This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/8TFEeT0ED8cWFIRanZCQuiqs9z4.asa File: 8TFEeT0ED8cWFIRanZCQuiqs9z4.asa (raw, json) Hash identifier: DPNI/t4ezcf9TYreKz9gz+qylmX+2capDQAsVuxnaps= Subject key identifier: F1:31:44:79:3D:04:0F:C7:16:14:84:5A:9D:90:90:BA:2A:AC:F7:3E Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Certificate serial: 019BBD402F723BE98CB04091C0E26BA62756 Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/8TFEeT0ED8cWFIRanZCQuiqs9z4.asa Signing time: Wed 14 Jan 2026 16:04:18 +0000 ASPA not before: Wed 14 Jan 2026 16:04:18 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 44097 Providers: AS: 30972 AS: 34019 AS: 35625 AS: 50628 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:40:2f:72:3b:e9:8c:b0:40:91:c0:e2:6b:a6:27:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d Validity Not Before: Jan 14 16:04:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f13144793d040fc71614845a9d9090ba2aacf73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:a4:4c:5d:23:d7:bf:c1:22:c0:fd:0e:f9: 78:34:a5:15:87:52:ee:3a:e0:75:26:57:b3:a9:06: db:d0:70:5d:fa:b2:f1:91:ee:59:bc:f5:9a:f7:f8: 0e:16:2c:30:8d:d7:2d:69:44:97:80:29:b1:c4:ad: 2d:85:f4:97:bf:93:d4:ee:45:64:ea:af:7c:ac:51: e8:bf:27:9b:a5:24:30:54:58:34:93:2b:1b:15:8c: a5:0e:67:a0:e7:71:0a:bf:28:40:a5:84:5d:7c:5d: 1f:70:72:52:48:d0:9e:23:69:08:98:13:4c:d8:6f: da:36:9a:58:13:49:3b:02:0b:05:67:b5:a9:94:02: 84:a8:d8:94:7a:85:51:19:ee:35:45:78:ea:4a:4e: 51:99:f1:04:cf:e1:d6:db:79:34:87:5f:28:59:a5: dc:93:6a:9a:28:0a:c9:c7:e4:75:5f:3e:bc:e4:30: 4c:db:7e:97:65:6a:d3:fc:43:eb:ef:42:d6:ed:5e: 82:66:4b:10:16:de:41:b5:fb:51:06:bf:db:38:4e: 28:f8:21:d7:cf:20:c5:5c:3f:a4:85:20:61:9e:2e: 83:de:ea:fc:e4:92:04:0e:9f:32:2a:c1:0f:e6:24: 1b:03:24:69:7a:bf:a8:a3:fe:f6:46:7a:f1:46:84: a7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:31:44:79:3D:04:0F:C7:16:14:84:5A:9D:90:90:BA:2A:AC:F7:3E X509v3 Authority Key Identifier: keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/8TFEeT0ED8cWFIRanZCQuiqs9z4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44097 Signature Algorithm: sha256WithRSAEncryption 9d:a5:ad:6c:33:f2:eb:18:86:a5:5c:a8:2d:68:11:9d:f4:85: 41:bb:ea:d6:77:87:06:37:2a:63:ea:f3:b1:9f:81:30:35:5c: b2:8b:68:62:52:65:6f:a1:9c:8a:78:60:ff:62:41:31:06:8f: 5d:47:f1:10:9c:2c:44:cf:f8:e2:22:a4:2c:dc:29:ce:8a:53: 64:35:b7:40:a6:b4:0e:8b:32:15:02:d2:a7:30:cd:05:8a:6d: 77:03:06:15:51:4e:bd:52:35:68:6e:b5:1e:e7:22:86:4c:b3: f2:d5:12:0d:1a:91:16:0a:1e:1e:72:c8:e3:23:b9:c2:34:ba: d5:dc:c9:fb:1a:66:42:e3:6d:94:bc:ef:a1:eb:09:7a:53:ad: 48:ed:5b:5d:bd:9a:18:36:32:ab:8e:70:38:62:17:1d:f3:54: ab:d5:6c:77:50:ef:c2:a6:6c:be:a7:5e:b0:49:7a:0b:10:04: ae:1a:9a:2b:bc:23:c9:6b:dd:19:a8:60:55:0c:92:8b:1b:11: f2:61:a0:aa:fa:66:26:75:15:ce:d7:5f:5b:d4:66:13:79:3f: 1e:5d:27:63:f8:8f:a9:71:a3:c2:30:f7:af:de:2f:41:ad:e1: 83:65:25:79:61:0c:f6:cc:5f:d9:b2:b3:51:c7:dc:8d:c8:d0: e5:31:62:80 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZu9QC9yO+mMsECRwOJrpidWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YTQyZDI2MGQ1ZWNkYzJmYTJiMGI1ZGJmNjAzYjkwZDcx NTQ0NGQwHhcNMjYwMTE0MTYwNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTMxNDQ3OTNkMDQwZmM3MTYxNDg0NWE5ZDkwOTBiYTJhYWNmNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zOkTF0j17/BIsD9Dvl4NKUVh1Lu OuB1JlezqQbb0HBd+rLxke5ZvPWa9/gOFiwwjdctaUSXgCmxxK0thfSXv5PU7kVk 6q98rFHovyebpSQwVFg0kysbFYylDmeg53EKvyhApYRdfF0fcHJSSNCeI2kImBNM 2G/aNppYE0k7AgsFZ7WplAKEqNiUeoVRGe41RXjqSk5RmfEEz+HW23k0h18oWaXc k2qaKArJx+R1Xz685DBM236XZWrT/EPr70LW7V6CZksQFt5BtftRBr/bOE4o+CHX zyDFXD+khSBhni6D3ur85JIEDp8yKsEP5iQbAyRper+oo/72RnrxRoSnkwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFPExRHk9BA/HFhSEWp2QkLoqrPc+MB8GA1UdIwQY MBaAFKWkLSYNXs3C+isLXb9gO5DXFURNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2Qt ZjBkMmI5NDNjYjUzLzEvOFRGRWVUMEVEOGNXRklSYW5aQ1F1aXFzOXo0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9jMzkyZDctMGE5OS00MWM5LWEyY2QtZjBkMmI5NDNjYjUz LzEvcGFRdEpnMWV6Y0w2S3d0ZHYyQTdrTmNWUkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCsQTANBgkqhkiG 9w0BAQsFAAOCAQEAnaWtbDPy6xiGpVyoLWgRnfSFQbvq1neHBjcqY+rzsZ+BMDVc sotoYlJlb6Gcinhg/2JBMQaPXUfxEJwsRM/44iKkLNwpzopTZDW3QKa0DosyFQLS pzDNBYptdwMGFVFOvVI1aG61Hucihkyz8tUSDRqRFgoeHnLI4yO5wjS61dzJ+xpm QuNtlLzvoesJelOtSO1bXb2aGDYyq45wOGIXHfNUq9Vsd1DvwqZsvqdesEl6CxAE rhqaK7wjyWvdGahgVQySixsR8mGgqvpmJnUVztdfW9RmE3k/Hl0nY/iPqXGjwjD3 r94vQa3hg2UleWEM9sxf2bKzUcfcjcjQ5TFigA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:36 2026 by rpki-client