This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/D84NfmvTfMKexslgZq5Al71ZBj4.asa
File: D84NfmvTfMKexslgZq5Al71ZBj4.asa (raw, json)
Hash identifier: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=
Subject key identifier: 0F:CE:0D:7E:6B:D3:7C:C2:9E:C6:C9:60:66:AE:40:97:BD:59:06:3E
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019BE5EB37A074970320546B0D954C8618B9
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/D84NfmvTfMKexslgZq5Al71ZBj4.asa
Signing time: Thu 22 Jan 2026 13:35:56 +0000
ASPA not before: Thu 22 Jan 2026 13:35:56 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 206002
Providers: AS: 3356
AS: 5511
AS: 25091
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e5:eb:37:a0:74:97:03:20:54:6b:0d:95:4c:86:18:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Jan 22 13:35:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fce0d7e6bd37cc29ec6c96066ae4097bd59063e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:a4:d2:99:2f:5e:76:cb:db:99:94:50:c8:
ad:58:c8:8e:70:a0:bb:e5:a7:46:9b:44:be:9a:00:
87:43:da:6f:bd:d1:9a:db:a0:87:8c:e4:09:bb:da:
f8:06:a0:22:ab:a6:f6:c6:17:e1:f4:21:45:ac:32:
f6:70:db:8c:2c:dc:64:cb:83:5d:7b:65:5d:a5:07:
50:3c:80:6d:3b:20:71:16:77:b2:19:7a:da:97:21:
db:49:67:8a:71:5a:46:d4:58:db:4e:f6:8f:3a:8e:
22:de:cd:a4:14:b7:96:d7:c7:88:15:64:78:c5:c7:
fe:da:44:78:0c:76:64:53:7a:a4:20:16:0b:af:af:
4f:28:bc:c7:94:a7:e5:0f:46:8a:be:06:a4:de:e4:
05:d1:21:b9:74:28:9b:95:4b:66:49:5b:9a:c7:a7:
74:05:7e:30:69:1b:54:b5:ef:f4:1f:03:a2:80:98:
6a:d5:15:6f:b0:e4:18:8d:b6:93:6f:91:2d:d2:a6:
a7:d9:0c:ea:c0:3e:19:f9:61:20:c4:9c:3e:70:6d:
5e:b9:b4:12:e1:e5:53:0f:f3:f2:21:a7:a9:8e:99:
26:06:d2:53:14:72:33:87:eb:1a:f6:53:c7:be:1c:
6a:55:29:60:21:03:12:49:2e:54:38:a2:a5:a0:4c:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CE:0D:7E:6B:D3:7C:C2:9E:C6:C9:60:66:AE:40:97:BD:59:06:3E
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/D84NfmvTfMKexslgZq5Al71ZBj4.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206002
Signature Algorithm: sha256WithRSAEncryption
97:9d:9e:41:2b:5a:5d:e0:79:5f:cc:4f:f9:39:c5:0e:55:6b:
48:98:6e:f3:f0:bd:88:15:b4:fb:e7:87:5b:de:9f:e0:c8:df:
66:e8:53:5e:3d:7e:00:aa:14:22:70:e6:f9:94:1a:4a:ce:69:
c3:96:e4:05:56:2b:37:42:82:ec:06:c7:f3:14:9d:df:0f:fa:
8c:3e:5d:a9:b7:6f:04:bf:fb:1f:e6:e6:04:34:4e:85:14:3a:
8c:f1:10:97:c6:b8:4c:40:98:12:80:b4:48:b5:e9:90:3c:d6:
37:16:ee:c7:d9:50:ef:b4:4c:80:a1:84:5c:4d:91:c7:5a:70:
cd:bb:91:40:a4:26:cf:c5:e8:e1:c7:41:24:1e:fe:d6:d5:54:
c9:d6:94:3a:c2:75:8c:a3:7f:7c:f3:f6:3c:42:d7:45:f7:f4:
5c:7c:4d:9d:2b:e2:c3:fd:8b:3f:c2:61:df:7a:03:a3:64:f1:
f5:fc:d0:ee:15:c0:a9:7c:9f:40:b4:8e:2a:63:6e:bd:1e:8c:
f1:c2:9f:69:56:1a:96:15:a9:ca:46:95:b2:85:77:ef:61:1a:
86:3c:04:78:9a:ba:c1:34:e1:90:0d:33:3d:ff:36:14:b8:5f:
c5:ca:4c:93:4d:fa:d8:44:d7:32:c0:b5:5f:df:98:bd:71:31:
6c:cb:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:01 2026 by rpki-client