This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa
File: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (raw, json)
Hash identifier: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=
Subject key identifier: BA:DB:B8:1C:6E:50:FF:BC:26:50:03:18:A9:5F:95:A0:E9:0E:94:05
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019AF37BF3D2481C3B6AF8BA60843FE7A387
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa
Signing time: Sat 06 Dec 2025 11:46:18 +0000
ASPA not before: Sat 06 Dec 2025 11:46:18 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 44244
Providers: AS: 12880
AS: 49666
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:7b:f3:d2:48:1c:3b:6a:f8:ba:60:84:3f:e7:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Dec 6 11:46:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=badbb81c6e50ffbc26500318a95f95a0e90e9405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:fe:b5:9e:ee:9b:34:04:5a:66:c9:36:76:
51:b9:92:87:e4:5f:6b:3d:2f:fb:ee:16:3f:25:cd:
72:67:b3:7d:a5:e2:9c:0e:3e:00:45:03:d4:6f:da:
a2:cb:5a:37:d1:c1:08:f1:a2:4f:8b:92:47:31:6d:
63:fd:a7:b4:7b:fc:f4:f3:49:fb:f0:fc:c1:76:5e:
85:54:52:43:f4:2e:9d:d1:3a:02:5a:8c:92:ec:81:
f9:8b:ec:93:03:09:7b:36:a2:f6:34:41:4f:68:6c:
48:2c:8a:15:94:50:88:80:c4:2f:f9:66:be:11:b3:
2d:d6:52:bd:19:de:ad:2b:42:5b:ac:04:0d:93:47:
a3:99:eb:f9:fd:37:54:c3:58:a1:4f:82:81:d5:fc:
2d:86:f9:66:58:a6:cd:09:82:0b:22:54:c6:ad:37:
18:5c:48:d5:b4:d4:cc:b4:a9:b6:37:cf:09:d8:67:
6c:81:c4:83:87:30:6b:d2:0e:de:d2:5a:8d:2c:0a:
be:83:62:36:26:11:e4:cc:b7:9a:0b:fd:a6:32:7f:
ad:24:68:3c:6d:88:96:28:59:94:0d:04:33:73:b3:
d3:1d:09:03:bb:4f:89:fc:9e:c8:3c:6e:e0:12:52:
a6:4a:d8:4c:ea:46:ca:b5:9a:22:77:04:9b:a6:5c:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:B8:1C:6E:50:FF:BC:26:50:03:18:A9:5F:95:A0:E9:0E:94:05
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44244
Signature Algorithm: sha256WithRSAEncryption
96:0f:9f:d7:14:c8:2a:9d:ef:9f:ac:21:10:17:50:e6:bf:14:
d9:f6:5f:09:e6:16:5d:52:c5:6a:d7:22:71:0b:1f:ad:ee:ec:
99:e0:46:ee:36:38:2b:74:08:ae:91:eb:76:33:72:ce:18:bf:
f2:47:3e:41:5d:27:bf:5e:e9:80:b6:fa:ff:18:29:6b:48:7f:
96:cf:25:91:d0:a2:4f:f0:a5:06:14:89:32:0c:c5:f6:49:d1:
ab:3f:9f:d6:93:d1:a0:3e:5b:c7:84:e9:2d:15:ce:9a:09:51:
0c:de:aa:2c:da:f9:72:70:e1:0d:0e:4a:be:6e:6e:89:37:a4:
fb:a3:46:96:f5:18:cd:e7:04:8e:40:c8:2b:70:a0:30:e2:a1:
2c:65:1b:88:33:6a:ce:99:12:76:e8:f4:ab:e3:fa:cc:da:f9:
ea:81:52:ec:d3:49:84:da:55:67:47:5b:f6:d1:04:06:b0:7b:
a7:7a:82:9f:2f:fd:cb:ee:4b:83:2f:a0:00:0b:2c:e1:11:d0:
2d:3c:a4:45:10:f9:a3:7a:0d:05:55:3b:97:a0:97:c1:61:ab:
5d:78:9e:e3:18:fc:5c:c3:69:2c:df:50:0e:09:40:87:37:02:
01:cc:96:a0:0b:4a:00:61:37:b3:a8:78:bd:4a:2e:25:6a:e7:
a5:d8:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:32:20 2025 by rpki-client