:ad:00:32:ee:14:d1:
                    79:3d:b8:ee:a6:f3:8b:a9:3d:37:a0:64:dd:86:34:
                    99:9c:2d:85:a0:38:08:0f:f7:03:5c:5d:74:12:46:
                    93:df:a5:6a:1f:06:f0:ed:49:f0:dc:0a:82:f8:42:
                    b1:08:9a:40:1d:d1:21:a6:fd:1a:ad:27:dd:1e:cc:
                    f2:a5:76:1e:c1:f1:ba:1a:11:eb:3f:06:7a:02:79:
                    c3:3d:18:03:53:27:60:fe:f3:14:e1:62:02:59:75:
                    f0:9b:49:19:88:75:00:20:ba:36:67:56:36:bd:e9:
                    a2:2a:fb:5e:97:6c:9b:7f:f3:29:64:cb:e6:49:c0:
                    ab:01:f9:a9:2f:f7:47:02:b8:8a:b9:93:c0:33:55:
                    d7:f4:97:52:98:71:c3:f5:26:1a:11:f2:33:bc:47:
                    9c:3d:fa:00:e0:21:11:6d:72:03:84:15:0c:ba:3d:
                    c1:51:e2:74:16:0a:21:66:11:3b:6e:20:a0:1b:46:
                    97:dc:e2:e7:58:25:14:95:8c:22:ee:a1:e4:ae:7d:
                    32:fc:96:db:13:76:ce:92:e5:ee:80:43:f1:eb:d2:
                    f7:31:29:16:2f:7f:c1:a6:f2:4f:8b:53:ee:32:2f:
                    60:e4:92:45:6e:42:4d:6e:5b:25:de:89:00:cd:b6:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:33:AB:F5:C3:E9:4D:48:43:57:92:70:3E:ED:71:A4:E2:99:95
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/866bc7-5703-4760-b9d4-2e4ef6879238/1/jJszq_XD6U1IQ1eScD7tcaTimZU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.8.117.0/24
                IPv6:
                  2a12:2d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         32:06:01:a1:57:a4:c2:96:89:98:4e:70:e8:7f:7e:7b:ad:d5:
         7f:14:b1:81:ae:e7:9b:30:9b:01:79:1f:c4:7c:57:d9:7b:aa:
         a7:66:d3:32:c6:a8:78:5a:5e:bd:d4:97:76:8e:3e:27:74:56:
         6c:ec:68:c6:6e:29:24:ac:15:6d:b4:23:e1:4b:2c:c5:49:9f:
         b5:0d:37:3f:5e:e3:08:05:45:33:0f:58:7d:b7:34:fd:9f:f8:
         74:91:5e:49:ff:19:b6:1e:af:20:fe:71:8b:58:96:e3:6e:0e:
         9b:9a:45:07:cc:66:f8:60:6e:92:45:1b:3e:98:36:00:e2:0e:
         e0:c2:7f:ca:34:5d:83:96:d2:63:b5:4a:57:17:fb:01:93:2e:
         75:ab:2b:d4:9e:65:67:aa:76:e2:93:57:69:28:bc:e0:99:fc:
         c7:fa:d0:4d:80:bf:95:84:ab:3b:dc:4d:46:79:a0:1c:5e:38:
         65:a6:28:ac:13:f2:9a:52:f3:33:c4:be:45:c5:77:6c:f1:48:
         f4:75:c3:0c:6e:04:52:91:5d:0a:f0:f8:2c:ba:f0:04:86:6a:
         c6:ab:a6:53:ec:cb:18:3e:dd:f5:e4:70:b1:4c:6a:35:71:fc:
         25:52:51:49:8a:a8:55:56:be:f7:94:18:45:e3:8b:08:b4:50:
         fd:27:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----