This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.cer (raw, json)
Hash identifier:          WK/UrU68xrxE2fRhm/Q6SAcvBkBi2Ug5HKAUTzzMUrs=
Subject key identifier:   01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B77C71288CFFFF0A7B3A51E260120DF66
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 04:18:13 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 209795
                          IP: 194.93.12.0/22
                          IP: 2a09:2080::/29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:12:88:cf:ff:f0:a7:b3:a5:1e:26:01:20:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:0f:d6:32:49:a8:b1:37:19:e1:42:d4:6c:
                    76:13:3b:11:ad:b1:8a:1c:14:f8:e1:d8:6d:ad:04:
                    c1:2a:99:24:c4:8b:9c:47:9c:47:7b:08:15:a8:b2:
                    fb:a2:92:fd:67:6a:5e:11:12:a9:ec:cc:75:b6:a8:
                    88:c0:46:44:cb:ff:78:2f:74:5d:b8:e3:ef:9a:bd:
                    e5:d7:4f:28:c5:dc:00:85:86:b1:36:d5:93:05:34:
                    6f:f9:36:79:b2:2b:01:8d:ff:1e:8b:ee:27:da:24:
                    c6:c3:84:df:f0:38:ec:a7:9f:f9:0f:51:cc:3e:09:
                    a1:03:d9:ba:e7:42:9c:5f:72:5e:98:1c:e6:6e:0e:
                    7b:f6:f8:19:cf:4e:18:cb:cb:65:bf:5b:aa:4c:d8:
                    f4:3a:44:3e:47:1d:2e:f6:1c:f8:76:9c:8d:0e:d8:
                    b4:d2:93:e4:f0:d6:c3:60:65:bf:ea:77:98:e5:72:
                    75:30:b4:a4:cd:3a:fb:75:27:44:a6:34:3c:bb:6b:
                    f8:93:3b:50:c8:7b:99:7b:5c:bf:5e:dd:ab:74:8a:
                    b9:e9:df:1d:7d:d7:5f:a0:39:aa:cb:12:4d:e9:9f:
                    cc:9c:21:ed:c9:44:b7:2f:d3:43:28:de:89:6a:ea:
                    ef:5c:c7:c4:bf:56:d8:62:58:2a:0b:f6:3a:ba:ee:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.12.0/22
                IPv6:
                  2a09:2080::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209795

    Signature Algorithm: sha256WithRSAEncryption
         66:df:f5:5b:14:d4:87:1f:cc:f9:84:ba:56:80:50:c9:b9:b2:
         74:d5:54:2b:4b:77:f5:da:a3:3e:e5:c8:07:b9:0c:df:b1:4b:
         c2:ac:9c:28:81:6e:69:8c:bd:3f:1b:1f:e0:53:79:fd:8a:0a:
         4e:e4:ec:a0:fa:2c:9d:dd:f9:4b:5c:1c:d6:9f:2e:d4:f5:f5:
         ce:c8:27:f7:a1:87:53:d5:26:35:b5:be:27:3d:44:8a:33:20:
         6a:67:1a:98:88:de:57:fa:50:b6:d2:8c:b0:d6:bc:d9:16:69:
         19:6a:5e:68:48:82:7d:11:7e:fc:be:80:6d:05:89:75:1e:e8:
         96:bc:09:14:95:f1:1c:a6:4f:cc:16:59:79:8e:a3:d4:4e:43:
         4d:53:ec:06:d5:c3:bc:3f:81:cd:81:6e:91:e1:a6:71:f1:3c:
         db:3e:6a:02:be:7d:f0:af:d6:f4:8e:a5:01:df:ec:4e:d9:2e:
         fd:02:00:c7:87:a2:33:7b:06:8c:f4:c1:74:38:60:f9:b6:45:
         3e:4a:f1:4a:80:24:ed:80:8e:02:d1:af:ac:3c:9b:76:68:01:
         3e:f8:09:55:47:c9:c5:03:45:0f:48:9b:be:d9:38:14:c4:2d:
         d2:26:86:dc:b0:9a:f7:26:c4:2e:b0:ad:7a:dc:76:60:d2:af:
         30:a3:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----