This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/YCz7-CkEVhCfF1Yx2osR16ioZHU.asa
File: YCz7-CkEVhCfF1Yx2osR16ioZHU.asa (raw, json)
Hash identifier: HqY7WylV2rDv4zE6nPFV+XcytLTw/YOLekrTPYUG/rs=
Subject key identifier: 60:2C:FB:F8:29:04:56:10:9F:17:56:31:DA:8B:11:D7:A8:A8:64:75
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019B376A91F99CAF96E4A0CA4AF21E8CE7F7
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/YCz7-CkEVhCfF1Yx2osR16ioZHU.asa
Signing time: Fri 19 Dec 2025 16:21:29 +0000
ASPA not before: Fri 19 Dec 2025 16:21:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 215492
Providers: AS: 174
AS: 6939
AS: 16509
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:6a:91:f9:9c:af:96:e4:a0:ca:4a:f2:1e:8c:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Dec 19 16:21:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=602cfbf8290456109f175631da8b11d7a8a86475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:1d:2b:71:14:57:e6:fb:18:e4:6f:ef:05:
4d:47:91:f3:1a:ca:83:8a:67:ea:a2:1c:dc:a0:7f:
26:6f:3f:1c:00:fe:00:ea:32:50:3c:bc:1f:50:ba:
f6:62:8f:02:35:14:bc:c9:d9:2e:8d:14:cb:6e:28:
e7:bb:b0:ad:78:09:f6:9e:d9:45:9b:0c:b3:d0:57:
ef:23:e1:3e:5a:bd:c5:2c:69:e9:3c:49:ff:21:c9:
0f:86:43:6d:7d:d3:4c:d3:23:bc:5e:73:26:6f:6e:
72:39:e0:b2:7a:77:61:83:96:ee:a4:d6:4a:c1:55:
4d:0d:16:50:91:b1:95:e8:ac:f2:7b:18:2b:b7:c1:
d3:25:44:33:42:33:5f:56:4d:28:22:cd:ac:c9:51:
2e:3a:55:d6:0d:b5:5a:67:a8:3f:b7:28:9d:df:e7:
e0:a8:33:dc:ee:db:37:62:ba:36:bd:9e:59:b1:46:
7f:27:c6:45:e7:30:3d:c3:33:8b:02:77:8e:b8:39:
75:ee:f0:70:ef:eb:b5:ab:39:d4:f6:92:1c:42:be:
db:be:72:f2:a9:4b:36:a3:e5:24:11:2e:4c:30:33:
4c:d0:d3:dd:c4:ce:5e:59:a7:8d:7d:6e:7e:af:a6:
b2:78:30:85:ae:dc:65:da:83:1e:f0:cd:d9:ea:66:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:FB:F8:29:04:56:10:9F:17:56:31:DA:8B:11:D7:A8:A8:64:75
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/YCz7-CkEVhCfF1Yx2osR16ioZHU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215492
Signature Algorithm: sha256WithRSAEncryption
15:e1:9d:32:94:78:23:f2:74:81:3a:a6:76:62:7f:99:94:65:
a0:d6:4a:a8:cc:7e:df:a8:4e:6d:9b:d9:a2:74:a4:93:7c:c8:
e9:1d:4b:b5:b0:3a:df:c2:86:fe:71:d8:6a:1c:bb:8a:97:27:
51:7a:98:12:58:8b:f0:89:d1:1a:b4:cb:03:2e:a6:b9:37:0a:
d5:24:d5:c7:2a:0d:ec:fb:ef:34:75:21:60:c7:f3:82:bd:1e:
b0:89:6a:cf:03:26:97:94:06:6b:4b:b3:cf:29:1b:01:77:a5:
9a:1e:49:2d:2f:68:24:00:ba:39:f6:0d:72:82:e4:a9:5b:43:
74:7a:6a:57:38:12:51:e1:70:39:af:f3:c3:12:13:8f:99:a6:
af:64:6b:82:9e:7d:94:a8:9d:e0:da:e1:fd:70:3e:8c:4c:4a:
a9:df:6f:c0:3b:4e:a4:54:ce:23:07:73:40:4e:7e:a7:21:e0:
87:14:1c:5f:52:c4:1a:1c:10:3e:c7:22:2c:d5:84:b6:52:66:
9a:0a:bc:a7:91:af:f9:01:49:23:68:a9:ff:87:b4:cd:f9:30:
ac:81:a4:e8:b8:13:25:ee:05:c8:e7:1d:ef:a7:ba:40:74:ad:
44:fe:89:af:15:d4:0a:c3:d4:12:21:eb:24:23:60:f1:ad:69:
75:51:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:19:00 2025 by rpki-client