This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/iydyNCqku0iyqPacTYllhNPCn80.asa
File: iydyNCqku0iyqPacTYllhNPCn80.asa (raw, json)
Hash identifier: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=
Subject key identifier: 8B:27:72:34:2A:A4:BB:48:B2:A8:F6:9C:4D:89:65:84:D3:C2:9F:CD
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 019BA9937E48D6023CBEBAD7155640E78886
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/iydyNCqku0iyqPacTYllhNPCn80.asa
Signing time: Sat 10 Jan 2026 20:22:54 +0000
ASPA not before: Sat 10 Jan 2026 20:22:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 44409
Providers: AS: 41451
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a9:93:7e:48:d6:02:3c:be:ba:d7:15:56:40:e7:88:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Jan 10 20:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b2772342aa4bb48b2a8f69c4d896584d3c29fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:03:84:29:b0:25:4f:ab:56:c4:63:eb:7a:
ec:51:ca:db:fe:27:f6:e6:9e:5b:46:60:b2:e3:76:
6b:0b:ba:e9:5e:01:b9:7b:af:90:71:69:65:d0:d8:
78:d8:fc:ec:a3:7c:3d:99:63:62:31:5b:be:e3:0a:
11:54:35:9a:3f:1f:83:10:aa:6e:39:cf:2a:bb:35:
f1:8b:0b:2f:dd:7d:e0:3f:10:c7:39:3d:cb:03:12:
f1:e7:ae:0d:51:b6:7c:93:2a:45:0b:a1:d0:56:ce:
b5:30:89:22:3d:c1:ec:ce:5f:c1:fa:cb:2b:92:04:
be:f6:cf:0c:e9:4a:72:22:48:89:6f:f1:6d:cf:26:
69:21:c9:d1:4b:1c:ea:13:9e:aa:3a:de:98:38:cb:
9e:1d:26:db:ec:85:d0:30:7a:4f:f0:25:4c:de:20:
03:3a:17:84:f3:a4:2b:f5:0d:7a:ff:55:9d:5d:c8:
27:84:a2:d6:0d:41:3c:b3:7b:8e:3d:f4:06:c3:8c:
8e:6d:71:49:1e:6a:a8:84:80:a2:b4:22:a8:b5:8b:
78:87:21:48:8c:c6:5a:a5:e6:a2:65:a6:09:d3:74:
c3:26:38:e1:e4:15:f9:d4:84:09:f5:84:8a:24:81:
28:a0:6e:7e:57:e1:e0:d5:80:57:2e:5a:e1:8f:4b:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:72:34:2A:A4:BB:48:B2:A8:F6:9C:4D:89:65:84:D3:C2:9F:CD
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/iydyNCqku0iyqPacTYllhNPCn80.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44409
Signature Algorithm: sha256WithRSAEncryption
be:d4:92:47:b0:1a:1c:ad:51:81:ec:5e:15:70:e7:0b:7a:e9:
b2:e9:65:ba:e1:3e:09:56:be:d1:8a:7b:b9:d7:9d:97:ef:88:
41:72:12:44:a4:7e:77:a3:d0:72:eb:11:39:3d:65:35:b1:15:
2e:db:27:59:ac:84:56:65:58:76:cb:a2:88:a7:b5:76:cd:50:
03:6b:f4:61:c7:da:c8:e3:0e:7c:35:44:8c:02:5f:98:91:9b:
b9:7e:a4:bb:7c:c3:bd:e1:64:cf:e7:ca:5f:bb:b5:29:ac:03:
e2:90:4a:be:9d:c2:46:a9:55:82:b5:72:bf:5a:46:d0:3d:78:
21:d4:53:23:36:da:6e:da:4c:a8:d4:fe:fb:6c:7d:d7:2c:71:
6d:b5:0d:bd:a6:50:73:5f:69:6a:b2:86:b0:0f:29:59:ed:5b:
8a:1d:74:ad:3c:c0:1c:5c:6c:df:41:6a:68:fe:41:9c:5d:2b:
26:80:59:00:d0:a1:0e:c5:59:f8:f4:57:3f:89:0a:ef:e7:38:
a5:bf:9b:b4:09:41:1f:2b:2e:2d:f5:47:7e:31:b6:b8:1c:24:
32:fb:27:04:19:76:4c:46:95:f7:34:98:78:d2:b4:41:8f:9f:
76:f0:cd:ca:bd:d5:f8:f4:37:c5:8a:d8:ba:0e:f3:9d:57:61:
70:bf:bf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:55 2026 by rpki-client