This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/1mBr9qM8BaNGTVxWWG-3AL-6aKo.asa
File: 1mBr9qM8BaNGTVxWWG-3AL-6aKo.asa (raw, json)
Hash identifier: NmnXm1UkUh4+zMI0tM7r+DaLRQDNnioKlhBZDFPOibA=
Subject key identifier: D6:60:6B:F6:A3:3C:05:A3:46:4D:5C:56:58:6F:B7:00:BF:BA:68:AA
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 019B270220DF38F43A442937CCC7A669AC9F
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/1mBr9qM8BaNGTVxWWG-3AL-6aKo.asa
Signing time: Tue 16 Dec 2025 11:53:29 +0000
ASPA not before: Tue 16 Dec 2025 11:53:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 214017
Providers: AS: 5405
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Jan 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:27:02:20:df:38:f4:3a:44:29:37:cc:c7:a6:69:ac:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Dec 16 11:53:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6606bf6a33c05a3464d5c56586fb700bfba68aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:12:7e:1e:15:43:2a:3f:00:dc:6c:14:97:
5c:e7:08:0e:79:1e:ac:fc:30:b9:3e:e8:0d:cc:bd:
75:1e:87:ab:89:43:10:a9:82:e5:f6:9a:fb:d0:f4:
12:65:6e:0d:44:24:04:92:2a:e0:3e:11:30:50:20:
1e:0e:ca:6a:99:c1:e2:65:2d:8e:64:ac:5f:b4:93:
64:fa:7a:6d:21:d0:a4:06:2b:98:6b:78:51:6c:be:
9d:26:24:29:55:0f:41:ef:3d:38:c8:95:36:40:43:
27:63:5e:b8:08:ff:a8:32:3a:56:31:10:95:87:4e:
a3:bc:ce:16:9d:f7:10:ba:17:19:91:e6:d9:ee:af:
13:85:9c:d6:74:ac:87:fe:16:cc:87:8b:cb:61:27:
27:32:f0:c7:bb:bc:60:8d:59:a0:16:76:d1:9c:5b:
c1:6e:bf:f7:50:03:0a:27:c2:e1:94:fe:07:6b:c7:
d1:a0:bf:2f:66:85:05:74:d9:e7:b9:1f:59:53:25:
32:6a:7b:27:d3:23:c0:dc:2c:07:ab:78:75:5e:1f:
bd:05:d7:d7:e2:48:03:66:13:08:f8:6f:9d:ba:40:
a4:11:ea:19:5f:cc:92:88:ed:f8:b0:f6:ed:99:49:
8c:e7:1b:6b:e1:da:93:b0:26:86:a5:1d:9f:30:61:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:60:6B:F6:A3:3C:05:A3:46:4D:5C:56:58:6F:B7:00:BF:BA:68:AA
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/1mBr9qM8BaNGTVxWWG-3AL-6aKo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214017
Signature Algorithm: sha256WithRSAEncryption
1c:f7:67:ec:ea:9c:9b:01:90:87:dd:ec:32:38:18:03:a6:a3:
11:69:22:ef:91:49:74:0b:ce:ef:0c:28:01:58:13:15:e0:27:
96:3f:55:11:83:0c:c7:80:09:7b:e7:82:60:21:73:25:71:fc:
3a:dc:4a:55:73:88:63:cb:1f:6e:a4:a6:35:a0:84:95:ac:ba:
f8:17:3e:64:5f:ad:75:f1:8c:a0:9e:f7:f4:d0:e3:ff:8d:90:
1d:12:28:2c:d4:08:8c:af:b9:db:c3:e7:14:5f:05:fe:94:07:
d5:bc:7a:46:87:69:c7:40:c1:50:94:f8:46:ad:8b:c2:20:56:
9c:34:7e:13:1e:6c:fa:1d:af:64:97:cf:f2:af:2c:79:d7:bc:
66:e0:a6:a6:b1:1b:f1:13:43:a7:b0:6b:79:40:ef:d4:f6:7d:
a8:5f:1c:fb:19:61:7e:34:65:84:fb:6f:39:01:f3:5b:87:6a:
1b:3a:2a:f8:f3:57:68:c0:20:f4:06:ad:9f:29:3c:15:6e:67:
33:6e:a5:be:b3:25:c3:b9:91:e2:1d:c1:55:73:3d:9e:52:7c:
c4:40:5b:1e:4a:66:07:1a:87:c7:8a:96:d9:d0:37:de:f0:78:
79:76:20:14:91:e2:52:2a:03:77:53:71:9f:48:2c:9a:f0:53:
3d:ad:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 02:19:34 2026 by rpki-client