This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa
File: HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa (raw, json)
Hash identifier: hcVfaTwHi+0pfWKV+QVinfnUuQbFH+9lvzWtmpQvDYI=
Subject key identifier: 1D:5C:66:01:F0:63:67:A6:4B:74:5C:0B:58:1B:68:F0:01:12:BC:0B
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 019BD758383FDF1BC216AC482C399E0282E7
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa
Signing time: Mon 19 Jan 2026 17:40:41 +0000
ASPA not before: Mon 19 Jan 2026 17:40:41 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 61953
Providers: AS: 62033
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d7:58:38:3f:df:1b:c2:16:ac:48:2c:39:9e:02:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Jan 19 17:40:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d5c6601f06367a64b745c0b581b68f00112bc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:db:80:40:df:34:53:6b:b0:86:59:ec:a2:
e6:ad:5b:03:55:c7:7b:c4:a6:ec:cf:b4:f8:b0:07:
1e:4d:7d:c5:46:8b:09:d9:9f:8b:b2:a2:ac:94:ad:
4d:da:ed:a4:0a:5a:66:0b:29:c0:f7:f2:cc:39:04:
0d:92:ec:ea:d4:5f:3a:75:c5:ab:d3:3c:89:8c:20:
5a:c5:5e:c6:12:f3:12:af:7e:aa:56:5a:ed:aa:44:
e6:cc:4d:df:66:54:e1:d6:10:55:15:ff:fb:23:38:
72:82:40:89:f3:58:c9:ac:b4:89:d3:f7:5e:b4:c0:
d8:ea:54:46:95:18:7c:5d:d2:18:d4:ba:27:6b:74:
de:28:60:82:74:27:a0:51:39:2e:a7:15:da:f9:bd:
d0:db:12:4e:2c:9a:5c:04:ef:7d:21:f7:86:85:c9:
38:d7:83:58:9e:9e:7e:42:90:9b:89:ac:93:1a:e1:
d9:ec:b4:f2:8f:5d:a9:c3:a0:b0:d4:55:6f:b7:ce:
29:a9:4d:9c:81:8e:34:d3:a9:95:5f:b0:51:1b:b8:
9b:75:ec:d7:a0:a5:c0:35:00:23:59:af:7d:26:ed:
30:55:9f:51:11:06:98:61:dd:0a:f2:17:bc:6f:88:
84:d3:b5:16:60:fc:5a:a3:87:1d:ac:21:e0:62:a2:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5C:66:01:F0:63:67:A6:4B:74:5C:0B:58:1B:68:F0:01:12:BC:0B
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/HVxmAfBjZ6ZLdFwLWBto8AESvAs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61953
Signature Algorithm: sha256WithRSAEncryption
9e:c7:ed:e4:2d:42:9a:cf:38:bd:80:ea:b6:36:e4:0a:e2:4a:
94:21:e5:89:3c:87:28:80:a5:31:23:67:b4:19:8b:69:56:c2:
99:fe:f9:87:99:75:c5:e0:35:24:37:d9:fc:0f:4d:89:66:e1:
92:45:5f:79:d0:3a:6c:5e:bf:43:83:2b:bb:3b:7a:ea:2a:e9:
b7:82:27:4e:75:80:d8:7f:cd:ab:87:a3:ac:fa:49:11:20:1f:
7c:40:d8:da:8d:46:0b:db:d2:f9:79:7e:b7:81:63:55:0b:cc:
43:87:7f:89:4f:90:b9:d4:84:e6:0b:62:36:e2:c8:7f:c1:a7:
b6:59:82:38:e7:c8:6c:ae:d9:10:d6:4a:c4:49:c1:3b:9a:43:
8e:e4:0e:71:ef:a3:41:b3:a4:5f:e4:48:4a:ad:a9:72:21:a7:
d3:a2:bb:ac:95:bc:33:eb:9e:46:84:c9:5a:89:91:c4:2a:e5:
20:a2:8d:52:2c:ed:8d:53:a2:d0:5b:d8:10:c5:98:58:3e:70:
02:7a:d8:62:7a:15:35:3b:8a:6b:5e:10:8f:9e:b7:37:4c:da:
09:08:96:8b:6b:18:f2:f4:f2:e4:96:aa:1f:4e:67:22:da:71:
37:e8:1b:6a:81:25:a4:7e:10:00:04:69:93:43:e6:23:ec:04:
e7:84:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 20:48:44 2026 by rpki-client