This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/_opXEn0thzhgGf4NWVntdA2gblE.asa File: _opXEn0thzhgGf4NWVntdA2gblE.asa (raw, json) Hash identifier: nbnWVS0wu/u5kwilgVDWUiJkK1AUWGIEUy+veLSh4gs= Subject key identifier: FE:8A:57:12:7D:2D:87:38:60:19:FE:0D:59:59:ED:74:0D:A0:6E:51 Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019B8963234C3B452774227932A13E4BEFAC Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/_opXEn0thzhgGf4NWVntdA2gblE.asa Signing time: Sun 04 Jan 2026 14:22:14 +0000 ASPA not before: Sun 04 Jan 2026 14:22:14 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 56595 Providers: AS: 1299 AS: 3257 AS: 6461 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:63:23:4c:3b:45:27:74:22:79:32:a1:3e:4b:ef:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Jan 4 14:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe8a57127d2d87386019fe0d5959ed740da06e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:c2:aa:18:e0:54:42:63:18:1f:18:05:ab: 79:b1:b3:1b:f9:2d:23:81:c4:19:19:f7:2f:c3:81: 11:c8:ee:e8:f6:b5:0e:86:62:3f:2a:e6:dc:4c:76: 4b:b6:5d:cb:d2:cc:7e:0a:79:bd:b0:ca:9c:75:b7: 55:f6:8c:69:fa:6f:7c:7d:d2:3a:cd:e9:dd:8f:f7: 77:7d:28:60:3e:d1:1e:f8:6f:78:85:52:9c:c4:18: 2e:8d:ba:93:d7:3d:61:51:c1:de:36:fc:c4:89:0e: dd:d5:d3:7d:13:14:db:76:d3:4e:a3:68:3d:6b:e2: 92:e3:57:1b:65:ba:e2:76:02:85:5d:3b:e0:25:7b: 9a:c1:0a:fc:99:a0:ae:cb:2d:1e:fe:70:b5:bc:16: 11:53:68:0d:45:c0:0a:f3:02:3c:32:11:5e:ee:77: f7:5c:85:78:f6:f3:23:7a:a4:e1:ed:01:95:85:f4: a6:ef:f9:8a:b9:58:83:f5:05:08:6f:99:81:75:6e: da:4e:6c:65:77:89:16:80:5f:88:18:d6:70:ab:db: 0d:b4:e4:f5:d2:16:22:88:ae:7f:c0:04:1b:c6:cc: ff:cf:20:6e:9d:56:f1:72:f8:72:2f:09:dd:2e:43: 5b:d8:5a:be:f7:02:2a:ea:40:f5:9e:1b:6d:66:d7: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:57:12:7D:2D:87:38:60:19:FE:0D:59:59:ED:74:0D:A0:6E:51 X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/_opXEn0thzhgGf4NWVntdA2gblE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 56595 Signature Algorithm: sha256WithRSAEncryption 5e:70:91:34:d1:54:32:e0:bb:e5:eb:70:ca:cd:09:b9:0d:b5: b5:23:e5:dc:fd:03:7f:05:3b:89:91:9d:34:f2:ca:6d:3a:c6: 4b:89:23:d8:a8:b5:cb:95:16:76:ca:67:60:4e:f9:fa:d7:83: d2:1e:74:cf:d5:3d:ef:3f:8a:2a:6a:20:fd:9e:63:62:33:34: ef:ae:68:ae:35:cf:f8:16:5d:d9:ed:12:33:7c:39:86:bf:c7: c6:bf:bc:ae:de:73:d4:41:4c:a7:ef:b8:fe:bf:7d:55:9d:43: bd:91:9a:64:ef:62:bf:ea:50:e7:60:74:26:b5:97:94:3e:5d: 07:fa:2d:d3:93:b9:99:6a:62:db:a5:57:71:3d:47:2f:b8:0b: d5:3e:ff:a2:28:72:29:9f:0b:07:51:43:f8:1e:2e:35:e0:4b: f9:6b:34:55:eb:4a:43:99:57:ed:11:17:7a:40:c0:89:25:e0: 3e:73:ae:b5:20:e7:6b:e0:f3:a8:68:83:61:e1:c6:89:59:19: d6:8b:4b:da:f5:fd:f9:04:33:dd:d0:19:75:a2:77:5b:91:e4: 18:75:47:02:42:ee:c3:73:20:e6:b7:fd:24:c5:df:9d:b3:6c: 72:b3:c7:f7:c3:45:67:bc:0d:41:9d:1e:02:c4:ad:72:1d:85: 2f:3d:34:d2 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZuJYyNMO0UndCJ5MqE+S++sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjYwMTA0MTQyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZThhNTcxMjdkMmQ4NzM4NjAxOWZlMGQ1OTU5ZWQ3NDBkYTA2ZTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlLCqhjgVEJjGB8YBat5sbMb+S0j gcQZGfcvw4ERyO7o9rUOhmI/KubcTHZLtl3L0sx+Cnm9sMqcdbdV9oxp+m98fdI6 zendj/d3fShgPtEe+G94hVKcxBgujbqT1z1hUcHeNvzEiQ7d1dN9ExTbdtNOo2g9 a+KS41cbZbridgKFXTvgJXuawQr8maCuyy0e/nC1vBYRU2gNRcAK8wI8MhFe7nf3 XIV49vMjeqTh7QGVhfSm7/mKuViD9QUIb5mBdW7aTmxld4kWgF+IGNZwq9sNtOT1 0hYiiK5/wAQbxsz/zyBunVbxcvhyLwndLkNb2Fq+9wIq6kD1nhttZtcf1wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFP6KVxJ9LYc4YBn+DVlZ7XQNoG5RMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvX29wWEVuMHRoemhnR2Y0TldWbnRkQTJnYmxFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDdEzANBgkqhkiG 9w0BAQsFAAOCAQEAXnCRNNFUMuC75etwys0JuQ21tSPl3P0DfwU7iZGdNPLKbTrG S4kj2Ki1y5UWdspnYE75+teD0h50z9U97z+KKmog/Z5jYjM0765orjXP+BZd2e0S M3w5hr/Hxr+8rt5z1EFMp++4/r99VZ1DvZGaZO9iv+pQ52B0JrWXlD5dB/ot05O5 mWpi26VXcT1HL7gL1T7/oihyKZ8LB1FD+B4uNeBL+Ws0VetKQ5lX7REXekDAiSXg PnOutSDna+DzqGiDYeHGiVkZ1otL2vX9+QQz3dAZdaJ3W5HkGHVHAkLuw3Mg5rf9 JMXfnbNscrPH98NFZ7wNQZ0eAsStch2FLz000g== -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:34 2026 by rpki-client