This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/bXQQO-5FgjU20JSCz7rPcw-iRKU.asa
File: bXQQO-5FgjU20JSCz7rPcw-iRKU.asa (raw, json)
Hash identifier: aES9ZMqFehWngEWgwHEJa4mqXVCMVwiTLBnp67II/DE=
Subject key identifier: 6D:74:10:3B:EE:45:82:35:36:D0:94:82:CF:BA:CF:73:0F:A2:44:A5
Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial: 019B0ABCE2ABFF998835196ED91A34E9D954
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/bXQQO-5FgjU20JSCz7rPcw-iRKU.asa
Signing time: Thu 11 Dec 2025 00:08:29 +0000
ASPA not before: Thu 11 Dec 2025 00:08:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 47311
Providers: AS: 6939
AS: 24198
AS: 45735
AS: 58495
AS: 133210
AS: 137409
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0a:bc:e2:ab:ff:99:88:35:19:6e:d9:1a:34:e9:d9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Validity
Not Before: Dec 11 00:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d74103bee45823536d09482cfbacf730fa244a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:37:09:08:94:a8:88:e5:1f:55:43:b9:9f:
4a:a8:d4:96:09:57:a7:50:6c:24:4c:f7:45:f9:c2:
1c:94:79:58:97:1c:df:2c:06:d5:a9:ff:6f:7a:59:
89:cc:ce:82:0e:f7:ba:e7:40:cf:ac:ef:b3:30:56:
5d:15:2d:b0:e8:8b:20:36:75:91:18:d9:0e:d3:58:
e0:e6:17:e9:ae:c9:48:c1:91:b9:4d:5f:6f:c5:87:
a8:fe:6b:ff:71:49:9a:9c:8b:19:93:eb:c5:55:6a:
49:97:70:c0:ee:ae:97:10:c1:06:64:e2:e5:90:80:
d2:02:b3:7a:6a:89:b1:1a:a6:ca:18:ea:b6:d5:4c:
79:cb:63:ed:c4:bc:80:20:4e:8c:aa:45:e6:0d:5e:
d4:39:7c:ae:ce:e0:f2:0c:1e:ed:ed:b4:fc:ca:df:
59:67:7c:0f:dc:18:da:38:56:e6:fe:d2:a8:06:e3:
d0:6f:36:99:8a:bd:9d:7a:47:ac:dc:50:01:de:82:
d3:62:2d:c7:df:7a:30:d4:3c:7c:8d:57:e2:08:b5:
a1:d6:9a:7a:60:45:2b:5c:b4:39:15:a1:9f:27:ea:
e8:8a:22:06:9d:af:ab:55:c9:92:d7:57:3d:ec:57:
db:14:19:1e:1a:71:73:e6:25:80:c6:f9:38:2d:00:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:10:3B:EE:45:82:35:36:D0:94:82:CF:BA:CF:73:0F:A2:44:A5
X509v3 Authority Key Identifier:
keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/bXQQO-5FgjU20JSCz7rPcw-iRKU.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47311
Signature Algorithm: sha256WithRSAEncryption
5b:f2:79:8e:71:57:46:a3:56:a5:23:91:c6:80:cd:3f:98:4d:
08:29:4a:e8:8e:d3:6c:84:71:2d:15:0b:77:94:0d:37:2b:34:
e0:db:51:39:b6:f9:1c:6c:07:15:bb:b4:f6:6d:9b:8f:be:9c:
6a:74:5f:61:e0:0e:77:59:ff:6f:cc:8d:38:5e:5e:a7:c9:a7:
4c:61:92:c9:ad:27:3c:ab:e2:d4:ea:53:d2:9a:a3:ba:3e:4d:
36:bb:db:45:41:1f:83:70:e6:b5:61:f8:7f:0c:66:d5:c9:f6:
b4:c8:56:0c:72:69:83:3e:f3:66:fa:a7:52:b9:c3:8a:05:6b:
3b:d2:2b:32:19:c6:0a:8e:fc:85:92:a9:95:03:d4:e9:14:46:
ba:df:97:5e:8b:80:0f:59:dc:63:0a:65:c3:9d:28:03:bc:b7:
d6:61:bd:5b:07:f3:07:fb:6b:7f:25:26:5d:63:28:dd:27:e7:
69:69:61:bb:d2:dc:ae:ca:2c:40:13:55:42:54:f1:f5:17:8e:
87:65:89:79:85:67:7e:18:5a:27:90:b9:47:cf:db:06:b9:84:
12:d6:fe:50:4d:c4:d9:92:a5:9a:df:75:81:c8:5f:94:e9:72:
28:23:9a:bc:62:8d:99:5c:a5:7e:8d:23:b1:44:35:e8:8d:5f:
21:2a:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:52 2025 by rpki-client