This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/LxJ2cP9FD-p0dupRMRZXbJCM7sY.asa
File: LxJ2cP9FD-p0dupRMRZXbJCM7sY.asa (raw, json)
Hash identifier: iBiku35zb/mbmMqlLPtW45yVOj3xwgmSYQcfBAIaZ4s=
Subject key identifier: 2F:12:76:70:FF:45:0F:EA:74:76:EA:51:31:16:57:6C:90:8C:EE:C6
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 019B2BB5307315DD3477B3D95157174342AF
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/LxJ2cP9FD-p0dupRMRZXbJCM7sY.asa
Signing time: Wed 17 Dec 2025 09:47:33 +0000
ASPA not before: Wed 17 Dec 2025 09:47:33 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 51202
Providers: AS: 6939
AS: 58212
AS: 215828
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2b:b5:30:73:15:dd:34:77:b3:d9:51:57:17:43:42:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Dec 17 09:47:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f127670ff450fea7476ea513116576c908ceec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:00:5b:d9:5d:78:16:5c:ba:a3:ff:bc:26:
af:37:fb:f2:4f:af:74:9e:74:bb:7d:32:25:49:9e:
2a:74:d1:94:9c:a2:e5:e6:2e:26:88:86:47:1e:74:
53:20:c9:4f:db:29:97:7a:50:fa:d8:aa:bf:b9:18:
26:8c:19:88:12:54:87:7d:01:d5:cb:76:c9:5a:d8:
8d:69:ab:26:db:b5:2e:1e:fc:1b:93:aa:d0:78:12:
9b:4b:3c:3d:19:17:ac:05:55:4a:fa:d0:3d:d9:bc:
4b:eb:cf:16:f6:2e:01:ff:cb:4a:11:78:46:01:84:
0a:81:21:2f:7b:eb:93:ce:90:46:37:ce:a0:05:ed:
8d:b6:12:14:4f:1e:cc:fd:2c:d2:8e:be:8f:58:cf:
1b:fb:21:03:7e:41:47:0d:0d:d5:b3:e7:6f:0e:51:
31:95:f3:f4:26:fc:47:09:21:1a:ec:98:4b:04:ab:
70:1d:60:a7:99:b3:36:78:ea:c4:f7:f3:f3:95:aa:
98:73:30:76:a5:6b:e9:35:df:15:a3:ff:b6:d9:09:
c4:58:f0:ac:e0:a8:3a:e8:5d:75:76:33:18:4e:23:
5c:40:0c:8f:7a:f4:f6:ec:9e:a6:97:8c:cb:46:b4:
98:0f:82:b2:2b:e6:87:49:bb:0a:5a:7d:4b:e3:71:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:12:76:70:FF:45:0F:EA:74:76:EA:51:31:16:57:6C:90:8C:EE:C6
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/LxJ2cP9FD-p0dupRMRZXbJCM7sY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51202
Signature Algorithm: sha256WithRSAEncryption
60:d6:fd:c7:bb:1a:d0:12:61:d7:02:3d:75:27:b8:ce:98:d5:
58:b3:03:5f:23:29:80:c2:20:81:ee:92:eb:4e:31:f2:77:ba:
ce:d0:31:85:08:5b:dd:3a:e5:27:24:7e:54:c2:c7:19:e4:e5:
f8:37:18:5c:01:5c:51:14:c1:ac:c7:93:1d:9e:ac:12:61:e9:
bc:f2:f7:7c:75:c9:25:b1:ee:ac:39:76:c1:18:ff:7e:dc:72:
94:4d:d2:2e:b8:d1:ab:e3:b1:ac:48:43:d0:3b:e4:6b:8a:dd:
76:26:e8:9d:80:c7:d6:9c:0a:95:65:50:17:33:53:d7:b4:79:
e0:53:23:65:ee:45:db:8c:54:b1:c3:02:1f:7e:ab:bb:5b:24:
e4:1a:b8:f3:9c:0c:a7:07:98:0b:47:ef:47:5d:e0:23:b8:d7:
1b:8e:2f:e0:2d:e8:e2:f1:3d:5d:c4:a1:d1:5c:af:04:ef:14:
97:f2:62:f5:4d:5f:2a:a6:de:05:86:6f:a0:88:58:0f:92:90:
80:cd:c0:09:eb:0f:b9:2f:f5:74:61:9b:c7:74:b5:a0:e1:ae:
d8:13:50:da:11:86:ad:1e:aa:92:a9:f6:96:a1:16:cf:3a:a0:
6a:1c:97:c1:fb:7f:59:91:df:56:ab:ce:de:83:22:c5:e3:95:
1f:1a:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:34:51 2025 by rpki-client