This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/BZsgeYjNsI-TrRFg5BP7kG-awrA.asa File: BZsgeYjNsI-TrRFg5BP7kG-awrA.asa (raw, json) Hash identifier: ufP7A3glS5C1ttJSNJgnaiCLyGOMe/t4RYLh1fKQTdc= Subject key identifier: 05:9B:20:79:88:CD:B0:8F:93:AD:11:60:E4:13:FB:90:6F:9A:C2:B0 Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4 Certificate serial: 019B21C4E261E6CD3E5DC1D8D169BCFD1CB3 Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/BZsgeYjNsI-TrRFg5BP7kG-awrA.asa Signing time: Mon 15 Dec 2025 11:28:29 +0000 ASPA not before: Mon 15 Dec 2025 11:28:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 208395 Providers: AS: 9136 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:c4:e2:61:e6:cd:3e:5d:c1:d8:d1:69:bc:fd:1c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4 Validity Not Before: Dec 15 11:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=059b207988cdb08f93ad1160e413fb906f9ac2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d1:f4:e1:e5:8a:b2:28:f1:2c:2e:87:4f:c3: 0a:8b:96:04:60:e4:23:58:ba:37:60:97:c4:55:0d: 3e:d0:be:33:48:cd:88:51:66:24:31:f2:3f:28:95: 1d:63:ca:47:8e:13:fa:e6:23:25:b8:0a:6e:0b:24: 5e:7d:68:24:ad:e7:6f:f3:f2:7e:9b:4d:ee:9d:0d: 4e:f5:3a:15:91:18:9a:2c:5f:49:a7:14:3c:54:48: 62:6b:19:b6:f6:11:7a:68:bf:13:6c:16:a5:66:1e: 20:46:a4:8e:df:b6:c4:27:e7:56:8c:3d:30:bf:92: e6:08:15:9f:0a:e3:33:ae:62:a5:cc:05:e3:a5:d5: c8:92:c9:e4:40:71:6e:46:3c:f6:14:c8:ca:3d:46: 9c:29:0d:91:4c:4f:a6:c5:ce:36:5e:cd:e0:58:d3: fb:a8:fc:38:fa:23:4b:95:bc:89:a1:6e:43:83:b0: bd:0c:f2:8f:57:ae:4d:12:dc:df:c1:42:6c:f0:4d: 51:56:d3:c3:df:1e:8b:41:89:dd:cd:cd:bf:6e:b3: 80:2c:b2:bb:a7:b1:c1:0c:d9:6d:b4:6b:c4:dc:d9: 1e:12:eb:ba:53:e3:7c:8e:a1:bb:7f:f8:1c:de:3d: 32:30:58:fc:fc:be:90:7e:eb:0a:46:e6:79:47:ed: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:20:79:88:CD:B0:8F:93:AD:11:60:E4:13:FB:90:6F:9A:C2:B0 X509v3 Authority Key Identifier: keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/BZsgeYjNsI-TrRFg5BP7kG-awrA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208395 Signature Algorithm: sha256WithRSAEncryption 05:09:cd:95:d6:81:8c:0e:40:1a:68:a5:e4:61:58:a7:9c:57: 68:4b:7b:63:33:e3:11:f3:4e:bd:a1:4a:fb:b6:c4:65:4b:be: 68:66:b2:35:4a:da:d0:ba:23:98:4e:41:46:e6:3a:6f:6a:23: 34:1a:15:90:d8:39:db:38:53:b7:f3:43:03:73:1e:7b:2a:2e: ed:d3:c9:c8:44:1d:a2:4c:8c:1d:a3:25:ca:f9:1f:31:40:ec: 14:f8:c4:06:52:43:01:97:6f:ab:9b:c7:0f:29:75:1d:67:5d: 64:f0:32:a4:c6:15:26:d7:75:9b:26:d9:24:1f:35:c4:5c:e9: e8:17:37:f4:f8:95:25:80:b1:e1:38:25:23:9c:8f:57:ba:75: ba:0b:ec:0a:4d:a8:75:b1:5a:7e:e2:9c:7f:03:d7:10:74:77: 67:b4:b8:d4:fa:a6:c5:65:28:bf:a1:2b:c4:d1:98:e1:a4:a1: eb:2d:3a:39:eb:04:e1:b0:eb:af:83:fa:ce:d4:54:52:d4:f5: 33:4e:68:47:f4:59:80:1b:8a:8e:d2:d7:ea:ea:e8:61:dd:16: 3c:f3:0e:e5:3f:66:3b:85:bd:d5:a3:e8:b8:af:b3:13:a1:b1: 05:b4:68:b8:f6:9c:98:b4:e0:4d:49:ea:a3:ca:e4:18:16:00: cd:e8:44:c4 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZshxOJh5s0+XcHY0Wm8/RyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGE3MDJmNjc3ZjMzNmQ5YjNlMzZjMzg0ZWJjOGM5ZmQ4 ODU5ZjQwHhcNMjUxMjE1MTEyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTliMjA3OTg4Y2RiMDhmOTNhZDExNjBlNDEzZmI5MDZmOWFjMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NH04eWKsijxLC6HT8MKi5YEYOQj WLo3YJfEVQ0+0L4zSM2IUWYkMfI/KJUdY8pHjhP65iMluApuCyRefWgkredv8/J+ m03unQ1O9ToVkRiaLF9JpxQ8VEhiaxm29hF6aL8TbBalZh4gRqSO37bEJ+dWjD0w v5LmCBWfCuMzrmKlzAXjpdXIksnkQHFuRjz2FMjKPUacKQ2RTE+mxc42Xs3gWNP7 qPw4+iNLlbyJoW5Dg7C9DPKPV65NEtzfwUJs8E1RVtPD3x6LQYndzc2/brOALLK7 p7HBDNlttGvE3NkeEuu6U+N8jqG7f/gc3j0yMFj8/L6QfusKRuZ5R+2UOQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAWbIHmIzbCPk60RYOQT+5BvmsKwMB8GA1UdIwQY MBaAFApKcC9nfzNtmz42w4TryMn9iFn0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQt ZWYzMTcxNTYxMWFhLzEvQlpzZ2VZak5zSS1UclJGZzVCUDdrRy1hd3JBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kYTViMzItMjBhNy00ZTBhLWI4MzQtZWYzMTcxNTYxMWFh LzEvQ2twd0wyZF9NMjJiUGpiRGhPdkl5ZjJJV2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuCzANBgkqhkiG 9w0BAQsFAAOCAQEABQnNldaBjA5AGmil5GFYp5xXaEt7YzPjEfNOvaFK+7bEZUu+ aGayNUra0LojmE5BRuY6b2ojNBoVkNg52zhTt/NDA3Meeyou7dPJyEQdokyMHaMl yvkfMUDsFPjEBlJDAZdvq5vHDyl1HWddZPAypMYVJtd1mybZJB81xFzp6Bc39PiV JYCx4TglI5yPV7p1ugvsCk2odbFafuKcfwPXEHR3Z7S41PqmxWUov6ErxNGY4aSh 6y06OesE4bDrr4P6ztRUUtT1M05oR/RZgBuKjtLX6uroYd0WPPMO5T9mO4W91aPo uK+zE6GxBbRouPacmLTgTUnqo8rkGBYAzehExA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:50 2025 by rpki-client