This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/draI0Cjc4C6_RI6Dss79xlrr8uQ.asa
File: draI0Cjc4C6_RI6Dss79xlrr8uQ.asa (raw, json)
Hash identifier: NISnvZNJdodDTScf7hvZCAyYZKv+C3I1Mf07uJ3IQSw=
Subject key identifier: 76:B6:88:D0:28:DC:E0:2E:BF:44:8E:83:B2:CE:FD:C6:5A:EB:F2:E4
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019B9FC6F31CBB1A626D091188161413AFB0
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/draI0Cjc4C6_RI6Dss79xlrr8uQ.asa
Signing time: Thu 08 Jan 2026 22:42:54 +0000
ASPA not before: Thu 08 Jan 2026 22:42:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 35634
Providers: AS: 30893
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9f:c6:f3:1c:bb:1a:62:6d:09:11:88:16:14:13:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 8 22:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76b688d028dce02ebf448e83b2cefdc65aebf2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:33:3b:a8:bd:0e:79:c6:07:60:38:0e:34:
84:59:c5:51:1b:1d:b6:b1:e7:65:09:66:f9:4c:f7:
39:b1:54:4b:77:63:f6:ec:cb:51:9e:7b:09:af:60:
d0:f1:d4:1a:bf:96:16:d1:2e:bf:1e:8b:85:d8:54:
99:68:0d:17:b8:ed:ce:58:90:4b:03:08:84:c3:ef:
90:b8:a5:f8:e8:58:ba:20:55:77:ea:1c:b9:a5:35:
89:ce:a8:27:49:cc:33:0a:db:81:14:6e:b0:00:1b:
81:a6:e2:eb:e6:e6:2c:33:02:15:b3:fd:7f:43:b2:
40:97:d0:89:86:43:07:e9:4f:f1:34:70:90:a3:a6:
b8:21:ae:55:7b:bc:93:86:c4:ac:80:65:99:d3:79:
63:64:38:9e:3f:17:0a:db:40:6a:f8:ca:d4:c3:d4:
97:ce:99:9a:0f:ca:a8:fe:52:5e:b5:1e:02:82:35:
aa:22:97:84:88:82:de:e3:b1:ec:24:58:b5:02:d4:
e0:52:ba:ed:dc:26:d7:ae:22:66:38:b2:5c:c0:b9:
02:9a:42:65:63:91:16:6e:0e:20:3d:75:f9:9c:dc:
79:09:1a:cb:bb:3b:38:93:4c:99:6b:a3:03:ed:88:
66:29:c9:7b:a1:25:00:8b:ff:18:6d:5b:20:7d:1a:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:88:D0:28:DC:E0:2E:BF:44:8E:83:B2:CE:FD:C6:5A:EB:F2:E4
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/draI0Cjc4C6_RI6Dss79xlrr8uQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35634
Signature Algorithm: sha256WithRSAEncryption
0f:3b:4c:44:d9:31:80:64:06:b6:80:59:18:95:a5:1f:6f:15:
16:07:69:15:d0:85:8d:78:bd:89:d2:4c:1e:15:dd:4c:cd:63:
44:2c:6e:27:64:1c:b8:01:74:02:ac:99:32:bc:f9:b2:5c:11:
57:9b:95:47:fb:8b:59:e4:83:f3:37:20:e4:bc:01:cf:c2:a5:
26:1c:0e:2f:4f:60:22:e4:11:0d:ff:99:2b:6a:e7:fa:f7:91:
ba:39:e5:4b:de:d2:7e:92:53:21:e0:d2:65:d8:91:e4:23:42:
57:6a:8b:3b:02:94:43:34:8f:91:4e:38:73:81:4a:fc:42:57:
27:f4:53:cd:ba:e7:99:18:d2:76:e4:61:8e:c4:dc:27:38:20:
38:96:fe:d6:71:fe:74:b6:40:77:45:b9:d7:1a:44:c5:68:d0:
c5:4d:90:a2:56:5a:d0:51:77:2b:b3:66:8e:a2:83:37:29:b4:
4e:fa:17:df:e1:8f:55:f8:74:be:d3:b8:ac:fd:30:03:4f:90:
7a:ab:4d:f5:17:e9:a7:4b:08:a5:92:82:1e:02:0d:39:43:cd:
df:c8:7f:15:d6:ea:48:82:d0:0f:7e:4f:02:30:27:fe:3a:01:
a9:30:1f:c7:5a:9c:d3:89:bb:ed:14:80:c2:c7:e0:78:f6:5b:
3d:63:6b:a5
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZufxvMcuxpibQkRiBYUE6+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm
ZmM3YzAwHhcNMjYwMTA4MjI0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmI2ODhkMDI4ZGNlMDJlYmY0NDhlODNiMmNlZmRjNjVhZWJmMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms0zO6i9DnnGB2A4DjSEWcVRGx22
sedlCWb5TPc5sVRLd2P27MtRnnsJr2DQ8dQav5YW0S6/HouF2FSZaA0XuO3OWJBL
AwiEw++QuKX46Fi6IFV36hy5pTWJzqgnScwzCtuBFG6wABuBpuLr5uYsMwIVs/1/
Q7JAl9CJhkMH6U/xNHCQo6a4Ia5Ve7yThsSsgGWZ03ljZDiePxcK20Bq+MrUw9SX
zpmaD8qo/lJetR4CgjWqIpeEiILe47HsJFi1AtTgUrrt3CbXriJmOLJcwLkCmkJl
Y5EWbg4gPXX5nNx5CRrLuzs4k0yZa6MD7YhmKcl7oSUAi/8YbVsgfRpMFQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHa2iNAo3OAuv0SOg7LO/cZa6/LkMB8GA1UdIwQY
MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt
YTZkNDVlZjdkMjI3LzEvZHJhSTBDamM0QzZfUkk2RHNzNzl4bHJyOHVRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3
LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCLMjANBgkqhkiG
9w0BAQsFAAOCAQEADztMRNkxgGQGtoBZGJWlH28VFgdpFdCFjXi9idJMHhXdTM1j
RCxuJ2QcuAF0AqyZMrz5slwRV5uVR/uLWeSD8zcg5LwBz8KlJhwOL09gIuQRDf+Z
K2rn+veRujnlS97SfpJTIeDSZdiR5CNCV2qLOwKUQzSPkU44c4FK/EJXJ/RTzbrn
mRjSduRhjsTcJzggOJb+1nH+dLZAd0W51xpExWjQxU2QolZa0FF3K7NmjqKDNym0
TvoX3+GPVfh0vtO4rP0wA0+QeqtN9Rfpp0sIpZKCHgINOUPN38h/FdbqSILQD35P
AjAn/joBqTAfx1qc04m77RSAwsfgePZbPWNrpQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:21 2026 by rpki-client