This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/opsubjEoRPBD2SKWbQwhsyQi_lA.asa
File: opsubjEoRPBD2SKWbQwhsyQi_lA.asa (raw, json)
Hash identifier: Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=
Subject key identifier: A2:9B:2E:6E:31:28:44:F0:43:D9:22:96:6D:0C:21:B3:24:22:FE:50
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 019B4B9C8D8E5D703A87735FB796FB33AB48
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/opsubjEoRPBD2SKWbQwhsyQi_lA.asa
Signing time: Tue 23 Dec 2025 14:28:29 +0000
ASPA not before: Tue 23 Dec 2025 14:28:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 215510
Providers: AS: 31543
AS: 48362
AS: 58115
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 19:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4b:9c:8d:8e:5d:70:3a:87:73:5f:b7:96:fb:33:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Dec 23 14:28:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a29b2e6e312844f043d922966d0c21b32422fe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:c0:b8:2a:57:05:b0:35:7a:f2:90:5e:9a:
86:d5:11:fa:1b:07:80:7f:25:ba:1e:c1:a8:af:98:
e6:f0:5d:38:3b:58:cd:ac:09:2e:77:e9:8d:6d:85:
1a:e0:94:6f:22:91:23:bb:7c:e1:34:fa:21:53:ae:
0f:d1:4a:0e:5c:f4:ac:f1:d9:7c:40:00:2e:b9:be:
9d:b0:f6:e1:ba:69:4f:a9:e1:3b:d1:8a:67:28:15:
1e:7f:3d:7b:b6:67:e5:1c:c8:88:48:8a:43:c2:cc:
2c:e9:b6:ca:88:08:5f:2e:ac:22:2f:2c:e0:fe:f9:
6e:36:cc:1f:80:cb:0a:20:33:62:f4:67:7b:db:b2:
98:47:70:be:6e:ca:37:23:94:60:84:c5:4f:4c:8a:
ed:7b:9d:b0:7d:a4:5b:4d:b5:63:1c:ab:e3:e4:93:
dd:ac:79:0e:db:ae:39:fc:ed:6f:5c:b1:0c:bb:e2:
4b:f6:d9:36:9e:60:ac:2c:f0:bd:72:96:49:35:0b:
02:8e:87:0e:f1:c9:83:c1:69:f6:92:93:da:8e:c2:
de:9f:ec:a9:3f:48:c8:bf:50:38:d7:c8:1d:f7:b6:
7a:c3:84:7d:bb:fb:6a:60:d5:33:c0:4d:b1:a8:6d:
76:cc:e3:1c:30:74:4b:f8:75:8b:36:79:a3:8a:52:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9B:2E:6E:31:28:44:F0:43:D9:22:96:6D:0C:21:B3:24:22:FE:50
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/opsubjEoRPBD2SKWbQwhsyQi_lA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215510
Signature Algorithm: sha256WithRSAEncryption
90:cc:66:2d:83:b8:f0:4f:c5:8f:2f:50:19:be:44:b1:d1:1e:
6b:d6:9e:cf:ab:aa:b3:8b:8d:71:3a:01:e7:2d:fb:0f:cf:e2:
85:83:91:7c:71:1f:12:d3:c7:a2:19:9a:d6:69:7a:28:98:b6:
ae:4d:96:e3:d7:a9:4a:94:1d:5f:0d:42:a1:61:94:ee:2e:02:
31:23:2d:c9:8b:26:8f:01:a9:5a:53:4c:00:fb:b8:5b:c7:0f:
b2:13:de:a0:8d:d8:ab:0d:ab:1c:ea:7c:4c:9c:8e:7e:fe:22:
26:08:4e:59:e9:88:7d:43:6d:97:fc:16:f3:8d:48:91:d0:a1:
89:3b:57:e1:ee:66:82:51:af:ce:07:c4:d1:d1:20:d1:5b:81:
b6:2c:6f:9c:b7:02:a3:0a:c6:1b:26:22:58:af:a5:cc:01:8e:
04:6d:1b:7a:58:a2:ca:a8:81:ab:1a:e0:37:89:86:bc:06:da:
09:63:9b:6b:4a:13:56:14:f5:4a:8e:71:80:8e:b0:5a:df:e1:
2c:ba:c4:1e:e2:fe:7a:a2:91:37:9e:8b:ab:7b:fd:d8:20:4f:
d5:47:63:3f:4e:a3:05:75:c0:cd:7e:50:83:b7:f2:61:07:cd:
6d:01:96:8f:07:d4:d9:d7:87:dc:79:e3:47:bf:33:cd:37:f0:
65:61:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:04 2026 by rpki-client