This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/7cUw2Cl-LurIN6oFks9FqvoL_Z0.asa File: 7cUw2Cl-LurIN6oFks9FqvoL_Z0.asa (raw, json) Hash identifier: 5JR4v2ucVdBpkAxn2kdLppnKMPCi8MMxkTGGwlQVif8= Subject key identifier: ED:C5:30:D8:29:7E:2E:EA:C8:37:AA:05:92:CF:45:AA:FA:0B:FD:9D Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019BEA0A6CA9378A0AC0D8CD912D09EDC46D Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/7cUw2Cl-LurIN6oFks9FqvoL_Z0.asa Signing time: Fri 23 Jan 2026 08:48:30 +0000 ASPA not before: Fri 23 Jan 2026 08:48:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 205941 Providers: AS: 20473 AS: 23507 AS: 53356 AS: 57050 AS: 60602 AS: 60900 AS: 62553 AS: 208453 AS: 210464 AS: 212271 AS: 212895 AS: 213413 AS: 213449 AS: 214480 AS: 214757 AS: 214809 AS: 215828 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:0a:6c:a9:37:8a:0a:c0:d8:cd:91:2d:09:ed:c4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Jan 23 08:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edc530d8297e2eeac837aa0592cf45aafa0bfd9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3a:de:55:01:a4:67:f8:01:b4:9e:ea:80:d5: 6f:45:43:24:5d:5f:0e:0f:1e:20:92:39:b0:73:51: 05:11:04:4f:20:90:14:7e:a5:a0:b9:d5:26:9d:7a: 5c:f9:ef:5e:60:fb:52:e1:07:33:bf:6a:fa:6e:14: e8:c1:10:91:91:7d:5c:3b:7d:cc:c1:9c:98:3f:15: 3e:36:24:3e:64:f3:38:9c:20:cf:27:78:cd:01:b2: 65:af:d4:c7:8a:df:ce:dd:14:e4:04:69:86:a9:1b: 68:cb:f5:a6:01:17:56:62:f2:21:01:b1:6e:ca:dd: c1:da:e2:b3:8e:4d:f0:71:de:34:95:83:25:ce:1a: 8c:23:99:cc:b7:c8:0e:94:6b:4e:ba:14:b5:0b:76: 19:ba:2c:56:a4:1d:d7:bf:d7:e2:46:1c:c7:da:83: cf:3f:ed:28:04:5c:03:52:a2:3e:22:8d:d1:70:98: 76:4c:6a:58:bc:07:a5:5d:38:b1:25:8c:9d:49:e3: f6:cd:df:71:f2:49:5c:39:1c:0c:f1:49:76:fb:74: 77:9d:11:06:d5:82:40:de:36:2e:82:17:10:40:5c: bf:1c:47:a7:8c:2f:0f:af:7b:06:29:0c:19:ce:05: 12:56:bc:79:26:c6:29:e7:c7:f4:4e:88:b3:82:f7: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:30:D8:29:7E:2E:EA:C8:37:AA:05:92:CF:45:AA:FA:0B:FD:9D X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/7cUw2Cl-LurIN6oFks9FqvoL_Z0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205941 Signature Algorithm: sha256WithRSAEncryption 33:16:46:d3:05:cc:69:f1:5b:0a:db:59:48:e6:2f:2e:73:08: cd:c5:7c:44:23:1a:05:93:f6:a5:20:e5:a3:84:5c:d9:58:8d: c8:71:d4:64:76:09:5d:93:5d:ae:fc:48:19:2e:b4:4d:43:b5: dc:6e:36:14:85:f9:ba:28:a9:ea:b4:8f:3c:de:fa:9c:20:d1: 4d:e7:5d:62:98:89:aa:17:ce:5b:bd:db:34:ec:eb:6d:2d:71: 16:b2:82:2f:51:0e:be:e0:d1:5d:a6:5b:95:05:d1:85:3c:9e: be:5d:da:4c:23:c5:ee:7f:52:7e:b2:26:04:77:0e:a7:b1:77: 38:1d:50:e8:95:79:e3:fb:3c:3a:74:c5:d0:80:e3:c7:ce:1a: c6:c7:13:19:7a:45:d5:84:37:47:10:b8:a8:c3:e9:c4:e3:91: 93:e4:7c:31:08:6c:40:2c:f8:c2:91:42:c7:cf:6b:9e:18:b5: 22:fd:9c:fe:0c:2f:64:64:5d:9d:90:9d:f1:4d:e7:77:67:3a: e9:a9:a4:53:62:30:33:25:1b:44:32:c5:3d:5f:ee:2c:38:b5: 10:1a:47:b7:5c:15:c9:b8:11:c7:b2:90:a1:a3:05:bb:e2:6e: b5:18:68:ee:a1:06:aa:e4:04:3f:f3:00:02:95:d0:7f:34:0e: 74:4d:67:92 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvqCmypN4oKwNjNkS0J7cRtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjYwMTIzMDg0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGM1MzBkODI5N2UyZWVhYzgzN2FhMDU5MmNmNDVhYWZhMGJmZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTreVQGkZ/gBtJ7qgNVvRUMkXV8O Dx4gkjmwc1EFEQRPIJAUfqWgudUmnXpc+e9eYPtS4Qczv2r6bhTowRCRkX1cO33M wZyYPxU+NiQ+ZPM4nCDPJ3jNAbJlr9THit/O3RTkBGmGqRtoy/WmARdWYvIhAbFu yt3B2uKzjk3wcd40lYMlzhqMI5nMt8gOlGtOuhS1C3YZuixWpB3Xv9fiRhzH2oPP P+0oBFwDUqI+Io3RcJh2TGpYvAelXTixJYydSeP2zd9x8klcORwM8Ul2+3R3nREG 1YJA3jYughcQQFy/HEenjC8Pr3sGKQwZzgUSVrx5JsYp58f0ToizgvdwKQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFO3FMNgpfi7qyDeqBZLPRar6C/2dMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvN2NVdzJDbC1MdXJJTjZvRmtzOUZxdm9MX1owLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdTANBgkqhkiG 9w0BAQsFAAOCAQEAMxZG0wXMafFbCttZSOYvLnMIzcV8RCMaBZP2pSDlo4Rc2ViN yHHUZHYJXZNdrvxIGS60TUO13G42FIX5uiip6rSPPN76nCDRTeddYpiJqhfOW73b NOzrbS1xFrKCL1EOvuDRXaZblQXRhTyevl3aTCPF7n9SfrImBHcOp7F3OB1Q6JV5 4/s8OnTF0IDjx84axscTGXpF1YQ3RxC4qMPpxOORk+R8MQhsQCz4wpFCx89rnhi1 Iv2c/gwvZGRdnZCd8U3nd2c66amkU2IwMyUbRDLFPV/uLDi1EBpHt1wVybgRx7KQ oaMFu+JutRho7qEGquQEP/MAApXQfzQOdE1nkg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:15 2026 by rpki-client