This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/lTr_UVi_A79a3K8ej8EhTQ-s56o.asa
File: lTr_UVi_A79a3K8ej8EhTQ-s56o.asa (raw, json)
Hash identifier: Kis6ukaDSScAbBexiq/JiDaCOANQ9hpiW6hUa9xiV5s=
Subject key identifier: 95:3A:FF:51:58:BF:03:BF:5A:DC:AF:1E:8F:C1:21:4D:0F:AC:E7:AA
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 019ADF4F014B094B92455EEEFD36491B16DC
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/lTr_UVi_A79a3K8ej8EhTQ-s56o.asa
Signing time: Tue 02 Dec 2025 13:44:48 +0000
ASPA not before: Tue 02 Dec 2025 13:44:48 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 200852
Providers: AS: 25019
AS: 39386
AS: 57187
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:df:4f:01:4b:09:4b:92:45:5e:ee:fd:36:49:1b:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Dec 2 13:44:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=953aff5158bf03bf5adcaf1e8fc1214d0face7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:10:c9:68:bf:7f:4e:d2:09:50:b1:27:b6:
5a:fb:ea:23:9b:8c:5c:ab:10:57:1f:8f:48:1b:f5:
3f:da:94:cb:d7:80:b1:84:2a:45:d1:36:63:ff:2c:
9b:49:73:7d:57:b1:47:c5:ff:f5:f2:58:e6:d9:45:
50:9c:e4:86:d7:7b:7e:37:7d:ba:34:16:0c:06:a7:
ab:b1:2b:ed:e0:64:fa:87:bc:27:56:19:29:54:4c:
12:25:63:5d:28:04:26:a7:9c:4b:6e:eb:0f:cf:99:
2d:7c:f1:b5:7a:57:d6:a9:97:82:a0:a8:c6:aa:b2:
47:f7:72:11:cb:88:fc:21:ee:56:25:a6:df:6d:dd:
b7:d0:c1:86:dc:57:83:0b:1a:d9:44:43:31:a3:0f:
e8:f8:2a:c1:7b:de:5a:01:68:59:f5:c5:36:10:ec:
e0:ad:6a:b2:e4:4f:38:cf:43:c8:e4:84:aa:e1:6a:
84:f5:6a:e5:62:33:b3:8a:82:54:7a:03:fa:e8:4d:
12:d1:53:f7:44:39:05:73:c9:8c:ef:92:e9:61:73:
3e:f7:69:80:01:1f:a9:dd:5f:06:75:88:24:c2:d1:
a3:ca:2c:85:65:e3:6d:be:c3:e1:58:e6:bc:35:df:
4f:c4:1c:8a:2c:db:0f:a5:58:75:3e:d0:7c:7d:af:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3A:FF:51:58:BF:03:BF:5A:DC:AF:1E:8F:C1:21:4D:0F:AC:E7:AA
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/lTr_UVi_A79a3K8ej8EhTQ-s56o.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200852
Signature Algorithm: sha256WithRSAEncryption
49:b9:c3:09:93:3d:c3:23:c2:53:d8:52:fd:46:58:37:00:06:
c1:64:7d:b8:f9:cb:64:a2:55:08:b6:e1:73:4f:69:b4:e5:65:
79:85:60:2c:76:10:cd:59:8c:6d:32:35:65:4c:f2:45:69:13:
15:9d:6f:51:82:a4:05:e5:8c:9d:b6:8a:22:79:a1:28:cf:37:
87:75:61:5d:0f:a3:ed:13:bb:df:4e:17:d0:b7:2e:fb:7a:74:
13:a2:7d:8e:c6:ed:98:81:0b:91:e2:c4:9b:6d:13:20:53:32:
14:d4:fd:bb:d2:52:a2:b9:d2:46:b1:53:4b:13:ee:4e:c2:49:
71:90:d4:05:5f:76:32:b3:8d:5d:dd:ee:ed:94:12:11:e8:a4:
ed:b9:ab:aa:41:b9:8b:0b:96:b3:57:ca:90:6b:9b:92:bf:a1:
65:d7:f5:f2:f8:2d:60:b2:2e:34:66:a7:3a:4f:72:ae:f3:12:
b9:6b:65:d8:4f:32:af:97:21:3f:66:fe:6c:41:3e:fe:bd:99:
f5:e0:59:65:11:51:e2:59:61:28:66:23:ad:5c:3e:14:92:58:
86:c9:2b:8c:9e:c7:ef:3f:57:43:d6:3f:75:da:c8:db:24:4d:
84:66:77:40:4c:b2:d5:c8:7c:76:c9:b5:f0:d5:11:ce:e9:16:
b3:5f:c3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:29 2025 by rpki-client