This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Ry5ogaq6xel6bb_wfpnNMOgHoYY.asa File: Ry5ogaq6xel6bb_wfpnNMOgHoYY.asa (raw, json) Hash identifier: bj382q+fQvCb8yK5gj2+0feyLhrIoXjHwjxqqTWqDdI= Subject key identifier: 47:2E:68:81:AA:BA:C5:E9:7A:6D:BF:F0:7E:99:CD:30:E8:07:A1:86 Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb Certificate serial: 019B0EDC7D366F64E4DE818B4BB77577A780 Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Ry5ogaq6xel6bb_wfpnNMOgHoYY.asa Signing time: Thu 11 Dec 2025 19:21:29 +0000 ASPA not before: Thu 11 Dec 2025 19:21:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214915 Providers: AS: 3214 AS: 6939 AS: 24961 AS: 50629 AS: 207252 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:dc:7d:36:6f:64:e4:de:81:8b:4b:b7:75:77:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb Validity Not Before: Dec 11 19:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=472e6881aabac5e97a6dbff07e99cd30e807a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:61:e9:8b:6e:e8:7e:f0:b2:50:3f:52:11: 59:dd:8c:85:9e:04:d4:c3:99:c2:25:4a:d5:4b:3f: 4d:67:db:d0:85:5f:f4:48:7b:3a:13:5d:65:13:dd: fb:36:b4:45:78:86:e3:ca:a5:f6:d1:c4:7f:b2:cb: de:0e:52:22:9e:f6:f0:f9:cc:58:b3:64:4f:c0:90: 17:fd:5e:54:80:45:af:38:8e:c6:a0:9b:7b:f1:67: ff:2c:2f:85:e2:fa:7f:c0:13:d3:3b:fb:d9:0a:67: d1:86:59:a7:56:0f:be:49:67:33:e7:ba:b5:9f:62: 7d:ce:76:53:a9:c4:02:02:9f:a8:e0:69:fc:45:d0: 44:54:f5:ab:ff:b6:58:f1:9d:18:99:62:3d:04:ab: e9:f5:2d:cc:2c:d1:f1:cb:a4:97:5b:9a:7e:b2:64: 09:da:0a:0c:82:ff:22:52:48:52:e1:3c:be:eb:4d: d0:3a:c5:02:b3:60:bb:2d:42:1d:c6:60:a6:49:a1: df:41:15:60:d8:40:2b:2c:61:41:4a:d3:97:67:3f: 20:d4:b1:4a:09:6a:65:28:9c:48:ff:23:66:4f:28: 70:f3:33:65:62:3a:9f:8e:8d:ba:33:c8:3c:bd:b3: eb:ba:7e:ec:ff:51:4b:88:c5:14:99:1a:04:40:b0: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2E:68:81:AA:BA:C5:E9:7A:6D:BF:F0:7E:99:CD:30:E8:07:A1:86 X509v3 Authority Key Identifier: keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Ry5ogaq6xel6bb_wfpnNMOgHoYY.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214915 Signature Algorithm: sha256WithRSAEncryption a7:ec:94:29:2c:8d:97:41:a9:66:c3:3d:bd:96:85:94:61:7e: 3d:77:d5:c0:4c:3d:85:8a:92:a5:47:5a:73:a0:bd:13:93:f7: e0:fe:f3:57:00:7a:4f:a1:09:2b:aa:24:e5:4a:02:25:74:27: 5d:b1:08:ac:e2:41:c7:fb:ce:cd:0c:ea:09:c1:8f:39:54:31: 94:cb:e6:1c:2e:84:75:a8:67:0d:8f:d5:d2:8f:63:10:b0:ca: ee:6b:2b:d7:76:66:17:89:13:9e:31:0d:55:88:28:8e:48:db: 8f:58:4e:8b:db:cb:88:ac:bb:a2:7e:d9:5c:cc:a7:f7:d6:54: 23:82:de:36:2c:5a:c9:c6:19:0f:10:fb:4f:b2:b9:1a:cd:27: 54:b7:10:9b:b6:9b:95:41:94:99:48:cd:ff:3e:17:65:5c:89: f8:0d:c1:53:5c:d6:42:25:6e:ed:d2:ea:3f:be:42:3a:e4:4f: 11:2e:05:96:82:be:68:ff:01:18:b2:ff:be:58:23:36:85:d3: 76:cb:90:b8:23:3c:d7:f9:07:7b:0f:b3:e5:57:d1:96:c4:e9: 55:ad:96:39:b6:83:45:2d:a7:3d:57:13:63:7c:ad:82:1e:c9: d6:de:e5:39:f2:d2:e8:c9:53:b0:40:22:b5:93:9d:67:73:b3: 4f:e6:5f:4e -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsO3H02b2Tk3oGLS7d1d6eAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZGUxODNmMTRhM2YyNGY5Yjg2ZDA0NGY4NzcyOTg2ODBi NTEyYmIwHhcNMjUxMjExMTkyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzJlNjg4MWFhYmFjNWU5N2E2ZGJmZjA3ZTk5Y2QzMGU4MDdhMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuixh6Ytu6H7wslA/UhFZ3YyFngTU w5nCJUrVSz9NZ9vQhV/0SHs6E11lE937NrRFeIbjyqX20cR/ssveDlIinvbw+cxY s2RPwJAX/V5UgEWvOI7GoJt78Wf/LC+F4vp/wBPTO/vZCmfRhlmnVg++SWcz57q1 n2J9znZTqcQCAp+o4Gn8RdBEVPWr/7ZY8Z0YmWI9BKvp9S3MLNHxy6SXW5p+smQJ 2goMgv8iUkhS4Ty+603QOsUCs2C7LUIdxmCmSaHfQRVg2EArLGFBStOXZz8g1LFK CWplKJxI/yNmTyhw8zNlYjqfjo26M8g8vbPrun7s/1FLiMUUmRoEQLD61QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFEcuaIGqusXpem2/8H6ZzTDoB6GGMB8GA1UdIwQY MBaAFEPeGD8Uo/JPm4bQRPh3KYaAtRK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTk0WVB4U2o4ay1iaHRCRS1IY3Bob0MxRXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lMmQ4ZmUtMDFmMS00YzU2LTkxZjgt ZGVkNzQzMTQ3ZDU4LzEvUnk1b2dhcTZ4ZWw2YmJfd2Zwbk5NT2dIb1lZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lMmQ4ZmUtMDFmMS00YzU2LTkxZjgtZGVkNzQzMTQ3ZDU4 LzEvUTk0WVB4U2o4ay1iaHRCRS1IY3Bob0MxRXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHgzANBgkqhkiG 9w0BAQsFAAOCAQEAp+yUKSyNl0GpZsM9vZaFlGF+PXfVwEw9hYqSpUdac6C9E5P3 4P7zVwB6T6EJK6ok5UoCJXQnXbEIrOJBx/vOzQzqCcGPOVQxlMvmHC6EdahnDY/V 0o9jELDK7msr13ZmF4kTnjENVYgojkjbj1hOi9vLiKy7on7ZXMyn99ZUI4LeNixa ycYZDxD7T7K5Gs0nVLcQm7ablUGUmUjN/z4XZVyJ+A3BU1zWQiVu7dLqP75COuRP ES4FloK+aP8BGLL/vlgjNoXTdsuQuCM81/kHew+z5VfRlsTpVa2WObaDRS2nPVcT Y3ytgh7J1t7lOfLS6MlTsEAitZOdZ3OzT+ZfTg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:34 2025 by rpki-client