This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/QvCAlgcB6qTZ6VUT3sEtdRIXVgk.asa File: QvCAlgcB6qTZ6VUT3sEtdRIXVgk.asa (raw, json) Hash identifier: MpngckAo1Ic57GpUS5DO26fn/z1GJxu9acZlYb5bzGc= Subject key identifier: 42:F0:80:96:07:01:EA:A4:D9:E9:55:13:DE:C1:2D:75:12:17:56:09 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019B1EC86AA5135A07895F6E2959DA5BA4CB Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/QvCAlgcB6qTZ6VUT3sEtdRIXVgk.asa Signing time: Sun 14 Dec 2025 21:33:29 +0000 ASPA not before: Sun 14 Dec 2025 21:33:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 205941 Providers: AS: 57050 AS: 60900 AS: 208453 AS: 210464 AS: 212895 AS: 213449 AS: 214639 AS: 214757 AS: 214809 AS: 215828 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:c8:6a:a5:13:5a:07:89:5f:6e:29:59:da:5b:a4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Dec 14 21:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=42f080960701eaa4d9e95513dec12d7512175609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:77:fd:16:c7:3e:ac:ba:84:3b:85:88:ca:96: b6:68:56:75:a6:a9:48:ec:6b:93:cf:b7:bc:c9:e0: 32:d9:b4:69:95:90:4e:9b:91:69:65:ab:9c:bc:43: ca:cd:ff:6d:8e:d1:22:0f:ba:34:f1:14:4d:0b:3e: 89:4f:fc:3b:8f:07:9d:86:40:29:1b:df:bd:dd:12: 36:5c:ec:3d:a4:f7:00:18:9e:09:63:42:b5:7a:a9: df:47:11:f8:9f:af:62:a7:1b:06:2b:2f:e4:cd:46: e6:dc:77:0b:bd:01:35:19:39:43:5d:7f:c1:5e:91: 04:2d:82:93:f8:d2:12:21:c7:99:1d:9b:6f:b1:d6: f5:93:7a:39:97:72:e7:5e:20:ad:0d:16:f9:89:ff: 97:7b:d1:c6:c0:aa:35:81:c0:d4:28:b6:57:03:ac: 6d:b7:81:1b:50:05:6d:b1:d3:03:37:ae:bc:24:30: a8:31:c1:cb:5f:3b:ca:07:a2:cc:51:c3:d1:3d:9a: 08:2b:05:ef:ac:d3:28:73:42:24:60:d9:ce:e9:a2: 5c:34:3e:29:6f:1d:07:b4:ed:a1:0d:9a:ca:4f:45: 96:37:be:f2:f6:8a:2b:56:4a:6a:67:74:c8:53:12: 93:53:03:cd:0a:ed:35:00:bb:c9:a8:83:ad:72:3d: e0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F0:80:96:07:01:EA:A4:D9:E9:55:13:DE:C1:2D:75:12:17:56:09 X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/QvCAlgcB6qTZ6VUT3sEtdRIXVgk.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205941 Signature Algorithm: sha256WithRSAEncryption 03:17:8b:99:a7:93:07:23:c4:f6:a5:56:2e:ee:af:64:01:d0: 28:7b:3b:08:71:0c:ef:2f:f5:8a:15:2b:2b:b0:f4:58:6e:9a: dd:c9:f8:19:0d:30:57:a6:3e:7c:cc:4a:3b:6f:e0:85:1f:39: b3:33:1b:24:2e:63:0c:2d:44:12:63:e5:58:e3:3f:17:71:17: 87:14:6b:30:c7:61:45:e0:49:b3:18:20:53:90:ec:7c:ae:10: 94:e9:52:5c:a4:0c:4c:6a:b1:77:08:3e:fb:a9:3c:b9:73:e3: 80:94:26:28:86:f4:12:9c:ae:0b:5e:3a:80:51:da:e2:5a:51: 0a:91:73:e3:46:c3:c0:fe:d3:fa:16:95:98:86:d9:b5:77:d1: 36:ea:ef:94:cb:79:25:27:49:1b:39:36:29:41:71:07:34:38: 67:5e:a3:f1:8a:6c:e4:01:ee:f0:ef:41:45:d5:1c:0e:19:0a: 0a:a3:8a:99:b4:99:56:4b:69:d2:40:7d:ca:c6:63:1a:ea:10: 15:ed:5b:3b:21:47:1a:ad:22:4a:06:98:d6:f1:a7:79:bf:65: 1d:2b:68:49:bc:54:8a:6d:aa:0a:e8:e2:67:12:71:d3:d9:cc: dd:25:57:83:c0:63:ba:63:be:ea:ea:8e:79:96:ff:1c:23:3b: 28:b9:6c:fa -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZseyGqlE1oHiV9uKVnaW6TLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjUxMjE0MjEzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmYwODA5NjA3MDFlYWE0ZDllOTU1MTNkZWMxMmQ3NTEyMTc1NjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3f9Fsc+rLqEO4WIypa2aFZ1pqlI 7GuTz7e8yeAy2bRplZBOm5FpZaucvEPKzf9tjtEiD7o08RRNCz6JT/w7jwedhkAp G9+93RI2XOw9pPcAGJ4JY0K1eqnfRxH4n69ipxsGKy/kzUbm3HcLvQE1GTlDXX/B XpEELYKT+NISIceZHZtvsdb1k3o5l3LnXiCtDRb5if+Xe9HGwKo1gcDUKLZXA6xt t4EbUAVtsdMDN668JDCoMcHLXzvKB6LMUcPRPZoIKwXvrNMoc0IkYNnO6aJcND4p bx0HtO2hDZrKT0WWN77y9oorVkpqZ3TIUxKTUwPNCu01ALvJqIOtcj3g3wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFELwgJYHAeqk2elVE97BLXUSF1YJMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvUXZDQWxnY0I2cVRaNlZVVDNzRXRkUklYVmdrLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdTANBgkqhkiG 9w0BAQsFAAOCAQEAAxeLmaeTByPE9qVWLu6vZAHQKHs7CHEM7y/1ihUrK7D0WG6a 3cn4GQ0wV6Y+fMxKO2/ghR85szMbJC5jDC1EEmPlWOM/F3EXhxRrMMdhReBJsxgg U5DsfK4QlOlSXKQMTGqxdwg++6k8uXPjgJQmKIb0EpyuC146gFHa4lpRCpFz40bD wP7T+haVmIbZtXfRNurvlMt5JSdJGzk2KUFxBzQ4Z16j8Yps5AHu8O9BRdUcDhkK CqOKmbSZVktp0kB9ysZjGuoQFe1bOyFHGq0iSgaY1vGneb9lHStoSbxUim2qCuji ZxJx09nM3SVXg8BjumO+6uqOeZb/HCM7KLls+g== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:56 2025 by rpki-client