This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa File: 3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa (raw, json) Hash identifier: +n8cfnczvffDxczQzCZSc5S0iS+H58G3zef9yb8kOjI= Subject key identifier: DE:1E:2E:35:0F:9E:1D:5D:B9:4C:F4:F7:FC:4E:65:FF:20:77:8D:CB Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Certificate serial: 019AC0FAD802FC257E7F387B6067C3E837C3 Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa Signing time: Wed 26 Nov 2025 16:24:16 +0000 ASPA not before: Wed 26 Nov 2025 16:24:16 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 209718 Providers: AS: 34927 AS: 209022 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:fa:d8:02:fc:25:7e:7f:38:7b:60:67:c3:e8:37:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Validity Not Before: Nov 26 16:24:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de1e2e350f9e1d5db94cf4f7fc4e65ff20778dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:8e:ee:9e:93:7b:c5:db:06:36:93:77:a2: 68:b9:58:5d:92:35:14:2e:37:53:fa:93:da:ac:7f: fe:85:86:e3:d5:8c:da:d5:76:38:e8:70:9e:ad:4e: 0f:71:49:8c:5d:0e:2b:6a:47:b3:21:19:ae:81:79: d2:4f:41:95:f3:7a:1f:a7:a2:7c:09:7b:ea:cf:a3: e8:ce:13:99:be:a6:7e:ee:6b:68:40:7c:38:9b:0b: 42:ac:15:e0:1e:5b:19:17:a8:fe:33:d0:e0:ee:9a: c4:7b:2b:36:f2:d6:4c:64:06:d8:1d:aa:88:be:50: 64:89:68:dc:8c:8a:39:9b:02:ad:06:15:6e:8d:59: 86:16:c8:41:76:be:97:f7:e2:38:7c:47:f1:4b:ed: 46:1d:4e:94:4c:47:25:b1:1e:c3:8d:f2:58:1b:04: a3:c8:d6:7b:3f:09:68:4a:79:bc:62:2b:f5:6b:4c: 07:92:fe:a4:05:f6:67:86:03:dc:aa:0d:1a:bf:47: 91:d1:a1:f4:02:47:53:0e:25:8e:ca:3c:f9:05:54: 20:8b:79:e5:31:1e:7f:f6:c5:80:02:93:3a:48:94: 26:85:3d:64:e1:ca:07:40:dd:2c:15:b7:e0:e9:be: d1:ff:e2:b0:03:a7:8d:e1:37:a2:a1:b3:45:dd:42: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1E:2E:35:0F:9E:1D:5D:B9:4C:F4:F7:FC:4E:65:FF:20:77:8D:CB X509v3 Authority Key Identifier: keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209718 Signature Algorithm: sha256WithRSAEncryption 37:d0:c9:ba:a2:59:25:06:5f:da:69:d3:da:44:93:52:7a:74: 40:29:1c:89:98:e5:5a:bf:02:4c:04:40:c3:07:78:89:5e:9d: 7f:7f:b7:50:ad:aa:c4:43:13:ad:45:dd:b4:25:9a:9d:bd:fb: 39:e8:ab:9b:a0:db:7f:22:3b:45:51:b9:1d:48:e4:9c:c7:4d: 09:30:46:a6:bc:26:73:1a:f0:30:50:a6:f0:f5:75:68:f6:de: 75:0c:a1:78:2e:47:51:8b:96:7b:01:91:12:b6:a2:f1:aa:be: af:65:84:56:31:ee:e5:14:82:38:41:65:03:a5:86:55:5a:20: 24:af:e5:48:cf:9a:09:f8:8f:12:3c:ad:be:39:af:4a:25:a6: 35:9f:4c:8a:89:23:c1:a7:4b:0a:6b:00:a5:f9:75:17:b9:9b: 1b:f7:f7:9e:b3:db:f5:a4:e8:8b:db:ca:fe:8f:f7:d0:58:73: 54:32:1a:fd:31:8c:a1:e2:b4:a7:53:79:1e:67:9f:a6:c5:3d: 02:2d:1d:08:09:b2:f0:49:6d:cc:ab:15:7a:c5:8e:54:69:be: 22:ea:3d:9a:4f:46:9e:9f:a2:ec:fa:e7:0e:91:82:ae:82:4b: 0a:d0:e1:74:ef:25:0c:26:23:f1:fd:fc:0f:e4:e0:9d:91:34: 0f:41:85:14 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrA+tgC/CV+fzh7YGfD6DfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWYxNGI2N2UwNTFjZmJkNWUxYjFkNTE2OTNkNDQ2ODIz OTI3OTIwHhcNMjUxMTI2MTYyNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTFlMmUzNTBmOWUxZDVkYjk0Y2Y0ZjdmYzRlNjVmZjIwNzc4ZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi2O7p6Te8XbBjaTd6JouVhdkjUU LjdT+pParH/+hYbj1Yza1XY46HCerU4PcUmMXQ4rakezIRmugXnST0GV83ofp6J8 CXvqz6PozhOZvqZ+7mtoQHw4mwtCrBXgHlsZF6j+M9Dg7prEeys28tZMZAbYHaqI vlBkiWjcjIo5mwKtBhVujVmGFshBdr6X9+I4fEfxS+1GHU6UTEclsR7DjfJYGwSj yNZ7PwloSnm8Yiv1a0wHkv6kBfZnhgPcqg0av0eR0aH0AkdTDiWOyjz5BVQgi3nl MR5/9sWAApM6SJQmhT1k4coHQN0sFbfg6b7R/+KwA6eN4TeiobNF3UKb9QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFN4eLjUPnh1duUz09/xOZf8gd43LMB8GA1UdIwQY MBaAFE6vFLZ+BRz71eGx1RaT1EaCOSeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQt YmQ1MTJlZDU4Zjc4LzEvM2g0dU5RLWVIVjI1VFBUM19FNWxfeUIzamNzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQtYmQ1MTJlZDU4Zjc4 LzEvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzNjANBgkqhkiG 9w0BAQsFAAOCAQEAN9DJuqJZJQZf2mnT2kSTUnp0QCkciZjlWr8CTARAwwd4iV6d f3+3UK2qxEMTrUXdtCWanb37Oeirm6DbfyI7RVG5HUjknMdNCTBGprwmcxrwMFCm 8PV1aPbedQyheC5HUYuWewGRErai8aq+r2WEVjHu5RSCOEFlA6WGVVogJK/lSM+a CfiPEjytvjmvSiWmNZ9MiokjwadLCmsApfl1F7mbG/f3nrPb9aToi9vK/o/30Fhz VDIa/TGMoeK0p1N5HmefpsU9Ai0dCAmy8EltzKsVesWOVGm+Iuo9mk9Gnp+i7Prn DpGCroJLCtDhdO8lDCYj8f38D+TgnZE0D0GFFA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:26 2025 by rpki-client