This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9APAVgIssnTKkTbMWmqz-ZKWQzk.asa
File: 9APAVgIssnTKkTbMWmqz-ZKWQzk.asa (raw, json)
Hash identifier: t2TNQyBjvhJVC1oMPGQYGSgDoc/TaANjpVHxgHvHhck=
Subject key identifier: F4:03:C0:56:02:2C:B2:74:CA:91:36:CC:5A:6A:B3:F9:92:96:43:39
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019B883251134ADCAE1C1FC294B3F948CD21
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9APAVgIssnTKkTbMWmqz-ZKWQzk.asa
Signing time: Sun 04 Jan 2026 08:49:17 +0000
ASPA not before: Sun 04 Jan 2026 08:49:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 44208
Providers: AS: 42337
AS: 58224
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:88:32:51:13:4a:dc:ae:1c:1f:c2:94:b3:f9:48:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 4 08:49:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f403c056022cb274ca9136cc5a6ab3f992964339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:7b:1d:21:80:c4:59:52:e7:3a:a1:23:06:
11:23:4a:e8:8a:22:1b:fb:21:e1:d3:b8:97:f7:72:
16:9d:37:57:44:95:e1:d3:6f:e4:a4:15:46:cf:82:
57:b9:f9:24:c7:e4:15:31:8c:bf:f2:e1:87:47:f0:
de:72:22:56:7f:be:3d:5d:71:53:e6:52:ca:89:4f:
76:d3:cf:a8:4b:6c:9b:74:ce:36:88:c2:30:61:61:
f1:7b:f3:a8:04:0c:69:95:c3:ec:57:8a:be:8a:d5:
a3:8b:45:0c:2e:9f:0b:ce:38:a5:6e:46:7d:6b:29:
85:72:73:be:81:18:a8:7f:07:89:a5:a9:25:dc:29:
d7:64:9b:ff:31:65:89:e0:53:6f:dc:be:5c:ad:7d:
a2:e3:46:ed:78:85:f9:dc:09:31:7a:5c:dd:a8:02:
de:65:6a:56:7d:20:af:e8:7a:f3:49:84:61:12:c9:
74:a3:af:79:49:4a:aa:dc:b3:45:94:7c:a4:ea:d0:
53:c7:4e:65:39:44:94:6b:62:8b:05:f6:c5:01:09:
ce:c9:32:d1:77:28:9e:ea:62:92:58:e4:06:a2:08:
31:c3:ed:48:d2:76:01:d2:fa:0c:e1:41:b1:68:76:
25:f2:c0:0e:07:63:86:e4:82:e5:8d:a6:ed:39:fb:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:03:C0:56:02:2C:B2:74:CA:91:36:CC:5A:6A:B3:F9:92:96:43:39
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/9APAVgIssnTKkTbMWmqz-ZKWQzk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44208
Signature Algorithm: sha256WithRSAEncryption
53:2f:6b:86:64:c5:36:8d:c0:38:fc:62:51:15:93:27:b5:70:
cc:c5:62:74:ca:ef:c9:15:72:5b:98:8b:f2:7a:db:28:8d:07:
84:34:09:c1:28:3c:7f:c1:72:62:b2:04:22:ca:b6:0d:9b:ff:
df:e1:70:fe:cd:ae:b6:50:94:36:1f:94:a9:05:06:ee:41:d9:
f3:a7:d2:cb:95:37:8f:f6:b4:80:29:c4:da:ad:a1:11:da:70:
36:81:90:95:50:b3:bf:0a:5e:5b:17:ac:30:8b:b3:32:cd:e8:
0d:ff:cf:c3:ab:14:f7:74:32:34:37:10:00:25:eb:de:1e:9f:
ac:94:af:8d:a2:22:a5:59:f8:97:a8:a6:54:4a:51:bf:b0:4e:
26:15:4e:a1:45:11:f1:89:e4:43:a9:16:fe:28:08:7d:d0:c7:
07:94:18:2f:17:cc:92:64:34:c4:c2:fe:a3:d4:df:d4:91:c1:
08:49:6f:2f:37:20:5b:7f:98:4e:39:54:8a:b8:33:eb:7f:37:
89:ea:d2:30:56:63:a5:69:6d:21:5d:ce:c0:d7:22:ad:14:1e:
d8:39:cb:29:c6:ca:2a:15:a3:d3:37:d8:31:52:bd:c3:ee:9c:
07:d4:d8:1d:1f:c5:a4:1a:6a:f9:95:8b:c4:23:a2:24:05:2f:
97:aa:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 22:54:50 2026 by rpki-client