This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/zdQE3nljteAvytR7FrZorPU0jyc.asa File: zdQE3nljteAvytR7FrZorPU0jyc.asa (raw, json) Hash identifier: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU= Subject key identifier: CD:D4:04:DE:79:63:B5:E0:2F:CA:D4:7B:16:B6:68:AC:F5:34:8F:27 Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019AD0880D0631739DF47B32539B71647958 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/zdQE3nljteAvytR7FrZorPU0jyc.asa Signing time: Sat 29 Nov 2025 16:52:48 +0000 ASPA not before: Sat 29 Nov 2025 16:52:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 47943 Providers: AS: 6424 AS: 35432 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:88:0d:06:31:73:9d:f4:7b:32:53:9b:71:64:79:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Nov 29 16:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cdd404de7963b5e02fcad47b16b668acf5348f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:09:9b:47:96:32:7a:40:ab:2b:75:5c:a3: fa:41:de:24:81:6a:5d:1b:19:b3:08:81:00:33:f4: 1c:f8:3a:2e:a3:79:b6:65:fe:3e:8c:33:48:57:45: dd:ea:83:61:36:66:c8:ec:26:15:b7:61:46:84:11: 4d:71:43:24:42:f0:58:ea:e7:f9:c0:bb:2f:41:87: 19:fa:53:dd:e2:bf:3e:84:2a:56:bb:53:df:5d:d4: bf:be:b5:54:2d:53:38:c5:bd:7d:31:60:cb:a6:00: c5:af:5b:c0:c0:ed:59:64:26:ba:a3:2f:79:61:5e: 1d:36:67:85:da:7b:75:b2:d3:08:95:0d:b4:77:c0: d7:4f:39:a4:d2:f9:2b:ca:e1:74:2b:17:c1:c9:10: bc:34:a0:33:a0:a4:8e:15:1b:66:b9:9f:99:25:c8: 33:11:71:52:bc:05:83:7d:7e:84:78:91:cd:40:9e: 31:61:e5:14:3d:7b:15:e0:f8:2d:ae:4d:ac:9d:94: a0:18:4f:6e:cd:64:95:f5:57:f4:d8:26:f2:83:89: d8:ee:16:d2:d6:2f:79:35:13:5b:9b:8a:fb:b3:19: b4:d6:b2:1c:79:c3:05:cb:91:98:42:62:2e:bc:8d: f8:5d:c0:ac:39:31:7c:f7:f5:d4:a0:58:6a:fb:f1: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D4:04:DE:79:63:B5:E0:2F:CA:D4:7B:16:B6:68:AC:F5:34:8F:27 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/zdQE3nljteAvytR7FrZorPU0jyc.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47943 Signature Algorithm: sha256WithRSAEncryption 47:d6:cd:37:9e:d3:5d:8c:7b:12:c1:fc:1e:5a:b3:91:47:d5: 46:b3:e8:fa:7f:f2:3d:18:c7:89:78:fe:6c:f1:2e:8c:69:87: 0f:17:eb:51:23:7d:f0:9c:3a:17:e4:ba:14:36:96:b9:98:0e: ca:0c:d1:ce:fb:ad:98:31:b9:9b:ed:df:7c:c4:d8:20:30:f9: d4:fc:1a:86:a9:68:5d:1e:86:8d:43:62:88:46:6d:63:d7:46: 13:1a:8d:d8:d4:98:5a:bc:32:02:a4:27:28:82:55:cf:c1:2c: 20:08:1d:96:a5:08:d6:0d:8f:50:51:db:19:cd:83:5b:3f:32: bb:c4:e2:57:04:ef:fc:1e:cd:7f:36:18:c7:56:b6:a9:cd:96: af:8a:f8:5b:25:eb:c9:0e:b0:25:de:6c:40:5e:91:22:44:c7: 5c:0b:a6:51:ee:32:0b:61:35:12:6c:f4:87:ab:d2:1b:ab:4e: 90:8e:ce:a8:89:83:66:7d:6c:c0:53:cd:ff:d1:a4:5e:db:02: 43:32:05:9e:af:6a:9b:ed:db:3b:89:6f:95:85:fc:b5:ee:13: 05:a5:99:26:c8:f5:4f:85:a6:ca:44:65:b6:5b:2b:09:03:32: 57:15:3c:d8:a5:ff:cb:21:9b:34:ca:ce:f2:ef:1e:f0:ac:5a: d0:c8:d3:03 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrQiA0GMXOd9HsyU5txZHlYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjUxMTI5MTY1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGQ0MDRkZTc5NjNiNWUwMmZjYWQ0N2IxNmI2NjhhY2Y1MzQ4ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIgJm0eWMnpAqyt1XKP6Qd4kgWpd GxmzCIEAM/Qc+Douo3m2Zf4+jDNIV0Xd6oNhNmbI7CYVt2FGhBFNcUMkQvBY6uf5 wLsvQYcZ+lPd4r8+hCpWu1PfXdS/vrVULVM4xb19MWDLpgDFr1vAwO1ZZCa6oy95 YV4dNmeF2nt1stMIlQ20d8DXTzmk0vkryuF0KxfByRC8NKAzoKSOFRtmuZ+ZJcgz EXFSvAWDfX6EeJHNQJ4xYeUUPXsV4Pgtrk2snZSgGE9uzWSV9Vf02Cbyg4nY7hbS 1i95NRNbm4r7sxm01rIcecMFy5GYQmIuvI34XcCsOTF89/XUoFhq+/HdnwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFM3UBN55Y7XgL8rUexa2aKz1NI8nMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvemRRRTNubGp0ZUF2eXRSN0ZyWm9yUFUwanljLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC7RzANBgkqhkiG 9w0BAQsFAAOCAQEAR9bNN57TXYx7EsH8HlqzkUfVRrPo+n/yPRjHiXj+bPEujGmH DxfrUSN98Jw6F+S6FDaWuZgOygzRzvutmDG5m+3ffMTYIDD51PwahqloXR6GjUNi iEZtY9dGExqN2NSYWrwyAqQnKIJVz8EsIAgdlqUI1g2PUFHbGc2DWz8yu8TiVwTv /B7NfzYYx1a2qc2Wr4r4WyXryQ6wJd5sQF6RIkTHXAumUe4yC2E1Emz0h6vSG6tO kI7OqImDZn1swFPN/9GkXtsCQzIFnq9qm+3bO4lvlYX8te4TBaWZJsj1T4WmykRl tlsrCQMyVxU82KX/yyGbNMrO8u8e8Kxa0MjTAw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:26 2025 by rpki-client