This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/2OHFPQVJVgVn60Ld5ccjFPlW1i0.asa
File: 2OHFPQVJVgVn60Ld5ccjFPlW1i0.asa (raw, json)
Hash identifier: +IoXSl7cJZOwMQhzd2pQ1n8sh9/7YWkQ4/mMli/beos=
Subject key identifier: D8:E1:C5:3D:05:49:56:05:67:EB:42:DD:E5:C7:23:14:F9:56:D6:2D
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019B4B52668DDB94B8282ADFFB51063C63C2
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/2OHFPQVJVgVn60Ld5ccjFPlW1i0.asa
Signing time: Tue 23 Dec 2025 13:07:29 +0000
ASPA not before: Tue 23 Dec 2025 13:07:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 49432
Providers: AS: 48362
AS: 215510
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 11:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4b:52:66:8d:db:94:b8:28:2a:df:fb:51:06:3c:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Dec 23 13:07:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8e1c53d0549560567eb42dde5c72314f956d62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:89:fc:24:b3:30:bb:e5:ee:cc:84:14:4b:
50:03:4e:d5:ff:9f:9a:a6:e8:d3:56:a3:36:b2:48:
2f:f6:6a:d7:25:ac:66:05:00:cd:40:08:91:8e:3d:
77:b2:c7:ce:55:21:d1:be:ac:72:41:b0:ba:b1:76:
37:df:05:1c:44:44:a0:69:e3:16:04:c6:df:ee:f1:
23:eb:66:68:e0:90:12:13:1e:3a:77:21:d9:81:9e:
38:af:fa:08:40:04:80:7e:7e:d7:ca:9c:4d:6c:e0:
eb:f5:df:9a:27:96:c9:9e:80:07:c6:12:64:01:c7:
21:49:1b:00:9d:ef:e6:ca:8a:e9:9e:e0:32:01:29:
f8:65:81:6a:90:bc:c0:ed:6f:74:49:34:3a:70:a8:
15:67:a5:15:2c:9d:8e:cf:a4:82:04:c8:62:5e:97:
73:eb:34:9e:d1:76:da:a5:92:97:0c:13:1e:5d:71:
85:ea:a4:d4:0f:05:f2:27:13:82:e4:5c:51:bb:0b:
83:a7:2b:b6:ab:4c:52:0e:13:7c:a4:5e:00:1f:98:
2a:c4:fe:0c:0d:dc:f0:0a:2d:04:37:6c:56:49:56:
6c:ca:5d:b6:4f:5b:3c:02:c0:f1:69:ec:d8:33:28:
bb:34:db:cc:cb:68:1c:78:22:22:97:38:ee:16:ff:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E1:C5:3D:05:49:56:05:67:EB:42:DD:E5:C7:23:14:F9:56:D6:2D
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/2OHFPQVJVgVn60Ld5ccjFPlW1i0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49432
Signature Algorithm: sha256WithRSAEncryption
1d:05:0c:ed:00:ee:23:55:88:66:ca:92:4b:ab:4c:03:c7:36:
f8:7d:63:73:d9:0c:dc:84:49:31:3b:57:33:29:41:c9:b7:43:
21:39:65:6c:fe:db:4f:0d:7b:b9:ac:8c:ed:ac:bd:1d:34:52:
58:8c:ff:a5:e1:65:47:69:20:64:18:9a:ad:56:51:0a:81:aa:
de:f9:d0:94:95:ca:c0:98:f3:08:68:22:d7:5a:44:69:ae:8c:
82:47:91:b9:e0:d9:02:ed:9a:49:a9:1d:cc:fb:0f:4c:cd:b4:
28:17:5c:72:3b:c4:89:c2:0d:ba:5b:a3:78:d1:60:f3:1f:00:
3c:a6:cf:11:9f:8d:c0:93:a8:72:ef:b1:33:88:d8:31:51:a8:
cd:58:22:3f:ec:61:d0:bb:b6:c4:dd:d9:e3:67:40:c7:1f:8e:
a5:1a:cb:83:88:33:6d:4b:c5:b7:75:1f:35:c4:75:74:f1:24:
20:c3:a2:69:a2:91:da:01:ba:3f:5e:ec:f7:c1:9e:6e:6b:4b:
4d:d9:3c:90:51:5c:7d:a2:ce:03:62:67:4b:a7:bc:fb:7f:9d:
d2:4e:3b:5f:23:64:29:fb:58:a4:10:e7:7b:cd:b6:06:05:c9:
c1:8e:63:18:7c:c9:fc:fd:27:77:fa:a9:db:4d:38:52:af:e4:
9a:48:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 17:20:16 2025 by rpki-client