This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/ouVL9f4Kp01QdxrOilk4XOoPv2E.asa
File: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (raw, json)
Hash identifier: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=
Subject key identifier: A2:E5:4B:F5:FE:0A:A7:4D:50:77:1A:CE:8A:59:38:5C:EA:0F:BF:61
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019C0418F6415E88B85E8D6311A233D38495
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/ouVL9f4Kp01QdxrOilk4XOoPv2E.asa
Signing time: Wed 28 Jan 2026 10:14:30 +0000
ASPA not before: Wed 28 Jan 2026 10:14:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 15584
Providers: AS: 3269
AS: 12874
AS: 31638
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:18:f6:41:5e:88:b8:5e:8d:63:11:a2:33:d3:84:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Jan 28 10:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2e54bf5fe0aa74d50771ace8a59385cea0fbf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:c0:28:83:07:dd:1c:19:bb:2d:14:33:95:
0b:c0:a3:d7:90:17:ec:f9:ec:4a:e8:9f:c9:05:46:
a3:18:70:cc:b1:c1:1d:f7:2d:89:21:75:22:72:26:
6c:ae:2b:ca:07:f3:69:37:d3:ec:51:a3:79:c6:88:
3a:14:56:86:8c:fc:63:65:7a:ee:0e:d0:7a:a6:74:
f4:2a:38:c2:7a:4a:45:d6:e2:0d:95:82:da:54:49:
cb:e2:4e:f2:18:1b:27:cd:c0:3a:b3:be:92:7d:59:
2b:4a:61:d3:2a:52:82:71:d8:4f:2a:e7:7a:92:74:
1f:93:b5:56:43:89:0e:f4:6c:8d:c2:5b:c3:ca:08:
73:92:5b:85:99:ec:5e:86:22:36:e1:ac:c7:f6:cf:
62:6f:aa:35:0d:e3:00:e6:6f:83:aa:26:2a:cd:ed:
3f:4f:2e:8d:65:41:c2:8f:a2:4a:d7:b2:a5:e0:be:
38:aa:81:db:c9:2d:f3:f5:7d:5e:dc:d1:8a:de:ca:
15:39:7b:20:19:be:b8:7b:93:c7:88:f6:99:48:64:
b9:5f:99:93:79:94:69:e1:5a:7c:72:fa:be:9f:f6:
0f:82:38:7d:e7:80:4e:10:cb:a9:b5:b8:95:9f:ce:
87:59:a5:d1:d5:10:48:27:fb:69:0a:11:49:ba:6e:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E5:4B:F5:FE:0A:A7:4D:50:77:1A:CE:8A:59:38:5C:EA:0F:BF:61
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/ouVL9f4Kp01QdxrOilk4XOoPv2E.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15584
Signature Algorithm: sha256WithRSAEncryption
a7:7b:2f:84:ac:43:b4:12:e1:89:c3:2f:44:00:c2:04:cb:90:
40:b3:e0:ab:2c:a7:09:58:cd:8c:8f:7b:e7:6f:3a:b4:77:e9:
76:5e:c1:56:30:92:09:2f:a2:12:86:e0:cc:81:68:65:b4:a1:
ba:50:c4:56:cf:c6:8c:aa:47:ea:e5:99:48:99:b7:b7:82:84:
36:ea:0d:63:ab:97:88:b8:e0:ac:d9:4e:a1:47:b5:f8:10:f9:
44:dd:ff:e5:23:65:a8:d9:42:ee:1a:35:5b:13:ed:47:3d:69:
18:8a:46:61:ba:87:f2:bd:26:cc:38:27:5f:38:58:d3:d2:bf:
fa:c2:7c:97:52:2e:cd:95:74:63:1b:f0:b5:79:7c:ba:7f:73:
dd:25:f6:21:1d:eb:61:ac:af:eb:d0:b9:08:50:d7:97:c2:6e:
3d:52:7b:59:95:99:0f:d8:42:1a:19:8c:01:ce:b5:b5:cf:1e:
0d:1f:a6:7c:0b:86:7a:4b:7e:0f:5f:da:ba:4c:2e:dd:aa:78:
3c:3e:7f:c9:45:7a:f2:5e:25:82:fc:07:2b:8f:03:d9:ae:51:
37:1b:35:ee:94:ec:2e:d5:e5:d1:fd:c5:e8:67:ea:17:69:d7:
1d:53:ea:19:45:4c:6f:84:13:44:b9:5a:ff:cd:66:cd:16:6c:
35:f3:8d:07
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZwEGPZBXoi4Xo1jEaIz04SVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDg1OGJjMmRjYmIzNzZkNzkxYTliZTlhZjE1MjAyMzg1
MzVkOWYwHhcNMjYwMTI4MTAxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmU1NGJmNWZlMGFhNzRkNTA3NzFhY2U4YTU5Mzg1Y2VhMGZiZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQvAKIMH3RwZuy0UM5ULwKPXkBfs
+exK6J/JBUajGHDMscEd9y2JIXUiciZsrivKB/NpN9PsUaN5xog6FFaGjPxjZXru
DtB6pnT0KjjCekpF1uINlYLaVEnL4k7yGBsnzcA6s76SfVkrSmHTKlKCcdhPKud6
knQfk7VWQ4kO9GyNwlvDyghzkluFmexehiI24azH9s9ib6o1DeMA5m+DqiYqze0/
Ty6NZUHCj6JK17Kl4L44qoHbyS3z9X1e3NGK3soVOXsgGb64e5PHiPaZSGS5X5mT
eZRp4Vp8cvq+n/YPgjh954BOEMuptbiVn86HWaXR1RBIJ/tpChFJum59pQIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFKLlS/X+CqdNUHcazopZOFzqD79hMB8GA1UdIwQY
MBaAFIYIWLwty7N215GpvprxUgI4U12fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQt
OTkwYmIxY2NkMjBjLzEvb3VWTDlmNEtwMDFRZHhyT2lsazRYT29QdjJFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQtOTkwYmIxY2NkMjBj
LzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjzgMA0GCSqGSIb3
DQEBCwUAA4IBAQCney+ErEO0EuGJwy9EAMIEy5BAs+CrLKcJWM2Mj3vnbzq0d+l2
XsFWMJIJL6IShuDMgWhltKG6UMRWz8aMqkfq5ZlImbe3goQ26g1jq5eIuOCs2U6h
R7X4EPlE3f/lI2Wo2ULuGjVbE+1HPWkYikZhuofyvSbMOCdfOFjT0r/6wnyXUi7N
lXRjG/C1eXy6f3PdJfYhHethrK/r0LkIUNeXwm49UntZlZkP2EIaGYwBzrW1zx4N
H6Z8C4Z6S34PX9q6TC7dqng8Pn/JRXryXiWC/AcrjwPZrlE3GzXulOwu1eXR/cXo
Z+oXadcdU+oZRUxvhBNEuVr/zWbNFmw1840H
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:49 2026 by rpki-client