This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/0CdqlW01ACbv3EQD2O6eNsK9tUw.asa File: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (raw, json) Hash identifier: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0= Subject key identifier: D0:27:6A:95:6D:35:00:26:EF:DC:44:03:D8:EE:9E:36:C2:BD:B5:4C Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Certificate serial: 019AE60883770748B1F3385550FA5267C47B Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/0CdqlW01ACbv3EQD2O6eNsK9tUw.asa Signing time: Wed 03 Dec 2025 21:05:08 +0000 ASPA not before: Wed 03 Dec 2025 21:05:08 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 208059 Providers: AS: 20473 AS: 34872 AS: 34927 AS: 35661 AS: 41047 AS: 41051 AS: 53667 AS: 56381 AS: 206499 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:08:83:77:07:48:b1:f3:38:55:50:fa:52:67:c4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab Validity Not Before: Dec 3 21:05:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0276a956d350026efdc4403d8ee9e36c2bdb54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:86:d7:0e:cd:d9:53:2e:8d:f5:a0:b2:b3: 57:0a:f6:5c:82:41:59:ae:ee:b0:35:bc:42:61:27: e9:65:10:2a:c5:91:00:19:8c:92:04:d8:a6:f4:15: 5a:26:04:33:5b:57:54:0d:c3:67:d9:fb:6a:d4:2e: ea:96:77:70:c0:77:0d:29:de:7c:38:5c:2e:10:5b: 3d:2e:f5:b8:76:df:a9:39:72:f4:56:2e:83:7e:98: 18:cc:36:b0:43:f3:9c:d1:01:35:fd:2d:9b:9f:ed: a9:f1:e4:44:48:7e:da:0b:33:25:2c:25:85:70:f0: 90:9e:6b:a6:e8:c8:ab:4f:e8:84:e0:64:4d:bd:41: fe:11:3a:e7:6a:04:4a:de:71:d4:bf:b4:03:bf:0d: da:fc:f8:52:ab:ee:14:39:9b:6c:f5:a2:ad:7b:cd: bd:8f:97:e8:16:b7:73:d3:92:bc:14:06:dd:53:ed: 81:7e:e1:19:71:a3:9d:63:4e:7b:c8:ff:ee:07:36: 60:98:55:ea:07:43:82:57:b8:b1:d9:f5:7b:32:70: c5:51:f0:0d:f7:fe:6b:4b:4d:8a:e4:40:bd:c8:5b: e7:9b:ab:37:7b:1b:24:e9:6d:81:30:a2:f4:e0:95: 23:57:a9:10:d6:06:e7:30:c4:fb:d9:38:c5:d6:17: b3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:27:6A:95:6D:35:00:26:EF:DC:44:03:D8:EE:9E:36:C2:BD:B5:4C X509v3 Authority Key Identifier: keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/0CdqlW01ACbv3EQD2O6eNsK9tUw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208059 Signature Algorithm: sha256WithRSAEncryption 19:80:21:9f:4d:21:b0:c9:09:27:2e:56:54:41:d5:5d:97:dc: 27:a8:80:a8:fc:4d:6c:5f:98:01:ed:5c:1d:72:11:94:3a:49: db:ce:ba:06:02:fc:77:e0:c3:f4:7e:6d:d7:6d:87:b2:a5:95: 84:c1:41:bd:4c:3f:93:2b:44:85:fc:42:e0:47:1c:60:d4:be: b4:8a:95:95:9d:64:3e:ef:9d:ba:5c:7a:39:d8:f5:28:0a:2b: 7b:19:83:b2:8d:9b:00:16:52:ac:c2:7a:14:c7:18:e1:3c:80: 9c:6c:5b:51:5c:1c:b3:3f:19:2b:c2:a1:49:47:d4:38:8f:4b: 88:7c:cb:a4:3e:f6:b5:9f:9b:fe:31:e3:6e:79:b0:7b:f4:1e: 72:90:ca:c4:13:6f:8b:96:3a:d9:d7:59:ac:ed:1b:91:36:6d: 66:44:62:b1:3f:f0:6c:84:a4:7f:8e:b0:e6:e3:b0:dc:ea:c2: f4:b4:fa:d8:df:96:1c:6f:7e:12:52:7a:fc:62:a9:4a:68:6b: 15:1a:46:6d:bf:e2:8e:28:0e:9d:5e:70:40:ad:07:38:7c:84: 7c:fd:db:00:b9:4a:07:cc:cc:0a:e5:ca:67:63:e4:f8:68:62: 0d:06:f9:38:51:ec:af:ab:83:4e:c6:2f:52:a2:3e:25:d3:ef: d9:13:86:cf -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrmCIN3B0ix8zhVUPpSZ8R7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh MzViYWIwHhcNMjUxMjAzMjEwNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDI3NmE5NTZkMzUwMDI2ZWZkYzQ0MDNkOGVlOWUzNmMyYmRiNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyeG1w7N2VMujfWgsrNXCvZcgkFZ ru6wNbxCYSfpZRAqxZEAGYySBNim9BVaJgQzW1dUDcNn2ftq1C7qlndwwHcNKd58 OFwuEFs9LvW4dt+pOXL0Vi6DfpgYzDawQ/Oc0QE1/S2bn+2p8eRESH7aCzMlLCWF cPCQnmum6MirT+iE4GRNvUH+ETrnagRK3nHUv7QDvw3a/PhSq+4UOZts9aKte829 j5foFrdz05K8FAbdU+2BfuEZcaOdY057yP/uBzZgmFXqB0OCV7ix2fV7MnDFUfAN 9/5rS02K5EC9yFvnm6s3exsk6W2BMKL04JUjV6kQ1gbnMMT72TjF1hezpwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNAnapVtNQAm79xEA9junjbCvbVMMB8GA1UdIwQY MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It NDk1MDFhNzY5NGM0LzEvMENkcWxXMDFBQ2J2M0VRRDJPNmVOc0s5dFV3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0 LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsuzANBgkqhkiG 9w0BAQsFAAOCAQEAGYAhn00hsMkJJy5WVEHVXZfcJ6iAqPxNbF+YAe1cHXIRlDpJ 2866BgL8d+DD9H5t122HsqWVhMFBvUw/kytEhfxC4EccYNS+tIqVlZ1kPu+dulx6 Odj1KAorexmDso2bABZSrMJ6FMcY4TyAnGxbUVwcsz8ZK8KhSUfUOI9LiHzLpD72 tZ+b/jHjbnmwe/QecpDKxBNvi5Y62ddZrO0bkTZtZkRisT/wbISkf46w5uOw3OrC 9LT62N+WHG9+ElJ6/GKpSmhrFRpGbb/ijigOnV5wQK0HOHyEfP3bALlKB8zMCuXK Z2Pk+GhiDQb5OFHsr6uDTsYvUqI+JdPv2ROGzw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:43 2025 by rpki-client