This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa
File: WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa (raw, json)
Hash identifier: 3OXyVYKmDgKcTOyHe2nt09Q+Uja/17d2idHKVXFslFk=
Subject key identifier: 5B:01:43:C8:82:0A:97:F7:29:00:A6:F3:19:0A:7D:48:7D:50:71:D8
Certificate issuer: /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial: 019BBD3B9CA90CE7A6F0786FAE34AB7593B7
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa
Signing time: Wed 14 Jan 2026 15:59:18 +0000
ASPA not before: Wed 14 Jan 2026 15:59:18 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 34019
Providers: AS: 3303
AS: 6696
AS: 8218
AS: 25091
AS: 29169
AS: 30781
AS: 35625
AS: 44530
AS: 47160
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bd:3b:9c:a9:0c:e7:a6:f0:78:6f:ae:34:ab:75:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
Validity
Not Before: Jan 14 15:59:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b0143c8820a97f72900a6f3190a7d487d5071d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:91:7a:3e:cb:0c:2e:c3:7a:b8:bb:e5:71:
5f:cc:2a:d5:99:00:d0:ab:ce:df:f5:c1:ab:5c:5e:
e9:42:ed:c0:f5:cd:f9:1d:43:58:47:cd:7a:30:4e:
0b:77:87:45:ad:f1:be:88:0c:19:a7:d2:fc:83:20:
75:f9:3c:43:df:04:a3:82:0c:36:96:8b:d5:50:4b:
05:00:0a:29:8f:23:42:2a:3f:6b:ad:72:f3:19:b3:
ad:7d:36:08:7a:a2:83:5a:3d:68:75:c4:e4:f1:3a:
cc:52:00:c7:6b:40:bf:8c:c4:98:8d:ce:4e:d8:dd:
7a:6a:e1:d7:e7:8a:70:ea:4e:7a:2a:a8:d9:62:a4:
c1:ae:01:7c:b2:72:62:20:c2:be:24:08:50:c3:e6:
29:3e:4f:77:c2:da:9e:da:fa:36:d9:3b:45:a7:66:
8e:8b:b9:97:53:2f:0d:d1:6e:92:13:b2:ee:dd:6b:
90:d7:18:38:8a:90:fa:f0:73:16:22:36:9c:6a:d8:
d8:02:cc:b1:f5:ae:29:83:1e:23:0d:66:ee:f4:92:
5c:bc:e9:29:fd:dd:af:7c:d7:39:13:f4:c6:3a:d9:
07:1a:2a:1c:05:74:b4:e5:5a:c8:f8:d3:71:bd:50:
e4:d6:58:ef:e4:84:bc:c7:68:ad:8c:f2:41:77:0b:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:01:43:C8:82:0A:97:F7:29:00:A6:F3:19:0A:7D:48:7D:50:71:D8
X509v3 Authority Key Identifier:
keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/WwFDyIIKl_cpAKbzGQp9SH1Qcdg.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34019
Signature Algorithm: sha256WithRSAEncryption
4d:4b:21:81:f4:35:c2:19:54:83:a4:db:22:fc:db:09:21:c5:
84:51:2c:b2:60:f6:69:c6:45:34:93:13:40:3f:fa:e3:63:d2:
33:ef:31:ac:25:1c:9d:12:10:fc:5e:ad:dc:4c:e0:4b:1a:30:
79:81:2e:fc:21:ce:39:a9:42:4f:63:d7:c0:3c:97:33:16:e1:
7f:cd:6a:f3:74:7e:98:29:9b:72:96:3c:ca:32:2f:b4:42:23:
fa:8e:f7:d4:83:96:c8:ff:b4:b3:e2:26:99:9a:6e:43:51:c0:
06:46:4a:51:7b:77:36:1c:dc:88:2a:2f:81:98:16:b3:18:48:
fe:ba:42:6b:77:fc:50:af:f2:b4:37:98:89:7d:e3:e1:eb:9c:
e4:42:f2:d9:1d:45:0f:45:44:b9:96:1a:64:e4:c9:30:20:dc:
6e:65:28:6c:37:c6:09:33:de:90:ec:5e:f6:ac:dd:35:66:58:
79:00:ad:52:bf:6c:5e:c3:02:a5:a0:53:da:b5:3c:a7:8e:3d:
75:05:b9:54:ec:98:de:3d:2c:6a:42:73:0f:18:1f:3c:19:b4:
90:6b:e4:fc:36:9c:12:08:6d:fd:0f:4a:c4:37:9f:91:fc:2e:
f9:d4:46:ff:4f:22:af:19:7a:e4:99:e2:04:13:8d:88:80:f0:
8f:a8:17:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:43:11 2026 by rpki-client