This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/xsiB3z_ZUNuT9LADFwk2oVftHEQ.asa File: xsiB3z_ZUNuT9LADFwk2oVftHEQ.asa (raw, json) Hash identifier: nzOu1LkWctsvsqnZutP1IKQ9rVw9QiUwIrmmVgJRers= Subject key identifier: C6:C8:81:DF:3F:D9:50:DB:93:F4:B0:03:17:09:36:A1:57:ED:1C:44 Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Certificate serial: 019BA9C5D8FD3A61AD177D1B29341F700200 Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/xsiB3z_ZUNuT9LADFwk2oVftHEQ.asa Signing time: Sat 10 Jan 2026 21:17:54 +0000 ASPA not before: Sat 10 Jan 2026 21:17:54 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 212123 Providers: AS: 1299 AS: 6939 AS: 21700 AS: 34549 AS: 34854 AS: 34927 AS: 58299 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:c5:d8:fd:3a:61:ad:17:7d:1b:29:34:1f:70:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Validity Not Before: Jan 10 21:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6c881df3fd950db93f4b003170936a157ed1c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:13:18:88:1b:3c:1f:5a:69:7c:c7:07:08: c5:2d:65:00:1c:60:ce:8f:28:0d:a4:06:b6:f4:d3: 3b:69:e8:68:91:2d:70:df:a3:2a:35:be:9c:96:f7: 1e:26:fd:61:52:75:41:d2:e7:16:a5:df:6c:4b:87: aa:77:fa:b6:2b:65:a9:35:fb:9d:b5:a7:73:7e:d5: 93:c2:e0:55:2b:cf:e0:7e:d9:d1:5a:c5:60:e2:3b: d2:58:35:df:5f:2a:1e:8d:ef:a3:31:43:bc:f7:21: ab:96:ac:b0:a9:c8:41:c5:12:02:98:21:3f:03:71: 8e:3f:d4:a2:ce:ef:46:dd:a1:ef:32:08:99:4b:bf: b7:0d:71:a4:67:24:53:7d:80:cb:3b:54:ed:e0:05: f2:23:39:47:df:e3:e0:56:67:6d:8b:9b:3e:fb:19: 2b:ee:85:e5:c7:85:16:17:fd:e7:21:7d:6e:69:c9: 79:f9:58:d2:bb:af:84:a4:ea:9e:a9:1e:d8:21:54: 11:4e:1e:84:24:63:c1:f8:79:af:a8:95:d0:a9:f6: 09:8a:e8:c7:a2:f9:3d:13:5e:28:fb:8f:7c:68:da: 4a:3a:ca:f9:e1:3a:79:02:be:77:63:11:f1:e6:02: 2e:12:29:e5:06:0e:16:fb:e7:7c:3a:4a:a1:00:0f: 55:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:81:DF:3F:D9:50:DB:93:F4:B0:03:17:09:36:A1:57:ED:1C:44 X509v3 Authority Key Identifier: keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/xsiB3z_ZUNuT9LADFwk2oVftHEQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212123 Signature Algorithm: sha256WithRSAEncryption 3c:07:a7:d7:f8:41:6e:d2:2b:c8:9f:27:f4:5d:8c:77:4d:0f: 1f:2d:42:e2:c9:f2:9b:ba:5b:85:a2:97:ed:32:93:34:66:76: 2a:40:e5:79:2b:02:7e:4e:b1:b9:24:bd:b1:02:cb:74:79:36: 44:c6:f1:f0:ee:36:6f:0a:29:86:f7:c0:3e:6a:e0:01:6b:38: 92:89:1e:d3:f5:6d:e4:c3:c8:6e:e2:c7:33:12:39:22:e6:76: 05:23:56:b0:f3:28:25:ee:7e:a0:96:ed:b1:9f:cf:94:4c:2d: 78:d3:a1:fc:95:a7:37:2d:76:34:34:9a:46:eb:b3:c4:96:6a: 09:cd:0b:6a:7e:5b:44:21:2a:01:cf:d3:a4:00:29:a9:04:00: b5:5f:df:ec:9b:4d:c6:d5:0f:98:2b:ba:5d:43:6f:e9:bb:13: 44:8f:ad:7d:59:4a:50:ee:47:92:50:17:8b:14:6a:8d:87:01: f6:5f:60:f0:0e:32:7d:3d:fb:0f:b9:ce:fd:80:44:fc:d1:6c: f5:f5:a3:86:64:32:2b:f0:30:f7:0d:2c:0e:c5:1b:07:ac:ad: 20:59:df:65:d8:2f:c1:c9:b6:34:61:8c:bb:3e:09:38:5b:27: 7f:c0:fa:fc:19:8b:0c:cd:a8:62:b5:29:14:54:56:6f:86:ab: f8:4d:96:b7 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZupxdj9OmGtF30bKTQfcAIAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWYxNGI2N2UwNTFjZmJkNWUxYjFkNTE2OTNkNDQ2ODIz OTI3OTIwHhcNMjYwMTEwMjExNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM4ODFkZjNmZDk1MGRiOTNmNGIwMDMxNzA5MzZhMTU3ZWQxYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMYTGIgbPB9aaXzHBwjFLWUAHGDO jygNpAa29NM7aehokS1w36MqNb6clvceJv1hUnVB0ucWpd9sS4eqd/q2K2WpNfud tadzftWTwuBVK8/gftnRWsVg4jvSWDXfXyoeje+jMUO89yGrlqywqchBxRICmCE/ A3GOP9Sizu9G3aHvMgiZS7+3DXGkZyRTfYDLO1Tt4AXyIzlH3+PgVmdti5s++xkr 7oXlx4UWF/3nIX1uacl5+VjSu6+EpOqeqR7YIVQRTh6EJGPB+HmvqJXQqfYJiujH ovk9E14o+498aNpKOsr54Tp5Ar53YxHx5gIuEinlBg4W++d8OkqhAA9VwwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMbIgd8/2VDbk/SwAxcJNqFX7RxEMB8GA1UdIwQY MBaAFE6vFLZ+BRz71eGx1RaT1EaCOSeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQt YmQ1MTJlZDU4Zjc4LzEveHNpQjN6X1pVTnVUOUxBREZ3azJvVmZ0SEVRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQtYmQ1MTJlZDU4Zjc4 LzEvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8mzANBgkqhkiG 9w0BAQsFAAOCAQEAPAen1/hBbtIryJ8n9F2Md00PHy1C4snym7pbhaKX7TKTNGZ2 KkDleSsCfk6xuSS9sQLLdHk2RMbx8O42bwophvfAPmrgAWs4koke0/Vt5MPIbuLH MxI5IuZ2BSNWsPMoJe5+oJbtsZ/PlEwteNOh/JWnNy12NDSaRuuzxJZqCc0Lan5b RCEqAc/TpAApqQQAtV/f7JtNxtUPmCu6XUNv6bsTRI+tfVlKUO5HklAXixRqjYcB 9l9g8A4yfT37D7nO/YBE/NFs9fWjhmQyK/Aw9w0sDsUbB6ytIFnfZdgvwcm2NGGM uz4JOFsnf8D6/BmLDM2oYrUpFFRWb4ar+E2Wtw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:09 2026 by rpki-client