This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa File: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (raw, json) Hash identifier: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8= Subject key identifier: C6:94:07:41:EF:49:2B:50:94:7B:B1:6B:13:A5:10:26:66:F6:A2:DF Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d Certificate serial: 019AF93E207AC22435A37B37F7CC8074292F Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa Signing time: Sun 07 Dec 2025 14:36:29 +0000 ASPA not before: Sun 07 Dec 2025 14:36:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 64475 Providers: AS: 3320 AS: 29551 AS: 47147 AS: 50629 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:3e:20:7a:c2:24:35:a3:7b:37:f7:cc:80:74:29:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d Validity Not Before: Dec 7 14:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6940741ef492b50947bb16b13a5102666f6a2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:76:d4:07:54:67:09:bb:18:b7:eb:43:ee: 3c:ff:3b:84:88:35:80:16:db:12:c5:04:44:c5:a1: 30:af:f2:38:ab:41:ea:af:68:8f:c8:6c:8c:a0:99: 26:73:63:c8:5e:16:25:45:15:af:a4:99:ea:ee:d7: 10:62:df:78:ea:af:72:6f:19:14:22:8c:36:43:81: a1:13:c4:9e:aa:19:eb:7d:d1:6e:44:59:05:fd:9e: c2:f2:be:5b:ce:c5:5e:2b:79:57:6c:28:ce:38:e0: c7:8a:66:f5:2f:df:56:fe:89:31:a5:8b:6b:0a:e8: 03:c4:66:9d:a2:32:db:9b:b6:3b:b9:ee:11:61:9a: 04:c8:27:d3:70:76:39:8a:90:9f:a5:66:d8:56:f2: 8d:bf:85:bb:58:c4:5e:ad:ad:61:20:96:8c:fd:36: 8b:1b:13:da:63:b6:fd:55:60:1b:63:57:c5:72:cc: af:59:97:86:e6:de:56:3d:86:68:d0:8b:b4:66:98: ff:83:d7:df:94:38:b4:a3:86:9e:3e:55:8e:4b:19: 72:3c:db:29:73:a2:c2:de:55:71:bb:52:dd:5f:4c: 59:e5:59:14:d9:61:82:12:07:3e:24:da:25:41:b0: 9e:d8:16:de:79:cf:7c:2d:e7:be:70:ec:63:c0:2c: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:94:07:41:EF:49:2B:50:94:7B:B1:6B:13:A5:10:26:66:F6:A2:DF X509v3 Authority Key Identifier: keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 64475 Signature Algorithm: sha256WithRSAEncryption 43:27:30:1d:d7:1c:b3:b2:e1:04:42:50:ba:44:aa:41:31:fe: 1b:41:3b:12:ec:90:66:07:31:63:88:cf:07:f3:a0:e8:37:d5: 1c:ed:47:80:72:7b:5d:9d:94:d0:d9:99:41:e4:a7:2e:6e:e5: 1a:8d:3a:ee:32:4a:d4:b6:ae:76:a5:5f:04:64:86:a9:ae:fa: e4:c5:30:4a:5d:cf:cc:d2:2b:81:df:8e:65:77:ff:4f:7d:b0: a4:17:ba:c0:9b:63:a2:59:06:2d:84:35:75:5f:82:49:a0:b2: fb:c6:c0:18:70:e8:4b:bb:22:24:97:6a:73:a8:15:73:d1:ec: 8d:8a:cb:19:e8:79:2d:41:be:14:48:48:00:0e:37:73:f4:a0: 5f:ae:69:84:61:07:43:d9:6f:37:a4:b2:ff:b9:c7:b2:e2:a9: c0:f9:1e:7a:a0:58:ad:66:a4:32:2e:f8:61:80:c8:ce:76:51: d4:5b:a7:87:2a:c0:f0:c9:ca:15:df:3d:5a:ac:d5:57:4a:0a: 60:2f:14:bf:20:16:6e:45:60:4c:ef:ed:ea:55:66:77:38:c8: a7:9b:2e:c1:37:3a:4e:9d:14:93:6d:03:86:53:c6:a7:a4:96: 08:7f:a0:47:50:1f:ef:44:ec:2f:63:70:e6:4d:90:be:5d:78: fb:8b:b5:8f -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr5PiB6wiQ1o3s398yAdCkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjA4NThhMzhhZDVlMTFiN2IxODkzOTI4ODNiYzgzZWI2 YjM2MWQwHhcNMjUxMjA3MTQzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjk0MDc0MWVmNDkyYjUwOTQ3YmIxNmIxM2E1MTAyNjY2ZjZhMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymN21AdUZwm7GLfrQ+48/zuEiDWA FtsSxQRExaEwr/I4q0Hqr2iPyGyMoJkmc2PIXhYlRRWvpJnq7tcQYt946q9ybxkU Iow2Q4GhE8SeqhnrfdFuRFkF/Z7C8r5bzsVeK3lXbCjOOODHimb1L99W/okxpYtr CugDxGadojLbm7Y7ue4RYZoEyCfTcHY5ipCfpWbYVvKNv4W7WMRera1hIJaM/TaL GxPaY7b9VWAbY1fFcsyvWZeG5t5WPYZo0Iu0Zpj/g9fflDi0o4aePlWOSxlyPNsp c6LC3lVxu1LdX0xZ5VkU2WGCEgc+JNolQbCe2Bbeec98Lee+cOxjwCzsZQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMaUB0HvSStQlHuxaxOlECZm9qLfMB8GA1UdIwQY MBaAFMZghYo4rV4Rt7GJOSiDvIPrazYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEt ZmE1ZDdiNDhhYWU5LzEveHBRSFFlOUpLMUNVZTdGckU2VVFKbWIyb3Q4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEtZmE1ZDdiNDhhYWU5 LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD72zANBgkqhkiG 9w0BAQsFAAOCAQEAQycwHdccs7LhBEJQukSqQTH+G0E7EuyQZgcxY4jPB/Og6DfV HO1HgHJ7XZ2U0NmZQeSnLm7lGo067jJK1LaudqVfBGSGqa765MUwSl3PzNIrgd+O ZXf/T32wpBe6wJtjolkGLYQ1dV+CSaCy+8bAGHDoS7siJJdqc6gVc9HsjYrLGeh5 LUG+FEhIAA43c/SgX65phGEHQ9lvN6Sy/7nHsuKpwPkeeqBYrWakMi74YYDIznZR 1FunhyrA8MnKFd89WqzVV0oKYC8UvyAWbkVgTO/t6lVmdzjIp5suwTc6Tp0Uk20D hlPGp6SWCH+gR1Af70TsL2Nw5k2Qvl14+4u1jw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:25 2025 by rpki-client