This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa File: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (raw, json) Hash identifier: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk= Subject key identifier: 04:C3:D3:EC:DC:D5:F8:34:62:FC:94:B2:2D:F6:F2:12:6A:5E:29:30 Certificate issuer: /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Certificate serial: 019B702AE34D8A98360AFE32369CED0D6049 Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa Signing time: Tue 30 Dec 2025 16:50:17 +0000 ASPA not before: Tue 30 Dec 2025 16:50:17 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 41731 Providers: AS: 196610 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:2a:e3:4d:8a:98:36:0a:fe:32:36:9c:ed:0d:60:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34 Validity Not Before: Dec 30 16:50:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04c3d3ecdcd5f83462fc94b22df6f2126a5e2930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:6b:78:42:6d:96:82:c4:0a:75:84:0c:a6: be:2a:5e:10:d3:d7:00:ae:b6:28:d9:8f:54:9a:b8: 66:71:b7:f0:0a:e0:f1:c8:c7:78:ec:de:d9:d4:69: f0:e4:2d:3c:e7:88:fb:64:0b:00:e9:ad:c6:44:77: 5d:cd:07:50:3d:39:5d:67:56:85:42:81:3c:8f:b5: bc:9a:60:52:b4:03:de:fa:d2:63:1f:c7:d9:f0:c3: d7:de:ec:99:a3:2f:7a:0e:1e:fe:8c:f2:6b:e1:e3: fc:ca:82:bf:47:a1:e0:63:80:0c:d2:7e:43:06:9a: 52:f3:8f:5e:ce:6c:6b:8a:cd:13:f3:43:f0:6c:f7: bb:ef:b6:0a:07:16:00:da:44:a5:14:40:5e:3b:90: c6:31:45:de:5a:c0:75:0a:05:2a:aa:bc:d7:cb:2e: 5e:10:07:73:14:a1:7c:a0:61:d3:b2:d3:e1:53:d3: 43:b6:ec:97:58:30:05:55:a2:c6:45:b1:a2:de:86: d9:f4:ae:3f:90:8b:26:b6:d9:1a:eb:ce:80:78:da: d0:0e:16:5f:60:a4:31:18:60:98:04:18:0a:8e:57: 74:db:a2:0c:0c:4d:2b:3d:fa:d4:68:ac:89:de:a2: dc:ad:3e:80:68:4d:40:1f:1e:a1:7c:22:f0:08:23: bf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:D3:EC:DC:D5:F8:34:62:FC:94:B2:2D:F6:F2:12:6A:5E:29:30 X509v3 Authority Key Identifier: keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 41731 Signature Algorithm: sha256WithRSAEncryption 24:53:81:80:f3:e8:64:c8:82:10:76:8b:ae:31:ea:56:0b:c1: 9c:de:e4:8d:a6:59:e7:53:4a:8e:ae:db:61:38:c7:44:fd:6e: e3:d7:b0:bd:37:a1:57:0a:3a:7a:22:b0:62:7f:bb:ce:06:db: 14:e7:63:e2:d7:52:a6:23:ff:33:e9:96:2a:df:c9:3f:d4:cf: 9f:9a:db:b5:ff:0a:b3:c8:ea:14:06:8c:dc:23:2b:65:3b:5c: 64:44:f4:9b:d8:5e:7a:a4:cc:40:f2:f1:cf:24:35:5d:bb:32: 28:9d:d3:74:b2:fd:52:6f:f9:09:59:c4:81:8e:a2:8e:eb:f2: 9a:9c:c9:4a:3e:da:77:f0:1b:50:d0:7b:ce:df:a1:f7:41:0e: 4b:1d:38:69:d3:5d:57:41:9e:00:57:eb:32:dd:78:94:48:75: 81:46:2b:27:60:d0:c1:88:b5:e5:d7:9b:9f:ed:4c:78:20:8e: ee:19:da:1f:4a:45:23:d6:06:ba:15:e9:aa:78:64:33:ea:f0: b7:45:0b:b9:99:65:53:99:75:2b:dd:e7:b2:c0:fe:9f:f5:61: 30:06:fa:0a:8a:c8:89:fc:b3:2b:35:fb:6c:4e:32:c9:35:7e: 3f:9f:5b:8d:be:79:72:75:6e:56:2e:b3:fd:20:3a:77:35:34: 8c:66:2e:0a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtwKuNNipg2Cv4yNpztDWBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj ZmJhMzQwHhcNMjUxMjMwMTY1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGMzZDNlY2RjZDVmODM0NjJmYzk0YjIyZGY2ZjIxMjZhNWUyOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg9reEJtloLECnWEDKa+Kl4Q09cA rrYo2Y9UmrhmcbfwCuDxyMd47N7Z1Gnw5C0854j7ZAsA6a3GRHddzQdQPTldZ1aF QoE8j7W8mmBStAPe+tJjH8fZ8MPX3uyZoy96Dh7+jPJr4eP8yoK/R6HgY4AM0n5D BppS849ezmxris0T80PwbPe777YKBxYA2kSlFEBeO5DGMUXeWsB1CgUqqrzXyy5e EAdzFKF8oGHTstPhU9NDtuyXWDAFVaLGRbGi3obZ9K4/kIsmttka686AeNrQDhZf YKQxGGCYBBgKjld026IMDE0rPfrUaKyJ3qLcrT6AaE1AHx6hfCLwCCO/pwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFATD0+zc1fg0YvyUsi328hJqXikwMB8GA1UdIwQY MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt YzYyMWU4ZGY5NWZmLzEvQk1QVDdOelYtRFJpX0pTeUxmYnlFbXBlS1RBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCjAzANBgkqhkiG 9w0BAQsFAAOCAQEAJFOBgPPoZMiCEHaLrjHqVgvBnN7kjaZZ51NKjq7bYTjHRP1u 49ewvTehVwo6eiKwYn+7zgbbFOdj4tdSpiP/M+mWKt/JP9TPn5rbtf8Ks8jqFAaM 3CMrZTtcZET0m9heeqTMQPLxzyQ1XbsyKJ3TdLL9Um/5CVnEgY6ijuvympzJSj7a d/AbUNB7zt+h90EOSx04adNdV0GeAFfrMt14lEh1gUYrJ2DQwYi15debn+1MeCCO 7hnaH0pFI9YGuhXpqnhkM+rwt0ULuZllU5l1K93nssD+n/VhMAb6CorIifyzKzX7 bE4yyTV+P59bjb55cnVuVi6z/SA6dzU0jGYuCg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:46 2026 by rpki-client