This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/oGFjYMB457098tjZcB4IDP8t_T8.asa
File: oGFjYMB457098tjZcB4IDP8t_T8.asa (raw, json)
Hash identifier: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=
Subject key identifier: A0:61:63:60:C0:78:E7:BD:3D:F2:D8:D9:70:1E:08:0C:FF:2D:FD:3F
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 019BA9937DD8F1ABB8D3B1966A3E2F5A6E26
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/oGFjYMB457098tjZcB4IDP8t_T8.asa
Signing time: Sat 10 Jan 2026 20:22:54 +0000
ASPA not before: Sat 10 Jan 2026 20:22:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 41451
Providers: AS: 49436
AS: 50873
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a9:93:7d:d8:f1:ab:b8:d3:b1:96:6a:3e:2f:5a:6e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Jan 10 20:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0616360c078e7bd3df2d8d9701e080cff2dfd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:9b:61:ba:71:c7:7c:c7:ca:87:2f:66:8a:
f5:75:e3:69:56:98:a8:0e:0b:54:12:12:6d:8c:80:
1e:b3:cc:6a:91:5c:bd:0b:85:fe:66:72:24:5c:05:
09:d5:f1:e9:d1:5a:f1:51:6d:3d:19:7c:f4:6b:63:
09:e6:32:6d:c3:e5:e7:05:de:3e:07:fc:78:d8:5a:
d2:67:d3:40:fd:da:47:a6:b7:a3:ef:b2:0c:e8:c7:
cb:93:58:34:32:c7:43:13:83:30:5d:e0:4e:2a:f3:
f9:85:78:bf:fa:57:00:39:f4:6e:10:51:68:83:21:
5d:46:3d:7a:9a:57:6e:fb:f8:ac:98:9a:eb:f9:3f:
30:06:a5:4a:fd:13:5c:a5:dc:90:68:eb:93:51:2a:
de:62:9a:3a:73:2d:4e:40:12:52:4b:26:b0:d9:55:
98:a8:96:ff:a6:c2:6a:d1:99:1c:d1:2d:f0:69:23:
d8:78:70:fb:3c:1f:1d:48:7a:42:80:79:31:18:94:
64:15:65:50:00:02:29:7f:bb:2e:53:d5:9e:c4:44:
60:ac:1b:ad:88:4e:c8:bc:a2:5f:57:85:9e:29:aa:
72:12:95:cf:d0:54:50:d6:b2:cb:17:d6:5b:a0:20:
0e:9c:67:12:02:8f:fa:8c:84:97:5f:ae:88:d4:6a:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:63:60:C0:78:E7:BD:3D:F2:D8:D9:70:1E:08:0C:FF:2D:FD:3F
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/oGFjYMB457098tjZcB4IDP8t_T8.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41451
Signature Algorithm: sha256WithRSAEncryption
6f:d5:3d:3b:ea:3e:39:ef:c7:6f:c3:a6:0b:82:a7:17:c6:47:
4f:00:42:b0:55:9a:d4:23:a3:20:f4:9e:be:3d:12:90:dd:c3:
b3:ff:8b:15:58:dc:5b:aa:f6:ed:0b:df:52:e3:51:fb:4c:32:
73:70:eb:de:8a:b9:68:9e:88:33:fc:f2:47:fb:65:42:2b:f2:
7b:87:87:c4:8f:10:1b:b2:cc:af:e9:f6:95:09:15:b2:06:1c:
02:d6:d3:06:62:32:bd:f5:a2:00:33:6d:3b:75:29:85:24:7c:
9d:92:f0:ca:cd:59:bc:b0:8b:59:aa:ea:d3:2e:2c:d6:86:e4:
db:b6:c7:aa:32:fc:a5:93:73:c5:ef:f7:96:83:a4:35:9c:aa:
f6:33:04:24:bf:32:75:f0:96:bc:38:04:f0:e0:c3:58:e4:d9:
07:34:a1:7d:b8:45:0c:f3:24:1f:cb:05:73:68:70:19:04:49:
d9:2c:b6:1a:6e:29:e4:e9:65:63:58:7c:df:b3:2c:01:c6:c3:
8d:35:f0:f5:e7:14:ce:5d:6f:25:2a:fe:8a:7d:7f:0b:62:0a:
b7:c5:b4:66:67:10:5b:bc:4c:2c:c1:e6:56:44:ad:ba:1a:e7:
b7:10:ca:c6:c1:b9:a2:10:69:a0:8d:3b:a4:58:8f:df:c7:5f:
52:b3:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:56 2026 by rpki-client