This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/BzyRKVh8G6MxV92pq1WYXw5su3Y.asa File: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (raw, json) Hash identifier: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo= Subject key identifier: 07:3C:91:29:58:7C:1B:A3:31:57:DD:A9:AB:55:98:5F:0E:6C:BB:76 Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992 Certificate serial: 019ADF288D4EDA072BD6727B56E0D66945D3 Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/BzyRKVh8G6MxV92pq1WYXw5su3Y.asa Signing time: Tue 02 Dec 2025 13:02:48 +0000 ASPA not before: Tue 02 Dec 2025 13:02:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 47455 Providers: AS: 213313 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:28:8d:4e:da:07:2b:d6:72:7b:56:e0:d6:69:45:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992 Validity Not Before: Dec 2 13:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=073c9129587c1ba33157dda9ab55985f0e6cbb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:bf:ff:62:0c:23:f3:89:5b:fe:3b:4d:a2: 0f:96:93:bd:a9:61:83:21:f8:69:d9:9c:de:03:6a: fa:71:26:c6:49:d7:88:5d:6c:c2:89:5f:8f:9d:a6: 74:5d:5d:bf:e0:b4:72:9f:bd:51:0b:e4:01:5e:d9: 14:1a:7a:9c:ea:eb:57:1d:af:d1:13:a2:9c:15:7e: 2a:38:17:56:0b:af:43:6b:5b:f8:fb:b6:e0:32:df: da:6b:00:7a:cf:93:17:04:92:0a:97:fd:24:4d:3c: e4:61:8b:1d:65:f8:8f:7b:bc:de:3b:ab:e8:f6:3f: 63:0c:c3:3b:be:d6:b3:a0:6d:fb:81:a4:9c:72:b7: 5f:f5:3b:e4:0d:af:77:fb:47:1b:7a:ac:79:c6:49: d7:7d:df:5e:2e:3b:04:03:1b:0d:40:5d:8e:75:a2: 0e:0e:81:c2:c6:52:93:19:b8:89:10:df:83:ea:08: da:d8:52:39:b2:a5:cf:8a:76:0c:1e:b8:8b:e2:ec: 99:29:e0:03:5a:54:57:f4:1e:c7:43:ea:5d:10:c8: 74:99:23:2d:42:52:36:71:de:eb:4a:2e:bc:dd:a7: 3e:8d:9e:a3:da:7c:8b:75:9d:90:6e:f3:8e:2f:d7: 9b:fc:a2:4c:26:3a:46:92:87:47:42:03:6e:37:48: 77:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3C:91:29:58:7C:1B:A3:31:57:DD:A9:AB:55:98:5F:0E:6C:BB:76 X509v3 Authority Key Identifier: keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/BzyRKVh8G6MxV92pq1WYXw5su3Y.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47455 Signature Algorithm: sha256WithRSAEncryption 12:98:c3:ef:f6:75:33:3a:db:df:49:cc:75:32:34:34:fc:a0: 7b:f8:97:98:d8:82:ae:b5:76:9c:e2:8b:e4:09:e5:ce:58:a4: 46:fa:78:99:38:b6:43:0c:87:1f:e8:72:18:d6:dd:06:d4:1e: 32:e0:04:df:b0:13:99:fe:09:1c:1e:e2:31:a7:81:60:06:fa: 52:9d:a9:62:72:a4:5d:3f:00:76:6f:9c:1e:10:c4:19:3f:60: ba:f6:2b:78:48:f0:4c:a0:9c:ae:1e:d0:05:5b:cd:ec:5f:be: 22:b5:a6:cd:8a:4e:c5:d6:68:89:ef:83:bb:41:b0:d6:7e:7a: e8:92:c9:ea:2d:5e:5a:0f:de:44:f9:10:e4:76:7e:fd:13:a0: 33:a7:45:e9:6f:94:c7:04:4c:2a:3d:a1:c8:b1:85:59:3a:c2: a6:7e:fe:20:b9:81:05:cd:c4:c9:5a:11:87:04:92:d5:4a:87: 6d:1a:18:e5:9b:32:7a:b1:37:88:f4:ba:0c:ae:26:0d:59:11: 64:77:47:db:f6:ff:c0:82:1c:dc:3e:9c:21:66:1f:3b:3a:6d: 58:92:3f:a4:d6:52:59:f4:e4:de:29:bd:3e:39:9c:93:7a:aa: d0:89:e1:4a:b1:3f:82:6b:12:df:41:e1:d8:77:ba:7a:67:ce: ff:81:ca:54 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrfKI1O2gcr1nJ7VuDWaUXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4 NjI5OTIwHhcNMjUxMjAyMTMwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzNjOTEyOTU4N2MxYmEzMzE1N2RkYTlhYjU1OTg1ZjBlNmNiYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXW//2IMI/OJW/47TaIPlpO9qWGD Ifhp2ZzeA2r6cSbGSdeIXWzCiV+PnaZ0XV2/4LRyn71RC+QBXtkUGnqc6utXHa/R E6KcFX4qOBdWC69Da1v4+7bgMt/aawB6z5MXBJIKl/0kTTzkYYsdZfiPe7zeO6vo 9j9jDMM7vtazoG37gaSccrdf9TvkDa93+0cbeqx5xknXfd9eLjsEAxsNQF2OdaIO DoHCxlKTGbiJEN+D6gja2FI5sqXPinYMHriL4uyZKeADWlRX9B7HQ+pdEMh0mSMt QlI2cd7rSi683ac+jZ6j2nyLdZ2QbvOOL9eb/KJMJjpGkodHQgNuN0h3HQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAc8kSlYfBujMVfdqatVmF8ObLt2MB8GA1UdIwQY MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt OGYyMTVjMDlhZTcyLzEvQnp5UktWaDhHNk14VjkycHExV1lYdzVzdTNZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC5XzANBgkqhkiG 9w0BAQsFAAOCAQEAEpjD7/Z1Mzrb30nMdTI0NPyge/iXmNiCrrV2nOKL5Anlzlik Rvp4mTi2QwyHH+hyGNbdBtQeMuAE37ATmf4JHB7iMaeBYAb6Up2pYnKkXT8Adm+c HhDEGT9guvYreEjwTKCcrh7QBVvN7F++IrWmzYpOxdZoie+Du0Gw1n566JLJ6i1e Wg/eRPkQ5HZ+/ROgM6dF6W+UxwRMKj2hyLGFWTrCpn7+ILmBBc3EyVoRhwSS1UqH bRoY5ZsyerE3iPS6DK4mDVkRZHdH2/b/wIIc3D6cIWYfOzptWJI/pNZSWfTk3im9 Pjmck3qq0InhSrE/gmsS30Hh2He6emfO/4HKVA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:27 2025 by rpki-client