This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/ptGbn71J9pVud0KZnCN4BZ7A5Cw.asa File: ptGbn71J9pVud0KZnCN4BZ7A5Cw.asa (raw, json) Hash identifier: pzMvT4iTgbAAaekD2VCp14981Bi58N/N4mJV+qsvhF4= Subject key identifier: A6:D1:9B:9F:BD:49:F6:95:6E:77:42:99:9C:23:78:05:9E:C0:E4:2C Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Certificate serial: 019B78884E7DA76DE0C7416F769E0525193A Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/ptGbn71J9pVud0KZnCN4BZ7A5Cw.asa Signing time: Thu 01 Jan 2026 07:49:17 +0000 ASPA not before: Thu 01 Jan 2026 07:49:17 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 200240 Providers: AS: 42831 AS: 59796 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:88:4e:7d:a7:6d:e0:c7:41:6f:76:9e:05:25:19:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f Validity Not Before: Jan 1 07:49:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6d19b9fbd49f6956e7742999c2378059ec0e42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:ae:31:ca:e0:8d:04:26:69:26:95:58:1d: 3f:3d:0b:c5:98:4d:54:56:ef:14:02:5b:03:a1:e1: 7f:01:bb:a0:29:d0:25:8b:40:fd:67:24:83:42:4f: a5:3a:f8:61:e7:ee:c7:4f:bf:8d:da:b2:4a:4a:c7: 95:3f:40:fb:bc:cd:e6:69:be:72:30:d9:9b:52:e2: 1b:ef:b4:f9:9d:dc:98:b5:3a:87:db:ed:38:3f:c3: 64:f3:16:10:60:30:a1:59:06:14:d4:42:1e:fd:e6: 46:41:b4:cb:3b:9f:e0:ee:32:ec:13:ca:f5:3a:a3: 38:fb:84:ea:ef:85:d8:c8:51:59:30:f9:0e:5d:1b: 24:91:2b:8c:31:8d:98:c3:bf:a0:b8:1b:bb:1f:e3: 3f:a2:fe:a7:d1:19:ab:a2:b6:76:20:17:a6:4f:ae: 5f:9b:8f:d6:dc:40:3c:1b:ca:43:c8:df:32:c6:81: 1f:18:e2:eb:ac:47:da:01:64:9a:d1:73:d8:25:fa: 9d:41:c2:cf:73:ef:02:08:a4:3c:e8:73:9e:02:4e: 74:46:76:1a:29:40:49:59:8e:d0:25:ce:4f:9b:77: 30:04:f9:12:03:43:87:09:15:5e:63:1b:48:0a:4d: cb:00:cf:2b:5a:27:4b:83:6f:de:4b:b2:ae:2a:a4: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D1:9B:9F:BD:49:F6:95:6E:77:42:99:9C:23:78:05:9E:C0:E4:2C X509v3 Authority Key Identifier: keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/ptGbn71J9pVud0KZnCN4BZ7A5Cw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200240 Signature Algorithm: sha256WithRSAEncryption 6f:72:0e:85:26:c2:32:01:f2:c5:e1:74:ed:33:68:5e:19:4a: c8:3c:78:19:e1:f8:3e:64:fe:84:f5:bc:74:de:f6:35:cf:8a: 38:0d:d2:6e:c8:ac:d6:cf:a3:5f:37:71:bc:1c:21:4c:4b:97: a3:04:f3:bf:01:13:01:25:6f:82:ba:68:61:eb:cc:5a:48:3d: 1b:28:3b:d5:f2:2c:83:c6:1c:a7:b3:c0:a4:0c:56:88:0e:9b: 7b:44:6f:25:88:72:5f:a7:24:8b:93:be:33:d1:11:af:10:d2: 81:ce:b8:67:bc:3a:fe:36:8f:75:ed:77:6f:79:cd:f4:03:51: 48:a3:46:17:c5:f2:61:db:27:38:da:6f:e4:33:0c:b3:64:d3: ed:16:c3:1a:98:c7:02:23:df:c2:0b:82:f9:b6:35:d1:b2:4b: 6e:a7:13:cf:77:b4:48:71:4e:31:c2:c5:33:04:d6:c8:65:09: 18:ea:a0:52:f7:1d:f5:1c:86:e9:b1:4f:fb:ee:90:0e:b6:0f: 96:01:0f:32:58:c8:a6:d3:76:47:e4:be:6c:6d:4e:23:2e:6b: 31:bb:bf:ba:18:c6:61:60:58:63:2a:75:a8:bf:52:b8:35:7a: 78:4f:90:87:85:d0:72:c6:97:84:84:db:48:8f:cb:d4:1e:06: 51:58:ce:c8 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZt4iE59p23gx0Fvdp4FJRk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0 NmQ0N2YwHhcNMjYwMTAxMDc0OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmQxOWI5ZmJkNDlmNjk1NmU3NzQyOTk5YzIzNzgwNTllYzBlNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY6uMcrgjQQmaSaVWB0/PQvFmE1U Vu8UAlsDoeF/AbugKdAli0D9ZySDQk+lOvhh5+7HT7+N2rJKSseVP0D7vM3mab5y MNmbUuIb77T5ndyYtTqH2+04P8Nk8xYQYDChWQYU1EIe/eZGQbTLO5/g7jLsE8r1 OqM4+4Tq74XYyFFZMPkOXRskkSuMMY2Yw7+guBu7H+M/ov6n0RmrorZ2IBemT65f m4/W3EA8G8pDyN8yxoEfGOLrrEfaAWSa0XPYJfqdQcLPc+8CCKQ86HOeAk50RnYa KUBJWY7QJc5Pm3cwBPkSA0OHCRVeYxtICk3LAM8rWidLg2/eS7KuKqRYDwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKbRm5+9SfaVbndCmZwjeAWewOQsMB8GA1UdIwQY MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt NDkxZmU3YWNjMWE5LzEvcHRHYm43MUo5cFZ1ZDBLWm5DTjRCWjdBNUN3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5 LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMOMDANBgkqhkiG 9w0BAQsFAAOCAQEAb3IOhSbCMgHyxeF07TNoXhlKyDx4GeH4PmT+hPW8dN72Nc+K OA3Sbsis1s+jXzdxvBwhTEuXowTzvwETASVvgrpoYevMWkg9Gyg71fIsg8Ycp7PA pAxWiA6be0RvJYhyX6cki5O+M9ERrxDSgc64Z7w6/jaPde13b3nN9ANRSKNGF8Xy YdsnONpv5DMMs2TT7RbDGpjHAiPfwguC+bY10bJLbqcTz3e0SHFOMcLFMwTWyGUJ GOqgUvcd9RyG6bFP++6QDrYPlgEPMljIptN2R+S+bG1OIy5rMbu/uhjGYWBYYyp1 qL9SuDV6eE+Qh4XQcsaXhITbSI/L1B4GUVjOyA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:34 2026 by rpki-client