This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa File: CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa (raw, json) Hash identifier: BYtVtXvNLu7yhVLJxNiUtZ/vkS0B93JK13XOxYFj8W8= Subject key identifier: 0A:70:0E:81:6D:2F:D8:51:E1:63:BC:46:E4:49:35:E9:6E:B5:5F:0A Certificate issuer: /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961 Certificate serial: 019ADF9580579923E59C66E22AFFE3FA1ED5 Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa Signing time: Tue 02 Dec 2025 15:01:48 +0000 ASPA not before: Tue 02 Dec 2025 15:01:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 207080 Providers: AS: 1299 AS: 3170 AS: 6939 AS: 8943 AS: 13335 AS: 42615 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:95:80:57:99:23:e5:9c:66:e2:2a:ff:e3:fa:1e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961 Validity Not Before: Dec 2 15:01:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a700e816d2fd851e163bc46e44935e96eb55f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b5:6b:ae:1f:98:ae:bb:a7:0f:58:ab:0b:e2: 1c:89:67:2f:6d:79:b3:6c:c4:19:58:b7:b2:2e:e4: 5b:0f:f3:d0:06:39:b4:3d:8c:a5:27:50:59:2c:4b: bd:e6:fc:09:40:7c:27:70:93:42:bb:4a:f0:0c:8e: 85:56:2f:8a:40:e1:3c:8a:13:88:7f:a9:1d:14:be: 25:64:ff:16:37:84:01:78:64:a8:81:68:63:a9:19: e9:6b:1d:a3:91:d7:6f:11:ae:7f:0e:9c:a1:91:c0: a7:bc:28:27:df:ee:14:75:64:e4:a0:01:77:e3:d3: 71:95:71:9f:cb:80:5f:1c:7d:67:52:40:e6:86:f6: 61:af:4d:49:8f:d1:96:a9:6a:70:11:a4:36:58:c3: 05:f6:0b:9e:48:e8:20:81:62:55:f9:e3:88:de:ac: a9:c9:75:cb:6e:90:4a:96:f5:14:52:50:a5:a3:25: d7:fa:9d:39:88:a8:3e:cf:a2:5c:84:be:9f:cf:fd: 20:db:a7:c5:d7:b6:80:ad:3e:ce:b2:5c:09:77:94: c3:fd:0d:0f:df:97:b0:bb:90:db:5f:b1:4f:b6:ee: 5f:a8:c7:a9:f7:cb:a6:1d:a9:6e:db:43:32:67:ed: fc:44:8b:21:7d:d3:c6:59:77:ac:a2:33:2c:b4:a9: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:70:0E:81:6D:2F:D8:51:E1:63:BC:46:E4:49:35:E9:6E:B5:5F:0A X509v3 Authority Key Identifier: keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207080 Signature Algorithm: sha256WithRSAEncryption 8e:5f:51:56:27:24:8f:88:40:71:59:c7:d5:55:e9:7e:ca:c3: c7:b3:4f:6f:a1:75:eb:a1:3c:54:d6:a9:dd:5e:be:5f:d5:8b: 93:1f:a3:21:86:f1:ec:f4:14:91:f1:71:d2:37:e0:c4:48:91: a0:1b:59:6c:de:fd:92:fd:7e:48:a9:f6:63:a1:64:61:94:7b: b7:79:37:01:d8:a9:26:ec:6e:81:7c:2d:5e:39:36:50:a9:6a: 1f:bd:18:ad:90:e2:bd:9c:99:b3:c1:6f:b8:20:8b:48:dd:f6: 09:34:cc:13:bb:15:c6:fa:df:03:28:fc:22:aa:68:07:af:dc: 8a:e2:cd:ee:ee:1d:32:65:d3:a7:34:76:69:94:cb:6a:9e:c0: b6:9c:6c:87:a9:50:2c:30:e8:b0:da:a9:19:b3:26:94:60:4a: 16:de:6c:f4:aa:cb:0e:f8:ce:a1:8b:e2:63:ae:e2:e1:d4:13: 20:58:8e:6f:19:2b:c1:c1:9e:32:33:5a:d4:4a:f9:4c:e4:ce: 08:9c:df:e6:5d:36:1e:21:2e:6a:45:d7:68:3e:5d:54:e8:fc: d3:13:ab:34:06:9e:db:87:33:35:03:e0:e7:9a:80:10:e8:79: 67:ee:5d:91:3e:06:8d:ba:bd:48:ee:0e:1d:71:23:ba:ce:da: 33:c1:a1:df -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrflYBXmSPlnGbiKv/j+h7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OTFmZmM4NjU5ZTJlNjNhNmRlY2VjN2Q2ZjM2ZDYwYjY2 NDA5NjEwHhcNMjUxMjAyMTUwMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTcwMGU4MTZkMmZkODUxZTE2M2JjNDZlNDQ5MzVlOTZlYjU1ZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bVrrh+YrrunD1irC+IciWcvbXmz bMQZWLeyLuRbD/PQBjm0PYylJ1BZLEu95vwJQHwncJNCu0rwDI6FVi+KQOE8ihOI f6kdFL4lZP8WN4QBeGSogWhjqRnpax2jkddvEa5/DpyhkcCnvCgn3+4UdWTkoAF3 49NxlXGfy4BfHH1nUkDmhvZhr01Jj9GWqWpwEaQ2WMMF9gueSOgggWJV+eOI3qyp yXXLbpBKlvUUUlCloyXX+p05iKg+z6JchL6fz/0g26fF17aArT7OslwJd5TD/Q0P 35ewu5DbX7FPtu5fqMep98umHalu20MyZ+38RIshfdPGWXesojMstKnhVQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFApwDoFtL9hR4WO8RuRJNelutV8KMB8GA1UdIwQY MBaAFLaR/8hlni5jpt7Ox9bzbWC2ZAlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHBIX3lHV2VMbU9tM3M3SDF2TnRZTFprQ1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNGM0ZDEtODYzZi00NGMzLTg2YWQt OWEyOTRjNzBjNzBlLzEvQ25BT2dXMHYyRkhoWTd4RzVFazE2VzYxWHdvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yNGM0ZDEtODYzZi00NGMzLTg2YWQtOWEyOTRjNzBjNzBl LzEvdHBIX3lHV2VMbU9tM3M3SDF2TnRZTFprQ1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMo6DANBgkqhkiG 9w0BAQsFAAOCAQEAjl9RVickj4hAcVnH1VXpfsrDx7NPb6F166E8VNap3V6+X9WL kx+jIYbx7PQUkfFx0jfgxEiRoBtZbN79kv1+SKn2Y6FkYZR7t3k3AdipJuxugXwt Xjk2UKlqH70YrZDivZyZs8FvuCCLSN32CTTME7sVxvrfAyj8IqpoB6/ciuLN7u4d MmXTpzR2aZTLap7Atpxsh6lQLDDosNqpGbMmlGBKFt5s9KrLDvjOoYviY67i4dQT IFiObxkrwcGeMjNa1Er5TOTOCJzf5l02HiEuakXXaD5dVOj80xOrNAae24czNQPg 55qAEOh5Z+5dkT4Gjbq9SO4OHXEjus7aM8Gh3w== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:28 2025 by rpki-client