This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/kc-ns8bWIT9K7m6a9jvswRWUPR8.asa File: kc-ns8bWIT9K7m6a9jvswRWUPR8.asa (raw, json) Hash identifier: xElEmB04pqFQaBrwyjhkcfeEnKVFkqKXIsbiepT9o7o= Subject key identifier: 91:CF:A7:B3:C6:D6:21:3F:4A:EE:6E:9A:F6:3B:EC:C1:15:94:3D:1F Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Certificate serial: 019B0EBB877988A7108D084983409B4E6611 Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/kc-ns8bWIT9K7m6a9jvswRWUPR8.asa Signing time: Thu 11 Dec 2025 18:45:29 +0000 ASPA not before: Thu 11 Dec 2025 18:45:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214205 Providers: AS: 6939 AS: 34927 AS: 52025 AS: 205941 AS: 209533 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:bb:87:79:88:a7:10:8d:08:49:83:40:9b:4e:66:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Validity Not Before: Dec 11 18:45:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91cfa7b3c6d6213f4aee6e9af63becc115943d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:25:6e:64:4d:67:94:7d:48:41:ec:67:da: ef:b2:b9:af:8c:86:6e:d6:29:96:b3:17:82:23:48: ed:dd:9f:42:a0:55:7b:35:bb:d6:6b:66:93:a0:da: d4:17:91:5f:29:a8:4b:91:09:8a:89:01:a4:07:38: c6:01:e6:0b:29:8e:27:99:93:db:b3:93:d0:ef:89: ad:9e:9d:40:9e:ae:06:6a:2b:c0:0a:ef:c3:72:5b: c1:07:8c:30:bb:28:ad:d2:55:90:74:6b:b9:36:3a: 9c:67:86:41:80:d7:fd:71:5d:94:be:fa:16:bb:35: 83:22:b3:86:ba:89:b2:23:b8:34:aa:27:ea:73:4a: 6e:98:fc:80:85:95:a5:b3:35:73:49:82:ae:8e:74: 40:7e:00:36:34:cf:a6:b3:fb:af:ee:61:1a:ae:e2: 00:30:bd:46:9a:28:8c:5f:85:e6:8a:a3:68:0a:39: d1:60:c9:93:47:ae:e9:84:f2:5b:f3:d2:54:20:23: 50:72:d5:5f:92:23:36:fe:13:28:12:3f:57:e5:b4: 34:13:fa:6b:10:c7:dd:90:04:46:b3:a6:73:32:29: 67:5e:1c:06:ee:e9:4b:8e:3f:51:e2:c7:a2:86:f8: d3:47:6e:20:40:4c:5a:47:a0:5a:23:29:59:63:60: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CF:A7:B3:C6:D6:21:3F:4A:EE:6E:9A:F6:3B:EC:C1:15:94:3D:1F X509v3 Authority Key Identifier: keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/kc-ns8bWIT9K7m6a9jvswRWUPR8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214205 Signature Algorithm: sha256WithRSAEncryption a7:d4:ba:1f:d7:b1:78:f4:7e:e7:87:04:8c:b7:4c:44:31:5c: e7:2a:f8:e7:f3:77:6b:ae:2c:1b:12:6a:28:6d:59:c3:f5:50: 5f:f0:05:11:aa:0f:1f:86:ec:1b:1e:37:49:ef:d3:f7:f2:d9: c1:e2:db:eb:68:e2:60:ed:c5:8f:df:79:61:84:8c:04:c3:2a: cd:b1:94:3f:97:8b:ab:85:3c:31:c4:6a:0e:24:52:92:5f:70: 19:ed:78:70:2f:a8:7b:5b:dd:74:69:37:aa:b3:e2:a1:c4:8b: 8c:9f:ac:d8:11:cc:ab:15:de:b2:25:d6:29:67:61:46:b1:9c: 95:0d:e5:96:08:ae:66:2c:05:57:9c:99:34:be:96:29:a4:f6: 1e:10:8b:1d:15:87:53:30:3c:3e:05:19:f0:68:55:d4:ca:27: 62:1a:12:7c:32:a5:ad:3b:fd:f8:23:e0:18:9a:81:23:46:33: ef:b5:98:33:bc:c3:c2:95:6d:e0:9d:c3:fb:16:57:59:81:26: 91:7d:6d:44:ba:b2:f5:84:9d:17:ee:7c:c5:24:26:89:c1:cb: 84:30:e5:10:71:50:d9:0a:1d:5a:f3:b3:97:2d:eb:ff:65:de: b4:82:0e:c8:70:e1:df:7f:50:23:15:e3:6c:a9:84:99:1f:0e: 18:d9:9b:df -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsOu4d5iKcQjQhJg0CbTmYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZjE3YWU1NDdiOWYyNjQxZTYwNTc3ZmU1NTNkZGI2Zjc0 OWEwODcwHhcNMjUxMjExMTg0NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWNmYTdiM2M2ZDYyMTNmNGFlZTZlOWFmNjNiZWNjMTE1OTQzZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4glbmRNZ5R9SEHsZ9rvsrmvjIZu 1imWsxeCI0jt3Z9CoFV7NbvWa2aToNrUF5FfKahLkQmKiQGkBzjGAeYLKY4nmZPb s5PQ74mtnp1Anq4GaivACu/DclvBB4wwuyit0lWQdGu5NjqcZ4ZBgNf9cV2UvvoW uzWDIrOGuomyI7g0qifqc0pumPyAhZWlszVzSYKujnRAfgA2NM+ms/uv7mEaruIA ML1GmiiMX4XmiqNoCjnRYMmTR67phPJb89JUICNQctVfkiM2/hMoEj9X5bQ0E/pr EMfdkARGs6ZzMilnXhwG7ulLjj9R4seihvjTR24gQExaR6BaIylZY2DZowIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJHPp7PG1iE/Su5umvY77MEVlD0fMB8GA1UdIwQY MBaAFH/xeuVHufJkHmBXf+VT3bb3SaCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQt YTQzZmYyNWQ0NDdkLzEva2MtbnM4YldJVDlLN202YTlqdnN3UldVUFI4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQtYTQzZmYyNWQ0NDdk LzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNEvTANBgkqhkiG 9w0BAQsFAAOCAQEAp9S6H9exePR+54cEjLdMRDFc5yr45/N3a64sGxJqKG1Zw/VQ X/AFEaoPH4bsGx43Se/T9/LZweLb62jiYO3Fj995YYSMBMMqzbGUP5eLq4U8McRq DiRSkl9wGe14cC+oe1vddGk3qrPiocSLjJ+s2BHMqxXesiXWKWdhRrGclQ3llgiu ZiwFV5yZNL6WKaT2HhCLHRWHUzA8PgUZ8GhV1MonYhoSfDKlrTv9+CPgGJqBI0Yz 77WYM7zDwpVt4J3D+xZXWYEmkX1tRLqy9YSdF+58xSQmicHLhDDlEHFQ2QodWvOz ly3r/2XetIIOyHDh339QIxXjbKmEmR8OGNmb3w== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:29 2025 by rpki-client