This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/6DNwF30LCDUKZspUSvniSglbK78.asa File: 6DNwF30LCDUKZspUSvniSglbK78.asa (raw, json) Hash identifier: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw= Subject key identifier: E8:33:70:17:7D:0B:08:35:0A:66:CA:54:4A:F9:E2:4A:09:5B:2B:BF Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0 Certificate serial: 019BF1686963951B2558485CFA418C8418FF Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/6DNwF30LCDUKZspUSvniSglbK78.asa Signing time: Sat 24 Jan 2026 19:08:30 +0000 ASPA not before: Sat 24 Jan 2026 19:08:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 205018 Providers: AS: 6939 AS: 34927 AS: 44324 AS: 52025 AS: 59282 AS: 212001 AS: 400818 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:68:69:63:95:1b:25:58:48:5c:fa:41:8c:84:18:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0 Validity Not Before: Jan 24 19:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e83370177d0b08350a66ca544af9e24a095b2bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:9c:98:94:2e:8e:3b:6b:67:ae:4d:b6:ab: 5b:0c:97:df:e5:09:5a:c4:ce:cc:9d:2d:8d:3f:43: 1a:35:46:45:36:e3:48:f4:97:1e:53:91:5b:91:70: ac:c2:4a:16:7f:46:91:c2:6a:b5:17:5c:b2:e4:d1: b7:5e:6a:f5:57:1a:62:2e:3a:b4:12:76:b0:ae:f0: ea:0e:ec:ef:df:7c:52:35:c7:99:4a:32:5c:cf:50: 5d:d9:38:a8:71:75:97:b0:a3:56:72:88:a4:cc:fd: 98:12:4a:19:9a:d2:b7:ab:1f:5f:01:80:82:00:c5: 17:88:1f:32:5c:b1:aa:22:86:49:ef:22:c1:c0:87: 55:7a:f6:ee:27:04:20:e8:cd:1b:88:33:4f:dc:5a: fc:6a:de:5d:f9:60:3a:35:77:28:75:8c:df:88:8e: 49:0e:e7:ff:9d:8f:b3:3b:d7:fb:c9:bf:73:a3:c7: fa:89:ed:5e:0a:2c:9c:1e:df:c4:38:28:2f:11:fd: 3b:5e:94:3e:8f:ca:92:67:ab:a6:69:07:c6:f4:57: fb:8b:cb:25:c1:01:16:8a:2c:1f:14:ea:ff:35:71: 37:89:58:17:3b:fa:a9:dd:90:27:b1:e4:89:ab:95: 32:9a:2c:34:a2:41:e8:17:62:6e:2d:97:e1:68:b2: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:70:17:7D:0B:08:35:0A:66:CA:54:4A:F9:E2:4A:09:5B:2B:BF X509v3 Authority Key Identifier: keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/6DNwF30LCDUKZspUSvniSglbK78.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205018 Signature Algorithm: sha256WithRSAEncryption 34:0d:17:e2:f9:f3:d2:0e:e1:b3:60:17:b1:9d:85:14:20:05: 03:09:43:2e:d1:65:d7:b4:35:f7:b2:73:7e:74:6e:e1:85:40: 56:c1:3a:23:6e:e8:93:43:df:a5:b2:13:a6:7d:b9:e7:db:0d: d8:13:6d:6e:11:f5:2d:76:6d:74:e1:3a:44:ca:a5:b8:db:81: f8:65:85:09:77:2d:7c:f0:c1:bf:c9:7b:bc:ae:eb:70:3b:c7: c0:ac:0a:7d:66:a1:c3:8b:bc:a3:dc:f7:09:1e:cf:33:a8:7a: f9:72:a8:23:9f:fc:8c:51:be:3d:c3:5c:03:dc:c7:30:c6:87: 64:84:bb:4b:81:d1:0d:e9:a3:ea:68:d8:d7:3e:0f:ad:76:28: 09:4f:bb:d8:74:e7:12:01:24:ad:44:20:a7:54:24:47:99:d2: 18:d7:8c:ad:b8:6e:17:2d:17:e9:b9:90:60:b3:38:1c:6a:0e: da:78:3a:23:cb:01:1a:5b:99:42:1f:00:52:31:c5:e9:90:56: 48:bc:da:e8:81:84:d6:63:1d:4e:02:64:63:ad:17:16:fa:71: a1:46:ce:60:de:16:ab:00:23:fe:3b:90:42:57:da:02:68:bc: c8:33:f1:1d:53:1f:63:21:63:c7:d0:4c:4a:48:49:3d:e5:df: 79:c8:12:13 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvxaGljlRslWEhc+kGMhBj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5Yjg3NTViYzUzZWYxNzc0NmJkMjk2ZWYyOGJhOTAwY2Q5 OGZiZTAwHhcNMjYwMTI0MTkwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODMzNzAxNzdkMGIwODM1MGE2NmNhNTQ0YWY5ZTI0YTA5NWIyYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDmcmJQujjtrZ65NtqtbDJff5Qla xM7MnS2NP0MaNUZFNuNI9JceU5FbkXCswkoWf0aRwmq1F1yy5NG3Xmr1VxpiLjq0 EnawrvDqDuzv33xSNceZSjJcz1Bd2TiocXWXsKNWcoikzP2YEkoZmtK3qx9fAYCC AMUXiB8yXLGqIoZJ7yLBwIdVevbuJwQg6M0biDNP3Fr8at5d+WA6NXcodYzfiI5J Duf/nY+zO9f7yb9zo8f6ie1eCiycHt/EOCgvEf07XpQ+j8qSZ6umaQfG9Ff7i8sl wQEWiiwfFOr/NXE3iVgXO/qp3ZAnseSJq5Uymiw0okHoF2JuLZfhaLLN8QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFOgzcBd9Cwg1CmbKVEr54koJWyu/MB8GA1UdIwQY MBaAFCm4dVvFPvF3Rr0pbvKLqQDNmPvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNjgyMzEtN2NmYy00MDY4LTg2YjUt OWFiNGFkOGI0ZmY0LzEvNkROd0YzMExDRFVLWnNwVVN2bmlTZ2xiSzc4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wNjgyMzEtN2NmYy00MDY4LTg2YjUtOWFiNGFkOGI0ZmY0 LzEvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMg2jANBgkqhkiG 9w0BAQsFAAOCAQEANA0X4vnz0g7hs2AXsZ2FFCAFAwlDLtFl17Q197JzfnRu4YVA VsE6I27ok0PfpbITpn2559sN2BNtbhH1LXZtdOE6RMqluNuB+GWFCXctfPDBv8l7 vK7rcDvHwKwKfWahw4u8o9z3CR7PM6h6+XKoI5/8jFG+PcNcA9zHMMaHZIS7S4HR Demj6mjY1z4PrXYoCU+72HTnEgEkrUQgp1QkR5nSGNeMrbhuFy0X6bmQYLM4HGoO 2ng6I8sBGluZQh8AUjHF6ZBWSLza6IGE1mMdTgJkY60XFvpxoUbOYN4WqwAj/juQ QlfaAmi8yDPxHVMfYyFjx9BMSkhJPeXfecgSEw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:33 2026 by rpki-client