This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/1Z24fBNx8rmTRNvnUUAzUhBybME.asa File: 1Z24fBNx8rmTRNvnUUAzUhBybME.asa (raw, json) Hash identifier: 6NIi4gd7wrkT8Y6NiYPBaoHXBemK5o4Vj6X3g2v2FgM= Subject key identifier: D5:9D:B8:7C:13:71:F2:B9:93:44:DB:E7:51:40:33:52:10:72:6C:C1 Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Certificate serial: 019AEF3269DC6ACFC012B72B20E70F28CE1A Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/1Z24fBNx8rmTRNvnUUAzUhBybME.asa Signing time: Fri 05 Dec 2025 15:47:29 +0000 ASPA not before: Fri 05 Dec 2025 15:47:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 200240 Providers: AS: 42831 AS: 59796 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:32:69:dc:6a:cf:c0:12:b7:2b:20:e7:0f:28:ce:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Validity Not Before: Dec 5 15:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d59db87c1371f2b99344dbe75140335210726cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:c3:18:7a:e4:fd:eb:8b:95:d4:e8:a6:67: 5f:38:dc:55:1f:ee:f3:f2:39:64:6a:9c:9d:a2:2e: 5a:35:65:7e:23:1f:ef:8c:74:d9:d5:8a:4e:00:97: b7:0f:2c:b7:a3:dc:fa:82:90:b7:4d:77:30:5b:fa: 31:b3:cc:a4:f9:da:cc:d0:b5:f9:60:3e:8e:eb:3b: ca:84:79:f3:c6:6b:df:09:61:25:71:a9:ef:bd:80: ac:52:b2:60:b8:32:e2:8d:8f:b2:bc:ff:9d:6b:36: 0e:7f:9c:87:d5:f2:bd:9a:cd:c1:5e:92:c6:78:dc: b4:34:fa:9e:92:96:df:f7:e9:c6:96:a9:a1:ee:a6: 85:b1:b2:36:69:67:3c:21:2b:f1:fb:5f:73:0b:e5: da:3c:85:1b:2b:16:f5:22:84:6e:6d:66:3a:7d:6f: 7b:3d:c5:5a:55:fc:b8:08:60:d2:11:f1:22:cc:b3: 18:f4:a7:ec:cd:02:8c:2d:f6:bb:71:3b:dc:e9:88: 26:a2:98:02:d3:99:53:d7:f2:53:51:2c:23:ec:1d: 51:5d:ad:14:23:84:74:8a:ee:ef:e3:b3:63:a8:bd: 93:49:2d:6d:c1:3b:04:6c:d1:49:51:22:23:8e:15: 1b:b0:43:5a:7a:34:85:4a:38:f8:4a:81:8e:22:c3: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9D:B8:7C:13:71:F2:B9:93:44:DB:E7:51:40:33:52:10:72:6C:C1 X509v3 Authority Key Identifier: keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/1Z24fBNx8rmTRNvnUUAzUhBybME.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200240 Signature Algorithm: sha256WithRSAEncryption 4b:0a:99:fb:3a:ca:50:e9:e7:8f:ab:8d:c8:6a:fa:45:2b:c0: 06:0a:30:a3:b7:67:6a:b0:b4:bb:7f:3d:7d:05:39:cb:40:18: 14:a7:83:96:05:68:fd:fd:61:eb:a5:ea:52:12:40:be:57:68: 14:6e:de:83:59:df:c2:f3:69:f9:ab:72:cf:a7:4b:49:2f:b3: 65:31:ee:2f:6c:fd:d2:aa:4f:8e:7b:a9:59:9b:3e:42:00:b8: 3e:2d:07:24:0e:20:32:85:7d:31:1b:92:ea:de:c4:cf:d6:f7: aa:f3:95:9a:b7:fb:49:c7:a1:33:3e:83:62:59:ae:4d:a0:b9: 90:65:86:23:42:50:83:6d:53:09:c4:37:33:d2:6d:de:36:db: 4b:14:4e:e0:90:dd:f6:7e:6c:31:fd:4e:f4:96:a9:c1:f8:cd: 1b:2e:0a:08:10:9c:d6:68:88:7c:b5:2d:62:94:70:eb:39:e2: d5:bb:24:04:ce:2c:f2:2a:25:ca:f3:ac:dc:d4:70:85:b8:98: 22:82:43:47:eb:55:17:14:0d:7c:98:26:18:e9:5a:73:7c:c4: 9b:b9:71:05:01:cb:fb:43:3f:06:d5:5a:29:04:e1:88:8e:d3: 84:29:43:55:e3:d0:d1:65:98:b1:c7:42:af:7b:d0:ec:6d:02: 66:9a:2a:f1 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrvMmncas/AErcrIOcPKM4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0 NmQ0N2YwHhcNMjUxMjA1MTU0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTlkYjg3YzEzNzFmMmI5OTM0NGRiZTc1MTQwMzM1MjEwNzI2Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXDGHrk/euLldTopmdfONxVH+7z 8jlkapydoi5aNWV+Ix/vjHTZ1YpOAJe3Dyy3o9z6gpC3TXcwW/oxs8yk+drM0LX5 YD6O6zvKhHnzxmvfCWElcanvvYCsUrJguDLijY+yvP+dazYOf5yH1fK9ms3BXpLG eNy0NPqekpbf9+nGlqmh7qaFsbI2aWc8ISvx+19zC+XaPIUbKxb1IoRubWY6fW97 PcVaVfy4CGDSEfEizLMY9KfszQKMLfa7cTvc6YgmopgC05lT1/JTUSwj7B1RXa0U I4R0iu7v47NjqL2TSS1twTsEbNFJUSIjjhUbsENaejSFSjj4SoGOIsPPeQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNWduHwTcfK5k0Tb51FAM1IQcmzBMB8GA1UdIwQY MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt NDkxZmU3YWNjMWE5LzEvMVoyNGZCTng4cm1UUk52blVVQXpVaEJ5Yk1FLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5 LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOMDANBgkqhkiG 9w0BAQsFAAOCAQEASwqZ+zrKUOnnj6uNyGr6RSvABgowo7dnarC0u389fQU5y0AY FKeDlgVo/f1h66XqUhJAvldoFG7eg1nfwvNp+atyz6dLSS+zZTHuL2z90qpPjnup WZs+QgC4Pi0HJA4gMoV9MRuS6t7Ez9b3qvOVmrf7ScehMz6DYlmuTaC5kGWGI0JQ g21TCcQ3M9Jt3jbbSxRO4JDd9n5sMf1O9JapwfjNGy4KCBCc1miIfLUtYpRw6zni 1bskBM4s8iolyvOs3NRwhbiYIoJDR+tVFxQNfJgmGOlac3zEm7lxBQHL+0M/BtVa KQThiI7ThClDVePQ0WWYscdCr3vQ7G0CZpoq8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:25 2025 by rpki-client