This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/p8Afz0hXr_5silmw3LjpZ3x1GfM.asa File: p8Afz0hXr_5silmw3LjpZ3x1GfM.asa (raw, json) Hash identifier: 5OPpwFJMorWxPyS59iXBcUhwjWueAreQnRw6UYRc7Ag= Subject key identifier: A7:C0:1F:CF:48:57:AF:FE:6C:8A:59:B0:DC:B8:E9:67:7C:75:19:F3 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B6BA8686CDEB3DDEDD8EA4D995A699A4C Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/p8Afz0hXr_5silmw3LjpZ3x1GfM.asa Signing time: Mon 29 Dec 2025 19:49:17 +0000 ASPA not before: Mon 29 Dec 2025 19:49:17 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 212815 Providers: AS: 6939 AS: 39801 AS: 49434 AS: 62000 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:a8:68:6c:de:b3:dd:ed:d8:ea:4d:99:5a:69:9a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Dec 29 19:49:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7c01fcf4857affe6c8a59b0dcb8e9677c7519f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:8c:5a:48:ed:e1:69:90:aa:fb:67:d3:13: c2:ed:67:37:2f:b9:10:21:05:6b:9c:9c:24:e9:1a: 63:54:86:9c:85:ae:2c:7a:fc:6b:89:ea:73:09:21: 24:9c:e9:bc:bb:67:fe:5a:d3:8a:c0:e0:ad:db:7e: c8:59:35:22:3c:5d:48:ff:16:f2:01:e4:df:c5:25: f0:e9:bc:46:eb:4b:95:0e:fe:16:74:02:2e:c1:bc: c2:ea:e0:70:aa:66:c9:94:0d:c8:ab:c6:f8:21:f1: 17:6b:44:a3:7a:d7:74:9b:b8:4f:48:05:e2:2c:93: 52:50:bc:07:d4:63:16:3a:4e:3a:96:cb:fa:30:d1: 11:19:e8:b8:b1:7e:d5:06:5a:5a:fc:b4:e7:03:c4: d2:88:8f:0f:f2:a5:dd:06:ec:1a:2a:5b:cd:75:28: f7:e5:e4:e2:f8:d8:4e:a8:00:79:99:25:27:c7:05: f0:a1:ae:1b:4f:5e:0a:82:5f:52:1e:10:90:94:0f: 8d:21:12:ce:48:dd:55:a3:00:b2:23:ad:4c:fe:85: 8c:dc:1a:e9:72:77:4c:56:35:3f:5d:b4:56:40:c7: 6a:c4:93:3d:6b:db:47:1a:4b:67:2f:64:ac:bb:8c: 4c:da:27:05:13:90:13:48:ad:f9:db:2d:94:d3:31: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C0:1F:CF:48:57:AF:FE:6C:8A:59:B0:DC:B8:E9:67:7C:75:19:F3 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/p8Afz0hXr_5silmw3LjpZ3x1GfM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212815 Signature Algorithm: sha256WithRSAEncryption 5d:ca:ae:f5:5f:c8:c9:61:a6:e6:99:f9:7e:68:c0:ca:36:f3: 4d:45:99:11:43:b7:59:8d:7f:ce:1c:67:31:c1:62:d2:0c:06: 65:1d:2c:f8:03:50:89:ab:c7:9b:1b:fc:6b:7d:02:f2:e0:5f: c5:08:4c:cd:a5:8c:ce:93:27:29:8f:b8:1f:f2:67:a5:69:d4: 07:c2:30:56:0a:5a:3f:dd:d1:85:13:05:66:50:e7:4b:75:a3: f3:ef:c6:32:8d:a7:fb:a1:33:7b:e3:26:81:f5:ec:cf:ed:45: 76:f8:db:d4:b9:41:09:fd:1a:9b:4a:ef:b5:9f:18:d8:07:6f: 41:3e:13:5b:93:d6:5f:58:95:c0:ed:7c:9a:a9:23:bf:d6:25: 5d:da:b3:67:e1:de:4b:dc:51:1f:70:45:a5:63:14:2f:93:60: d6:5c:ae:46:45:3e:e4:b5:cf:aa:96:07:e3:15:60:a3:f5:e3: 40:6e:e9:c0:58:3f:2e:ea:a7:cb:4a:91:9f:a7:fd:96:e2:ad: af:fe:14:c2:5b:c6:90:3c:9b:41:d6:a2:88:ef:d9:fb:25:8d: e2:25:77:37:06:30:3a:1d:64:fa:73:10:0c:df:68:36:4f:7d: 60:72:03:7a:a0:76:0b:d2:c4:c5:61:a9:99:99:4e:e2:09:7b: 0d:11:2b:a5 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtrqGhs3rPd7djqTZlaaZpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjUxMjI5MTk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2MwMWZjZjQ4NTdhZmZlNmM4YTU5YjBkY2I4ZTk2NzdjNzUxOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMeMWkjt4WmQqvtn0xPC7Wc3L7kQ IQVrnJwk6RpjVIacha4sevxriepzCSEknOm8u2f+WtOKwOCt237IWTUiPF1I/xby AeTfxSXw6bxG60uVDv4WdAIuwbzC6uBwqmbJlA3Iq8b4IfEXa0Sjetd0m7hPSAXi LJNSULwH1GMWOk46lsv6MNERGei4sX7VBlpa/LTnA8TSiI8P8qXdBuwaKlvNdSj3 5eTi+NhOqAB5mSUnxwXwoa4bT14Kgl9SHhCQlA+NIRLOSN1VowCyI61M/oWM3Brp cndMVjU/XbRWQMdqxJM9a9tHGktnL2Ssu4xM2icFE5ATSK352y2U0zEbjQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKfAH89IV6/+bIpZsNy46Wd8dRnzMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvcDhBZnowaFhyXzVzaWxtdzNManBaM3gxR2ZNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/TzANBgkqhkiG 9w0BAQsFAAOCAQEAXcqu9V/IyWGm5pn5fmjAyjbzTUWZEUO3WY1/zhxnMcFi0gwG ZR0s+ANQiavHmxv8a30C8uBfxQhMzaWMzpMnKY+4H/JnpWnUB8IwVgpaP93RhRMF ZlDnS3Wj8+/GMo2n+6Eze+MmgfXsz+1Fdvjb1LlBCf0am0rvtZ8Y2AdvQT4TW5PW X1iVwO18mqkjv9YlXdqzZ+HeS9xRH3BFpWMUL5Ng1lyuRkU+5LXPqpYH4xVgo/Xj QG7pwFg/Luqny0qRn6f9luKtr/4UwlvGkDybQdaiiO/Z+yWN4iV3NwYwOh1k+nMQ DN9oNk99YHIDeqB2C9LExWGpmZlO4gl7DRErpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:26 2026 by rpki-client