This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/Gaonav40tTJpKCNRA2Pgw8c6CJI.asa
File: Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (raw, json)
Hash identifier: qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=
Subject key identifier: 19:AA:27:6A:FE:34:B5:32:69:28:23:51:03:63:E0:C3:C7:3A:08:92
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 019B212B129BFF5ECF441133CA28C4355EFE
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/Gaonav40tTJpKCNRA2Pgw8c6CJI.asa
Signing time: Mon 15 Dec 2025 08:40:29 +0000
ASPA not before: Mon 15 Dec 2025 08:40:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 62220
Providers: AS: 8194
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 08:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:21:2b:12:9b:ff:5e:cf:44:11:33:ca:28:c4:35:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Dec 15 08:40:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19aa276afe34b532692823510363e0c3c73a0892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:9c:f2:c9:80:b8:5f:e5:7b:29:85:46:e9:
72:ce:54:f0:cd:3f:f4:62:44:8d:e6:e0:3d:b8:08:
5b:d1:50:a5:da:14:39:a5:3a:74:3f:97:8d:98:21:
4d:75:78:e5:ed:24:de:e7:53:20:2a:bf:a6:f5:65:
f4:a6:d2:a9:bf:5b:26:d2:f8:92:a3:9d:9c:90:90:
9c:f3:c3:62:92:4b:3e:76:30:70:c7:ba:ad:4f:44:
20:6c:8b:0a:f5:fd:d9:67:62:0f:14:c9:49:95:13:
d7:05:0d:e6:75:e6:0f:7b:d9:b9:b8:70:c0:bb:cb:
41:7d:5b:e2:7a:50:94:06:60:f0:34:61:ee:ca:34:
c2:15:64:b2:26:c0:9d:bc:97:50:81:7a:2d:72:17:
19:8a:28:66:8a:cf:c9:61:e9:61:66:23:8f:ab:80:
e5:6c:13:40:85:84:41:8a:56:68:c4:75:8f:af:fb:
75:bc:f2:0d:3c:38:fc:77:32:c4:f0:2e:d8:a7:80:
87:aa:4e:8b:40:1d:2a:92:50:2d:c8:51:c8:6b:3f:
3e:3b:e5:5b:40:8d:51:40:9e:8e:1a:de:65:e1:82:
9b:43:da:65:5e:eb:4a:a1:d4:87:34:a8:a8:73:ed:
10:15:35:e0:84:38:a1:e9:77:a5:9b:ee:77:8d:b6:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:27:6A:FE:34:B5:32:69:28:23:51:03:63:E0:C3:C7:3A:08:92
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/Gaonav40tTJpKCNRA2Pgw8c6CJI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62220
Signature Algorithm: sha256WithRSAEncryption
05:5c:3e:f2:01:43:02:56:fb:ad:4b:7c:53:4a:a2:8e:28:e6:
21:0b:81:64:54:8e:57:a3:4a:b3:c4:a2:75:83:1b:2b:11:d4:
8b:45:8e:de:3a:84:7d:0d:54:0d:65:80:e5:68:d3:be:b6:66:
31:b9:70:a8:6e:53:0d:3e:e1:06:2b:7b:e8:b9:82:f7:58:bb:
de:fb:b6:c6:59:95:59:e9:fd:60:3e:3f:8b:4d:45:ac:69:7f:
19:5b:24:e5:df:83:b7:53:dd:36:7c:6f:c1:70:61:05:34:d3:
1c:a1:34:30:65:50:17:64:42:70:c8:c2:d4:bb:c6:b8:0d:a6:
b1:e6:1e:14:75:35:c1:41:54:5f:e8:4d:ca:e2:f3:76:72:3c:
4a:00:11:ef:85:8c:7f:fb:2b:04:34:e7:5c:3d:cc:92:01:72:
8d:d7:25:35:8e:36:5e:af:92:84:d8:90:e3:6e:5b:71:fe:f7:
0e:9a:4a:3a:0f:e4:e3:7c:ec:7d:90:48:f1:92:89:f5:e8:d1:
b7:19:f1:4b:37:5f:ab:b7:a8:a3:35:ad:83:67:1b:4a:f2:77:
5a:5f:6d:c4:54:7a:8f:5f:ec:94:c7:68:84:12:e1:f5:26:fe:
9c:c1:03:37:07:eb:fe:39:76:f2:82:5d:59:fd:19:72:77:81:
66:08:e6:8b
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZshKxKb/17PRBEzyijENV7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzI4MjQ5Y2MzNWVjMjdjYzEwZTE4Yjg4MmM2YzEzODk3
Yzg0OTcwHhcNMjUxMjE1MDg0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWFhMjc2YWZlMzRiNTMyNjkyODIzNTEwMzYzZTBjM2M3M2EwODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/Kc8smAuF/leymFRulyzlTwzT/0
YkSN5uA9uAhb0VCl2hQ5pTp0P5eNmCFNdXjl7STe51MgKr+m9WX0ptKpv1sm0viS
o52ckJCc88Nikks+djBwx7qtT0QgbIsK9f3ZZ2IPFMlJlRPXBQ3mdeYPe9m5uHDA
u8tBfVvielCUBmDwNGHuyjTCFWSyJsCdvJdQgXotchcZiihmis/JYelhZiOPq4Dl
bBNAhYRBilZoxHWPr/t1vPINPDj8dzLE8C7Yp4CHqk6LQB0qklAtyFHIaz8+O+Vb
QI1RQJ6OGt5l4YKbQ9plXutKodSHNKioc+0QFTXghDih6Xelm+53jbaVIQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBmqJ2r+NLUyaSgjUQNj4MPHOgiSMB8GA1UdIwQY
MBaAFM8ygknMNewnzBDhi4gsbBOJfISXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYt
Mjk3ZDUyZjBjMjgzLzEvR2FvbmF2NDB0VEpwS0NOUkEyUGd3OGM2Q0pJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYtMjk3ZDUyZjBjMjgz
LzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDzDDANBgkqhkiG
9w0BAQsFAAOCAQEABVw+8gFDAlb7rUt8U0qijijmIQuBZFSOV6NKs8SidYMbKxHU
i0WO3jqEfQ1UDWWA5WjTvrZmMblwqG5TDT7hBit76LmC91i73vu2xlmVWen9YD4/
i01FrGl/GVsk5d+Dt1PdNnxvwXBhBTTTHKE0MGVQF2RCcMjC1LvGuA2mseYeFHU1
wUFUX+hNyuLzdnI8SgAR74WMf/srBDTnXD3MkgFyjdclNY42Xq+ShNiQ425bcf73
DppKOg/k43zsfZBI8ZKJ9ejRtxnxSzdfq7eoozWtg2cbSvJ3Wl9txFR6j1/slMdo
hBLh9Sb+nMEDNwfr/jl28oJdWf0ZcneBZgjmiw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:54 2025 by rpki-client