This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/fU0ZQGxEIbYd-Y96okGNTpozeFs.asa File: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (raw, json) Hash identifier: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII= Subject key identifier: 7D:4D:19:40:6C:44:21:B6:1D:F9:8F:7A:A2:41:8D:4E:9A:33:78:5B Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019AD0880BE79D346DA028ECF1990C5C18C6 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/fU0ZQGxEIbYd-Y96okGNTpozeFs.asa Signing time: Sat 29 Nov 2025 16:52:48 +0000 ASPA not before: Sat 29 Nov 2025 16:52:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 43652 Providers: AS: 2860 AS: 6424 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:88:0b:e7:9d:34:6d:a0:28:ec:f1:99:0c:5c:18:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Nov 29 16:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d4d19406c4421b61df98f7aa2418d4e9a33785b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:ec:62:b6:87:b5:a0:e2:a4:d3:0f:ae:d3: 3e:73:7a:c8:ee:2a:e1:b0:7a:25:1a:b7:58:75:de: 3e:3c:b3:05:a3:43:9b:3c:26:f1:72:5a:c5:64:09: 66:7c:db:7d:15:e5:72:c1:83:ed:1d:fc:7a:fc:cd: 5e:c8:a3:33:09:24:70:88:af:8e:44:e5:0f:57:11: fb:7c:ac:41:dc:38:6f:a2:2c:21:8f:b1:b2:82:3e: 8a:37:65:bf:b2:3d:47:67:ff:d4:94:cf:7e:8a:76: d4:27:6e:d7:c4:9c:57:dc:2a:ac:31:20:0c:db:4e: 23:34:2a:b2:ee:98:85:ae:c9:16:01:cd:ef:5c:6a: 9b:5c:4d:fc:23:21:7f:14:17:ac:10:64:f7:6a:06: 5e:90:ba:56:b5:ce:49:3c:64:74:96:6f:a8:65:59: a2:11:bc:af:05:07:44:77:04:66:24:27:b9:08:81: ba:9c:13:a8:f4:34:76:3f:67:3a:5b:85:c6:cb:0a: 60:d4:63:f4:fe:c2:92:58:c8:f3:e5:3a:d0:ee:b4: 33:f3:8a:c3:2b:04:51:c9:7c:fe:7d:34:d9:fc:8c: d7:14:62:59:24:ac:3f:07:a0:bb:07:c2:de:b2:2c: fd:2e:87:31:54:1d:b6:63:10:0f:6b:d6:d1:0d:32: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4D:19:40:6C:44:21:B6:1D:F9:8F:7A:A2:41:8D:4E:9A:33:78:5B X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/fU0ZQGxEIbYd-Y96okGNTpozeFs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 43652 Signature Algorithm: sha256WithRSAEncryption 5f:31:7c:1d:45:0a:f0:cf:3d:a8:10:9c:3c:62:7c:8c:40:d0: 23:f3:c3:5f:ee:d5:ea:21:45:fc:b4:ec:69:ab:7a:7e:3c:22: b7:6d:ed:a6:32:c9:52:f8:ad:b7:8a:3a:2b:8e:c7:32:99:a8: e4:85:02:6d:84:bd:eb:20:c8:24:d0:b6:91:df:5d:86:0d:f6: 45:a6:28:60:8b:a3:46:64:88:ad:96:66:67:99:c8:5a:ba:fa: 85:7f:f5:08:bf:f2:95:fa:4c:73:81:f4:e1:e5:4b:5d:c0:19: 8a:ef:27:49:c5:03:26:b0:38:5a:28:ac:06:2d:94:55:0d:b7: 1e:7b:73:bc:a4:cf:f2:49:ca:2c:ec:6e:48:05:0d:39:d8:ac: d8:b3:2c:01:e5:5e:86:f3:05:76:0f:98:89:87:1b:1c:33:26: 86:1e:38:30:e9:72:6b:8f:78:21:cb:64:d5:19:54:3e:f7:e1: b7:84:24:cb:69:c6:aa:5d:e4:c3:76:64:6c:12:dd:e3:fa:03: 37:3e:fb:de:47:b8:b8:07:ed:f0:15:ad:74:96:0a:cc:ef:ed: 86:20:fb:b9:16:39:c5:c8:f7:28:cb:f0:02:77:42:ee:b6:6d: 0e:bb:cc:02:4d:5f:9e:52:60:55:fc:47:e4:af:d1:41:18:63: b6:15:44:48 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrQiAvnnTRtoCjs8ZkMXBjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjUxMTI5MTY1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDRkMTk0MDZjNDQyMWI2MWRmOThmN2FhMjQxOGQ0ZTlhMzM3ODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz/sYraHtaDipNMPrtM+c3rI7irh sHolGrdYdd4+PLMFo0ObPCbxclrFZAlmfNt9FeVywYPtHfx6/M1eyKMzCSRwiK+O ROUPVxH7fKxB3Dhvoiwhj7Gygj6KN2W/sj1HZ//UlM9+inbUJ27XxJxX3CqsMSAM 204jNCqy7piFrskWAc3vXGqbXE38IyF/FBesEGT3agZekLpWtc5JPGR0lm+oZVmi EbyvBQdEdwRmJCe5CIG6nBOo9DR2P2c6W4XGywpg1GP0/sKSWMjz5TrQ7rQz84rD KwRRyXz+fTTZ/IzXFGJZJKw/B6C7B8Lesiz9LocxVB22YxAPa9bRDTK91wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFH1NGUBsRCG2HfmPeqJBjU6aM3hbMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvZlUwWlFHeEVJYllkLVk5Nm9rR05UcG96ZUZzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqhDANBgkqhkiG 9w0BAQsFAAOCAQEAXzF8HUUK8M89qBCcPGJ8jEDQI/PDX+7V6iFF/LTsaat6fjwi t23tpjLJUvitt4o6K47HMpmo5IUCbYS96yDIJNC2kd9dhg32RaYoYIujRmSIrZZm Z5nIWrr6hX/1CL/ylfpMc4H04eVLXcAZiu8nScUDJrA4WiisBi2UVQ23HntzvKTP 8knKLOxuSAUNOdis2LMsAeVehvMFdg+YiYcbHDMmhh44MOlya494Ictk1RlUPvfh t4Qky2nGql3kw3ZkbBLd4/oDNz773ke4uAft8BWtdJYKzO/thiD7uRY5xcj3KMvw AndC7rZtDrvMAk1fnlJgVfxH5K/RQRhjthVESA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:24 2025 by rpki-client