This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/X1EZ-ABCRMHVXxjjLSitHjqjLek.asa
File: X1EZ-ABCRMHVXxjjLSitHjqjLek.asa (raw, json)
Hash identifier: Ykop3wEALxHFXqXlKtdfS8OKrzCCRzzzSwpse7VkaGI=
Subject key identifier: 5F:51:19:F8:00:42:44:C1:D5:5F:18:E3:2D:28:AD:1E:3A:A3:2D:E9
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019B87D05CF469EA8A03A97953206843F534
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/X1EZ-ABCRMHVXxjjLSitHjqjLek.asa
Signing time: Sun 04 Jan 2026 07:02:18 +0000
ASPA not before: Sun 04 Jan 2026 07:02:18 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 49070
Providers: AS: 12389
AS: 35168
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:87:d0:5c:f4:69:ea:8a:03:a9:79:53:20:68:43:f5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Jan 4 07:02:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f5119f8004244c1d55f18e32d28ad1e3aa32de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:a6:e1:eb:0c:f9:37:34:8c:87:32:39:22:
3d:59:af:8a:16:b0:95:2d:05:ef:6d:6e:68:74:6c:
17:48:76:62:50:05:36:66:f6:f5:19:3c:d1:9d:a4:
ae:32:18:5e:00:a0:94:8e:2d:db:32:c1:f0:21:1d:
0d:af:c5:8f:49:d7:7d:ff:a7:66:e7:b4:d0:20:ea:
1a:3e:c5:8f:dc:bf:a5:ae:1b:da:1c:3d:23:d1:3b:
eb:ba:df:e6:92:88:9b:b1:a1:0d:b5:4a:5f:33:8c:
e9:9b:bf:a9:80:cb:74:a2:86:82:d6:56:91:ac:ef:
69:6a:04:48:8d:e3:e9:d7:b2:9a:5a:4f:94:46:2f:
3a:e1:f7:1c:11:d1:0c:e6:ae:9c:da:21:7a:0c:9e:
48:9c:76:c8:16:53:d0:4e:72:8d:7a:a0:93:2e:9a:
58:57:35:ea:30:22:02:26:dd:12:f1:45:4e:c1:86:
6a:fc:15:af:3e:7a:e4:1b:4c:93:eb:f3:77:b9:f8:
7a:19:0a:0f:3f:1b:65:c9:f2:9b:5c:b8:e8:9d:f0:
0c:8e:36:e8:12:a4:f4:42:3e:14:49:c4:50:0d:ea:
c2:6f:92:5d:31:38:82:6e:23:28:20:3b:5f:0e:31:
bb:1b:bb:60:58:52:b4:be:fc:71:9e:51:c8:f5:99:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:19:F8:00:42:44:C1:D5:5F:18:E3:2D:28:AD:1E:3A:A3:2D:E9
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/X1EZ-ABCRMHVXxjjLSitHjqjLek.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49070
Signature Algorithm: sha256WithRSAEncryption
c3:fe:f2:58:20:71:e3:98:5d:79:fa:ae:3b:7d:48:6a:86:13:
fc:23:13:a0:c9:27:e1:50:1a:24:91:ee:a9:6f:1b:97:e4:21:
ee:5b:d7:1c:21:6b:56:ef:03:97:c9:ed:9f:ed:6c:dd:8a:87:
87:d9:5b:bc:0e:d0:be:a1:5e:7c:0f:eb:af:4a:fa:9b:21:30:
72:6d:2a:d2:48:9b:74:98:05:d0:5b:7b:c6:54:ac:be:ec:fb:
a5:36:a4:3f:b2:73:6c:b6:f5:af:5d:26:a6:88:75:41:d4:b6:
59:35:75:bd:36:10:8a:28:a6:06:d1:19:5c:a8:16:67:bb:a7:
f4:0f:52:43:f9:c0:06:82:e8:37:82:07:09:53:d4:8f:9c:08:
03:eb:67:6c:6b:02:df:ec:b1:10:68:85:62:ae:c8:ec:24:d5:
8f:05:fa:2d:63:94:ef:4d:3b:26:bb:94:fd:e9:28:2e:d6:b2:
67:87:77:9e:8b:6f:a6:ed:76:eb:88:75:d9:3c:df:46:51:61:
cc:ca:28:00:98:1b:8f:32:a9:75:c1:90:ce:f1:e5:7b:7b:b1:
61:ad:6e:de:f7:79:72:a1:05:d9:91:8a:77:ce:97:b6:55:60:
64:cc:7e:e1:c5:50:5f:df:b8:92:ae:6a:8b:f7:de:7a:0e:3a:
05:c1:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:02 2026 by rpki-client