This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/KrMAKHUoQ7DCojxr2JV7WevtfuU.asa
File: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (raw, json)
Hash identifier: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=
Subject key identifier: 2A:B3:00:28:75:28:43:B0:C2:A2:3C:6B:D8:95:7B:59:EB:ED:7E:E5
Certificate issuer: /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial: 019B2C4B779D7E638C0FA5F47A9A73CF2560
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/KrMAKHUoQ7DCojxr2JV7WevtfuU.asa
Signing time: Wed 17 Dec 2025 12:31:41 +0000
ASPA not before: Wed 17 Dec 2025 12:31:41 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 211366
Providers: AS: 9049
AS: 62142
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:4b:77:9d:7e:63:8c:0f:a5:f4:7a:9a:73:cf:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
Validity
Not Before: Dec 17 12:31:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ab30028752843b0c2a23c6bd8957b59ebed7ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:8e:f8:86:3a:c9:d8:4b:21:be:da:97:0a:
e1:96:22:8f:2a:d6:06:3b:9d:d1:e7:00:a9:7f:94:
8e:e0:5f:ec:b9:01:7b:6f:2f:3a:4c:f9:63:3d:31:
8c:e4:2f:5d:db:70:2c:7a:c5:73:05:8b:1f:b5:c5:
65:18:03:1c:f1:67:e9:ab:15:48:a2:ca:52:7c:de:
84:95:a7:43:d6:a2:51:08:39:f8:b0:63:b0:fc:e3:
ad:bc:37:af:91:71:e3:1c:57:71:2c:46:12:11:21:
06:41:57:65:68:55:20:88:42:1d:c6:db:ad:14:55:
11:8b:1b:23:15:b6:72:f6:fc:9d:15:bd:05:37:51:
42:84:19:89:7f:c2:9a:47:3c:44:f0:52:1a:76:dd:
27:4a:46:5e:29:d0:68:05:c6:25:e3:0c:57:4b:e5:
73:4f:d3:e3:6c:e5:9f:55:6d:ee:b1:ef:17:07:8c:
8b:29:b2:18:57:0c:b9:27:2b:36:f1:7a:29:d1:b2:
b9:b7:2a:a9:56:dc:c6:2a:19:64:99:c2:0e:a4:40:
0f:b9:85:ec:4f:e5:37:4e:fb:f9:54:88:a9:d3:b7:
f9:55:5d:09:75:18:2c:3f:b7:5c:8f:8f:da:ad:25:
51:1c:8c:16:b3:0f:d1:86:a0:cb:99:c4:48:07:d5:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B3:00:28:75:28:43:B0:C2:A2:3C:6B:D8:95:7B:59:EB:ED:7E:E5
X509v3 Authority Key Identifier:
keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/KrMAKHUoQ7DCojxr2JV7WevtfuU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211366
Signature Algorithm: sha256WithRSAEncryption
bd:e3:ba:51:eb:61:b7:a3:3f:2e:0f:e0:d8:a2:96:1b:2c:ee:
81:7d:e7:e5:43:2f:e9:92:02:02:e0:13:1a:16:94:d4:a2:be:
36:70:96:7b:ed:66:db:04:19:ca:a6:cf:70:6e:ec:a3:25:18:
d6:53:b6:b9:ae:99:de:01:0f:50:a5:8d:46:3d:f1:61:bf:2e:
7c:71:42:65:94:b2:b2:ff:ad:ed:05:ac:b7:48:6a:bf:fb:79:
69:31:91:45:5b:c1:db:52:09:5f:34:a1:4a:f2:74:16:85:1e:
f9:10:74:f5:54:9b:c8:d3:73:cd:80:4b:0d:cf:da:e6:a2:4c:
9b:a6:9c:f5:9b:e1:da:b4:7f:82:d4:47:6a:d7:c6:45:d7:5f:
83:14:8e:b3:fb:4e:df:f1:f2:eb:68:31:e8:67:43:94:86:db:
87:b4:db:f8:26:4a:cd:9c:c4:76:db:81:81:6e:f8:bc:ee:2a:
1b:d6:2d:18:99:aa:49:59:fd:89:25:f6:72:30:4b:3f:17:49:
9a:3e:48:75:31:6f:76:40:f9:89:44:d7:6b:9b:64:7f:61:d6:
8b:fc:8d:f5:fe:3e:fd:48:e2:b4:7d:8e:a2:d8:63:a1:19:be:
bb:7a:58:ce:41:08:bc:fe:18:a5:5c:e6:7c:c5:7d:96:e8:05:
9d:dd:6a:ce
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZssS3edfmOMD6X0eppzzyVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODJmMzIzMzU5MzgyZDgwMWVkMGI5M2VjMWJmYTAzMGRl
NjM2MjIwHhcNMjUxMjE3MTIzMTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWIzMDAyODc1Mjg0M2IwYzJhMjNjNmJkODk1N2I1OWViZWQ3ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyuO+IY6ydhLIb7alwrhliKPKtYG
O53R5wCpf5SO4F/suQF7by86TPljPTGM5C9d23AsesVzBYsftcVlGAMc8WfpqxVI
ospSfN6EladD1qJRCDn4sGOw/OOtvDevkXHjHFdxLEYSESEGQVdlaFUgiEIdxtut
FFURixsjFbZy9vydFb0FN1FChBmJf8KaRzxE8FIadt0nSkZeKdBoBcYl4wxXS+Vz
T9PjbOWfVW3use8XB4yLKbIYVwy5Jys28Xop0bK5tyqpVtzGKhlkmcIOpEAPuYXs
T+U3Tvv5VIip07f5VV0JdRgsP7dcj4/arSVRHIwWsw/RhqDLmcRIB9VHZQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCqzACh1KEOwwqI8a9iVe1nr7X7lMB8GA1UdIwQY
MBaAFO2C8yM1k4LYAe0Lk+wb+gMN5jYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUt
MTY3ZGQxNWRjYjU5LzEvS3JNQUtIVW9RN0RDb2p4cjJKVjdXZXZ0ZnVVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZmRjNDYtZThlZS00NGY2LWI0MmUtMTY3ZGQxNWRjYjU5
LzEvN1lMekl6V1RndGdCN1F1VDdCdjZBdzNtTmlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5pjANBgkqhkiG
9w0BAQsFAAOCAQEAveO6Uetht6M/Lg/g2KKWGyzugX3n5UMv6ZICAuATGhaU1KK+
NnCWe+1m2wQZyqbPcG7soyUY1lO2ua6Z3gEPUKWNRj3xYb8ufHFCZZSysv+t7QWs
t0hqv/t5aTGRRVvB21IJXzShSvJ0FoUe+RB09VSbyNNzzYBLDc/a5qJMm6ac9Zvh
2rR/gtRHatfGRddfgxSOs/tO3/Hy62gx6GdDlIbbh7Tb+CZKzZzEdtuBgW74vO4q
G9YtGJmqSVn9iSX2cjBLPxdJmj5IdTFvdkD5iUTXa5tkf2HWi/yN9f4+/UjitH2O
othjoRm+u3pYzkEIvP4YpVzmfMV9lugFnd1qzg==
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:47:10 2025 by rpki-client