This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/3GF4RweBnJwOd-6nUT5PiBsu4pA.asa
File: 3GF4RweBnJwOd-6nUT5PiBsu4pA.asa (raw, json)
Hash identifier: DpP48tndWTlvXIujf26AwodQv/G4yY8pTSdg8bAtIy4=
Subject key identifier: DC:61:78:47:07:81:9C:9C:0E:77:EE:A7:51:3E:4F:88:1B:2E:E2:90
Certificate issuer: /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial: 019B96471331205FFBB254CBE7C4DF8BA9DE
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/3GF4RweBnJwOd-6nUT5PiBsu4pA.asa
Signing time: Wed 07 Jan 2026 02:26:38 +0000
ASPA not before: Wed 07 Jan 2026 02:26:38 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 211008
Providers: AS: 31898
AS: 34927
AS: 41051
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:96:47:13:31:20:5f:fb:b2:54:cb:e7:c4:df:8b:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Validity
Not Before: Jan 7 02:26:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc61784707819c9c0e77eea7513e4f881b2ee290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:d8:3f:b3:c2:a0:38:29:d9:7b:3b:b4:e4:
8b:f3:f5:09:f0:3b:e1:c4:98:d8:42:a5:81:09:ed:
f2:75:80:e1:9b:69:a1:ca:8d:cc:72:9e:bc:85:cb:
0f:12:2c:0e:f7:9c:99:98:e4:ad:d9:55:82:c4:0c:
98:3c:51:6d:31:dd:aa:fd:ff:f0:de:f9:10:4f:a7:
f9:9e:50:5c:9f:20:8f:3d:04:d6:e6:04:69:3a:d8:
6e:bf:40:67:43:d1:3b:26:b5:02:f4:b7:5f:06:66:
42:42:52:f8:e8:3e:54:33:7a:61:7e:28:01:27:d6:
70:e5:06:fe:91:ee:50:6a:63:82:d8:f1:d5:7a:bc:
45:2d:2d:74:1f:7f:8d:25:98:b0:46:84:b1:c3:e1:
42:93:fb:1c:da:6c:d8:fe:d3:f9:f7:b0:80:9f:b6:
b5:6a:c7:64:f3:92:6d:5b:3a:86:fa:36:e6:a3:ba:
a8:30:ea:8f:6c:f8:72:4b:d0:5e:13:34:d8:42:39:
37:6c:c3:b0:87:98:2b:48:fd:8e:94:16:0a:0b:31:
9c:47:75:5d:16:f2:67:10:84:2e:ae:f2:20:52:c3:
02:83:13:95:97:01:69:17:9f:ec:55:af:5e:58:03:
bd:28:a9:03:49:d5:69:db:ed:0a:91:e6:b2:4f:c0:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:61:78:47:07:81:9C:9C:0E:77:EE:A7:51:3E:4F:88:1B:2E:E2:90
X509v3 Authority Key Identifier:
keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/3GF4RweBnJwOd-6nUT5PiBsu4pA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211008
Signature Algorithm: sha256WithRSAEncryption
48:4d:7e:8e:31:c7:ba:e8:99:a7:27:d7:6b:03:fb:16:6b:a7:
1b:bc:54:75:8b:5f:1c:0f:4d:3a:bc:60:ab:06:77:25:e7:fb:
92:07:58:7a:d9:2c:b5:18:f0:5f:ba:18:2f:cb:87:3a:50:71:
38:3a:29:e0:67:7b:f1:fe:61:d2:37:97:35:e5:14:6e:4d:b7:
13:4f:cb:fe:d1:5e:83:5e:df:9e:fa:86:26:d8:84:28:4e:f9:
bf:8d:0f:ba:d9:27:06:c0:e3:63:d4:fc:fb:0f:9b:cd:fc:68:
c5:18:14:86:70:ab:f2:d5:47:43:1c:0b:2c:dc:94:8f:82:0b:
2c:c0:9f:81:1c:97:74:09:a4:4c:04:85:98:38:5e:f5:c1:27:
c4:49:ef:04:2a:10:88:6a:6a:ec:e1:59:91:7a:3b:d4:ad:cb:
fc:4a:74:83:01:8b:2b:2f:50:dd:ff:8b:47:3f:ca:19:ad:b9:
ef:92:b9:3d:ef:44:65:7c:12:33:ac:17:9f:34:98:78:6e:4c:
8c:12:50:78:b5:98:2b:97:95:f0:d1:d0:76:65:fa:99:d0:a1:
a2:13:ab:80:25:e5:73:59:c9:85:dd:2d:1b:c2:cc:3d:bf:53:
5c:0c:4e:1b:85:db:b4:08:37:46:d5:87:23:cd:5f:9a:fa:70:
d9:ce:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:26:29 2026 by rpki-client