This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/pTwEVEq8lsnikbVPE7gddvIm5IY.asa
File: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (raw, json)
Hash identifier: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=
Subject key identifier: A5:3C:04:54:4A:BC:96:C9:E2:91:B5:4F:13:B8:1D:76:F2:26:E4:86
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019BA84553514671B4F3EC1DEA5EA2455252
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/pTwEVEq8lsnikbVPE7gddvIm5IY.asa
Signing time: Sat 10 Jan 2026 14:17:54 +0000
ASPA not before: Sat 10 Jan 2026 14:17:54 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 29670
Providers: AS: 1273
AS: 2914
AS: 3320
AS: 5405
AS: 9002
AS: 9136
AS: 13030
AS: 33891
AS: 34549
AS: 47147
AS: 50629
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a8:45:53:51:46:71:b4:f3:ec:1d:ea:5e:a2:45:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Jan 10 14:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a53c04544abc96c9e291b54f13b81d76f226e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:2d:8b:ca:b6:fc:68:f3:8b:a1:01:5c:24:
80:fd:44:7d:22:64:38:05:f6:be:c3:74:3a:99:48:
fb:39:20:9a:d6:35:33:45:35:25:a3:e6:f2:5d:c9:
79:8f:c4:e7:cd:b1:44:17:07:60:b1:ce:c7:5c:83:
e8:86:3e:94:e1:52:06:e6:e8:17:69:24:f0:9e:bf:
f1:12:2c:b4:bc:be:e8:74:af:42:35:96:b5:ed:bf:
91:ce:7d:09:4c:1c:4b:d7:53:55:16:36:a1:9e:9e:
59:c4:1a:f5:b7:8c:d8:cd:3d:1c:5c:f2:e7:b3:61:
61:20:36:34:3b:c1:91:94:f1:c4:0c:ce:b0:f5:8e:
ef:3d:3a:19:65:42:87:2d:0b:f6:f7:63:9a:a8:14:
49:d8:70:43:33:84:c6:ef:ea:1a:48:6e:db:19:50:
28:43:94:bd:4b:bd:f8:ad:fe:48:ca:fb:26:0a:36:
30:d5:20:a2:23:67:57:61:55:06:d6:7c:df:eb:30:
67:7c:8e:10:67:23:bc:eb:29:f9:55:77:65:25:00:
49:01:65:bd:cc:6c:e5:b1:ca:20:03:1c:b8:71:46:
6e:ef:e2:f7:93:d1:43:d6:9e:4b:2e:19:00:b1:57:
67:56:93:07:fa:b5:80:22:17:4a:ee:61:4e:6d:0d:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:04:54:4A:BC:96:C9:E2:91:B5:4F:13:B8:1D:76:F2:26:E4:86
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/pTwEVEq8lsnikbVPE7gddvIm5IY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29670
Signature Algorithm: sha256WithRSAEncryption
90:64:f1:c0:fc:83:fd:91:46:2b:df:f3:3c:e8:ed:fc:8b:0d:
16:3c:9b:1e:0e:cf:48:84:06:25:d3:36:76:da:5c:4d:66:93:
46:21:4e:83:ba:7c:9a:ea:e9:5b:c4:7c:42:44:b8:7a:97:43:
76:b8:d6:a6:6c:c2:89:83:5c:b9:57:36:ee:f1:eb:3b:61:8a:
ff:97:68:23:d9:e7:8a:9c:92:4c:a6:1d:8d:8d:22:a6:68:8a:
16:8b:bf:7f:b2:56:52:8c:c0:32:95:7e:9f:1f:2d:e0:f7:48:
02:37:28:24:40:21:a6:97:ed:f3:25:c7:7a:74:28:7a:4f:43:
4e:05:95:38:ac:23:a9:da:1e:2f:b7:e8:7b:c7:b8:d0:5d:c3:
e6:9d:de:18:5e:f1:d9:19:a6:76:95:b5:7d:b4:40:86:33:13:
e1:9b:e1:de:22:7a:b2:3b:4a:96:7f:f7:4c:47:e7:90:3c:ae:
bc:ab:db:1a:ca:0e:55:75:c9:d2:91:99:3a:25:ee:a6:33:83:
be:ba:cf:d7:01:d9:2d:1e:96:31:f3:9e:68:85:0c:4d:a6:57:
0a:07:0c:61:0c:99:fc:bb:d9:0c:5b:ba:a9:ec:16:fa:dc:33:
ee:e5:13:ec:2a:12:f4:34:01:c1:4a:50:99:cb:61:21:d9:56:
4b:38:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:07 2026 by rpki-client