This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/8xwaS60LVGP0-okttlRwMxeXtAs.asa
File: 8xwaS60LVGP0-okttlRwMxeXtAs.asa (raw, json)
Hash identifier: eEQj5lWgE4ntot+6zad5rM7H1/i9Quj9OILVi+LsDxQ=
Subject key identifier: F3:1C:1A:4B:AD:0B:54:63:F4:FA:89:2D:B6:54:70:33:17:97:B4:0B
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019B266DD0633ADCD14DCB8AA43B1E498CDB
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/8xwaS60LVGP0-okttlRwMxeXtAs.asa
Signing time: Tue 16 Dec 2025 09:11:29 +0000
ASPA not before: Tue 16 Dec 2025 09:11:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 15372
Providers: AS: 174
AS: 3320
AS: 13237
AS: 16374
AS: 21413
AS: 57328
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:26:6d:d0:63:3a:dc:d1:4d:cb:8a:a4:3b:1e:49:8c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Dec 16 09:11:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f31c1a4bad0b5463f4fa892db65470331797b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:f8:7e:74:1c:24:eb:aa:a4:bd:d9:e3:7c:
0b:6b:53:7c:4c:d8:97:98:cf:b7:fa:f6:f9:09:7d:
01:93:df:ed:e0:cc:00:01:d9:f9:56:aa:d6:0d:1e:
d9:0c:f5:c0:bd:e6:b1:e3:1d:e4:58:c9:2c:f3:f1:
c4:62:b4:d7:39:f0:39:2c:f9:60:55:ac:7c:35:21:
b4:e4:2c:00:89:ee:c7:c5:55:f5:31:e3:25:81:fc:
e3:50:65:40:b8:69:f7:e5:00:f5:64:66:9a:a7:3c:
10:85:b1:fd:10:69:b8:c1:dc:63:65:09:d6:c0:bc:
00:f1:e9:7d:0b:05:63:56:8b:ad:22:85:e0:e1:22:
b1:24:e4:1f:31:a4:85:23:56:f8:f9:f8:b9:8b:ef:
86:d7:a2:3e:92:09:cb:6b:aa:80:fb:b0:92:fa:0c:
9d:69:8f:06:21:43:dc:4d:d4:4d:84:a0:d1:e7:70:
5b:93:ef:c9:cb:a7:0d:b1:29:f0:a1:b5:6d:46:6c:
15:fa:96:1e:5f:8e:0d:fe:33:21:8f:16:21:74:3f:
37:4e:08:c0:06:f0:df:8a:d3:b3:2f:32:6b:06:4c:
cf:f4:4d:8f:10:a8:ff:b3:da:a5:27:f3:4d:43:8f:
1f:e4:88:9d:6b:14:71:83:e1:0d:ca:cb:0a:bc:0b:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:1A:4B:AD:0B:54:63:F4:FA:89:2D:B6:54:70:33:17:97:B4:0B
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/8xwaS60LVGP0-okttlRwMxeXtAs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15372
Signature Algorithm: sha256WithRSAEncryption
8e:10:b8:55:c1:9e:bb:43:08:1a:2b:56:34:bc:84:36:6b:28:
5c:18:b8:5f:ce:33:21:f3:a8:73:3b:a8:6c:29:0e:69:01:e3:
00:27:b4:93:bd:a3:a3:34:3c:44:a7:24:fd:f2:ef:13:c4:f6:
30:68:4a:55:47:cf:ee:04:44:0f:30:10:09:12:52:a7:8e:32:
01:5d:7a:29:e1:6d:00:09:ac:09:7a:61:c3:a4:8d:16:0f:4d:
e0:6f:91:6c:11:26:4e:f3:d5:dd:e8:20:e4:45:00:e1:46:19:
56:fd:a6:7c:d9:e9:3c:e9:4b:8e:a4:15:e0:55:0b:62:a5:f2:
ad:f9:b9:4c:b3:21:48:1e:10:27:59:8d:18:5c:a7:ca:22:6f:
4b:31:2c:7f:2c:13:cf:22:cb:a7:d3:b2:22:27:3c:2b:79:67:
0a:96:20:62:d2:e9:9f:2c:bc:a9:d0:f6:5b:bd:d3:48:d3:1b:
07:01:fe:37:57:ae:f2:74:11:0e:37:12:c3:75:30:67:eb:0d:
8c:3f:f9:e5:d5:81:9c:b2:a4:39:27:01:43:17:01:d7:31:a5:
a4:1e:ae:cc:86:8e:00:30:6c:f6:c9:b9:d7:1b:1c:12:7d:2a:
ab:11:f5:80:01:34:37:9e:f9:d8:c5:76:62:5f:4a:99:28:c2:
eb:0b:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 23:33:28 2025 by rpki-client