This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/3GSfCOp1qnomvR3CmYO9EsBhC7o.asa
File: 3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (raw, json)
Hash identifier: xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=
Subject key identifier: DC:64:9F:08:EA:75:AA:7A:26:BD:1D:C2:99:83:BD:12:C0:61:0B:BA
Certificate issuer: /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial: 019B1270EED41626DD7BEC17A70A5B22F0F4
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/3GSfCOp1qnomvR3CmYO9EsBhC7o.asa
Signing time: Fri 12 Dec 2025 12:02:29 +0000
ASPA not before: Fri 12 Dec 2025 12:02:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 211540
Providers: AS: 559
AS: 6730
AS: 13030
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:70:ee:d4:16:26:dd:7b:ec:17:a7:0a:5b:22:f0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Validity
Not Before: Dec 12 12:02:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc649f08ea75aa7a26bd1dc29983bd12c0610bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:9c:d6:9f:0e:f6:74:b1:5c:ac:90:a3:f2:
5c:09:34:99:ea:fc:a9:22:6d:29:b3:c4:46:a9:99:
9e:91:cf:0c:88:23:92:36:29:dd:53:9b:9e:53:0c:
4b:02:24:1f:b8:e4:dc:a7:c7:d2:d3:7d:f2:88:6a:
3a:bf:52:68:11:d9:71:b4:27:b8:5e:17:34:92:48:
b0:c0:3d:89:47:71:79:40:b0:df:16:51:7b:98:f2:
7d:9e:0a:49:c9:64:58:b6:6b:52:9c:48:20:80:01:
6d:1b:3c:21:5a:0e:b0:9f:68:b0:9d:7b:fd:e2:37:
c3:86:e0:f8:16:70:25:61:74:21:43:2f:48:e6:20:
6b:be:87:d7:2c:fd:5d:b0:a6:1e:4d:86:7f:97:ba:
02:b6:c9:31:fa:0c:b0:65:68:57:b2:17:1c:42:da:
7b:e7:11:e4:67:6e:29:23:67:83:3d:d2:11:93:aa:
03:8f:bc:56:42:63:d8:12:65:c3:86:76:94:62:29:
48:13:7c:ed:bc:d7:c8:4e:d4:ec:4b:b8:36:90:c9:
e2:69:49:e8:03:76:6a:f9:89:43:96:34:2f:96:1f:
e4:45:4b:d2:fb:90:fe:fa:d4:35:b8:62:55:3b:3f:
e2:b6:38:05:b2:e2:8d:e8:4b:0a:11:96:ec:44:33:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:9F:08:EA:75:AA:7A:26:BD:1D:C2:99:83:BD:12:C0:61:0B:BA
X509v3 Authority Key Identifier:
keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/3GSfCOp1qnomvR3CmYO9EsBhC7o.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211540
Signature Algorithm: sha256WithRSAEncryption
d2:46:d5:47:ef:81:e8:1f:6c:51:c9:99:60:7e:5e:6b:b8:36:
dc:01:16:36:ea:b9:6a:66:19:81:66:3a:f3:4f:e3:07:95:2a:
83:dc:9b:0c:e4:6b:e7:fd:01:7b:82:7b:a7:57:10:44:c4:36:
a0:4a:f9:0e:d6:cf:92:d3:df:2b:02:0d:16:61:4a:fd:15:5d:
d0:d4:ce:e0:f9:d7:b3:93:3e:4a:5c:19:5c:8d:db:aa:69:9e:
a7:cd:59:9b:78:95:a5:40:34:01:9c:bb:db:b6:22:f4:6e:60:
d0:e9:f0:c2:c7:64:58:31:70:49:7b:2f:c0:6e:1d:7c:51:a2:
52:8f:78:60:3c:2a:be:ce:ed:98:49:9e:39:4c:09:33:42:43:
09:8f:54:23:7e:f9:83:89:c3:b4:e6:c0:13:c1:a7:23:92:72:
b9:9b:65:ae:04:ef:7d:01:40:83:62:fe:74:a4:45:bd:ca:2c:
b0:48:b2:58:d7:58:f0:a9:a4:5d:e3:05:df:be:1d:ef:80:8a:
43:b7:a9:5b:b0:7f:2c:68:b1:b3:8c:9d:b3:1e:74:1f:49:9e:
3e:49:4c:67:6d:6b:db:4f:b5:3b:72:bb:3a:60:ab:7f:a0:e8:
5d:9d:12:18:8f:7d:80:3b:d9:17:55:36:e3:0a:44:97:71:67:
95:4a:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:54 2025 by rpki-client