This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/o-XODVf1hZc2qeOEskGvrZ916vI.asa
File: o-XODVf1hZc2qeOEskGvrZ916vI.asa (raw, json)
Hash identifier: t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=
Subject key identifier: A3:E5:CE:0D:57:F5:85:97:36:A9:E3:84:B2:41:AF:AD:9F:75:EA:F2
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019B9D9C23A178BCEDCF155EC32D988CD45C
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/o-XODVf1hZc2qeOEskGvrZ916vI.asa
Signing time: Thu 08 Jan 2026 12:36:54 +0000
ASPA not before: Thu 08 Jan 2026 12:36:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214145
Providers: AS: 6939
AS: 34927
AS: 43754
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9d:9c:23:a1:78:bc:ed:cf:15:5e:c3:2d:98:8c:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Jan 8 12:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e5ce0d57f5859736a9e384b241afad9f75eaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:1c:c9:6a:a7:b2:a6:9e:89:bd:e6:25:84:
18:8f:fd:76:88:bb:79:55:03:27:8e:fb:f8:c5:54:
cf:7c:bf:5d:5b:35:0a:82:1b:8e:8d:30:a2:ab:db:
cd:f0:7f:b4:12:8f:30:25:a0:bf:5f:3f:f9:e8:77:
f2:d9:01:e6:c3:62:02:6a:a9:b5:80:e7:11:81:99:
a2:dc:16:96:9f:d4:24:06:e1:ba:8f:32:f0:00:23:
e6:7a:61:6e:d2:aa:ed:d8:9b:ac:79:13:08:83:63:
51:7a:fd:06:02:87:d1:90:f0:a8:fb:2c:b7:79:cc:
4a:f1:55:e9:42:94:50:1a:d7:5c:2a:7f:75:f2:3a:
70:e4:be:10:a4:b9:23:90:a5:a5:9a:c2:eb:06:96:
ac:59:c1:83:6f:ea:e8:44:4a:9e:f8:64:ff:4e:3f:
eb:b2:56:6a:6d:5b:d5:e3:ac:b5:62:91:cc:97:1f:
71:a0:b5:08:2c:9d:8f:a3:5b:59:6d:05:f3:2b:32:
17:3c:89:c8:d6:5c:20:29:19:ad:2b:95:68:f5:97:
11:1d:08:59:de:1c:f0:00:24:89:c0:b7:d9:f2:fd:
53:3a:28:81:60:7f:1b:71:ec:ed:9a:22:fc:3e:df:
3d:75:2e:d5:ed:57:ef:5a:7e:9e:0a:e4:d9:05:bd:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:CE:0D:57:F5:85:97:36:A9:E3:84:B2:41:AF:AD:9F:75:EA:F2
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/o-XODVf1hZc2qeOEskGvrZ916vI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214145
Signature Algorithm: sha256WithRSAEncryption
5b:5e:de:1c:6d:9d:7a:67:a2:f6:d2:11:7b:0f:df:ec:ea:e4:
f4:23:25:ea:21:77:92:3b:6a:3f:f9:43:09:f4:e6:e8:8b:c5:
0c:d8:54:a9:86:1d:6b:f3:60:74:fb:36:22:53:16:2c:08:ef:
08:ae:7f:86:8c:5a:38:cb:ff:5a:40:6e:0e:6f:8e:c9:58:5c:
c8:62:86:cc:64:e3:ca:ec:ed:4e:6e:41:6a:81:06:30:19:fa:
b7:4b:b6:a5:ef:a3:f3:25:b7:01:17:c7:56:a8:54:2c:5d:af:
15:4f:f5:81:93:91:9c:10:22:4a:0d:f5:ae:3a:a0:41:6b:e5:
1d:d0:4c:93:e0:00:00:1c:66:f8:db:bd:64:de:be:7e:f5:9d:
d5:e8:09:97:b0:f2:07:2a:06:c9:b9:01:16:68:b9:12:f8:1d:
9d:3e:4b:f3:d5:b9:2e:74:09:33:e7:f1:6b:93:cc:7f:b1:18:
52:fd:b0:58:5d:c8:15:a7:ab:98:38:73:ee:36:d7:5d:05:61:
8b:22:5a:c3:ee:38:30:90:8c:7b:3c:d8:c3:81:85:6c:7e:5e:
0e:f6:cf:d5:10:66:76:23:0b:d5:e8:c8:6f:32:96:c8:63:32:
20:7f:33:9d:e5:19:2a:37:6f:31:85:47:4a:d0:95:ba:2d:5a:
a5:3c:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:03 2026 by rpki-client