This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa
File: bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa (raw, json)
Hash identifier: joUgZ1+fSeYV8k7xjRhKW4mLd1zfaAQo+STxOJIkVhM=
Subject key identifier: 6C:65:FE:74:27:CB:54:46:23:63:C4:3C:03:BB:69:6A:1D:E6:D6:97
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019B65A596D856C2827DA96C99EAF52C35CB
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa
Signing time: Sun 28 Dec 2025 15:48:29 +0000
ASPA not before: Sun 28 Dec 2025 15:48:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 202113
Providers: AS: 553
AS: 8560
AS: 12843
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:65:a5:96:d8:56:c2:82:7d:a9:6c:99:ea:f5:2c:35:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Dec 28 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c65fe7427cb54462363c43c03bb696a1de6d697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:50:8f:6f:89:a5:5e:b8:cf:90:80:a3:8f:
12:27:ee:52:a7:6d:9b:47:df:61:8c:f9:dd:23:be:
6a:66:2c:fe:ed:85:6b:78:10:fb:ff:22:fc:6e:b4:
a7:cb:34:1e:4a:f8:6e:33:8a:8a:3e:1e:93:7c:d0:
9b:d8:61:e3:f8:c6:c3:ee:fd:a0:1e:d2:ed:6c:1d:
34:8c:4e:49:2e:49:df:3d:94:79:29:c9:0a:be:e6:
01:f7:50:d4:6a:93:4c:9b:8c:c4:d8:f2:50:eb:34:
a8:97:53:c1:68:43:46:b2:df:5c:10:a3:27:99:fb:
bf:6a:0b:0e:d2:37:65:a6:63:32:66:e9:7b:69:97:
a9:35:71:b8:38:d4:0b:1f:62:ef:f8:23:8d:62:88:
df:37:fc:df:5b:d6:3d:13:73:d9:fc:c9:40:af:76:
42:d5:1f:2a:cf:61:94:22:68:48:d2:64:63:83:49:
6d:f7:ed:b7:c5:13:c2:25:7f:3e:da:dc:d2:48:b4:
8e:ff:90:d2:ec:f0:ee:65:fe:c6:db:2f:25:76:fd:
96:bf:61:91:2a:dc:8b:15:2b:be:86:80:e8:30:44:
56:47:31:79:99:b1:a3:12:8a:d7:07:ef:3e:17:ca:
c3:ed:f8:51:9b:aa:84:93:f1:3b:c0:dc:db:09:38:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:FE:74:27:CB:54:46:23:63:C4:3C:03:BB:69:6A:1D:E6:D6:97
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/bGX-dCfLVEYjY8Q8A7tpah3m1pc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202113
Signature Algorithm: sha256WithRSAEncryption
13:29:a6:1c:4d:7a:79:b2:b1:5c:ce:25:ff:22:38:9e:4c:54:
42:d0:e2:82:04:1a:ef:82:83:e2:40:51:b5:16:2f:3b:4f:72:
c7:d3:69:2f:a2:dd:73:0b:2a:a4:72:de:a2:c9:90:77:d1:fc:
23:ee:ce:7e:af:70:ba:c5:b2:37:a4:49:fc:5f:cd:07:4d:34:
ca:ea:e0:b2:03:fe:0f:84:d1:21:53:1f:3a:49:b9:f5:72:d3:
39:2d:80:a7:7a:a7:a7:47:5d:5e:ce:37:3c:f9:27:7d:94:2f:
a6:46:94:e2:32:af:e1:53:89:ee:a0:e2:74:72:fa:16:87:90:
21:9e:51:c4:71:55:65:40:74:6e:8e:32:71:3f:a6:68:a0:be:
ba:79:3c:52:7d:69:06:bf:2d:8e:0c:15:99:30:2d:06:46:34:
c6:a0:01:0a:1d:d7:40:c1:57:d2:d7:72:6b:77:8b:ef:3e:98:
36:48:f3:e5:2a:01:11:05:e5:b4:fe:7a:e3:be:bf:8a:06:bd:
0d:61:2f:d6:02:27:c8:74:73:29:7b:6c:5a:be:19:ce:29:f8:
7c:db:b6:74:99:f3:0a:d4:e0:ec:36:04:1d:cf:8f:1e:6c:eb:
4f:ce:49:0e:65:e4:00:c5:d8:6f:f8:cb:dd:1e:bd:7a:2d:ef:
ae:64:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:46 2026 by rpki-client