This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/JO3t4wzj5pMO8pakWAwlzqvqqRM.asa File: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (raw, json) Hash identifier: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw= Subject key identifier: 24:ED:ED:E3:0C:E3:E6:93:0E:F2:96:A4:58:0C:25:CE:AB:EA:A9:13 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019BE1877806C85288F2657509009036365A Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/JO3t4wzj5pMO8pakWAwlzqvqqRM.asa Signing time: Wed 21 Jan 2026 17:08:30 +0000 ASPA not before: Wed 21 Jan 2026 17:08:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 43541 Providers: AS: 1299 AS: 3356 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:87:78:06:c8:52:88:f2:65:75:09:00:90:36:36:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 21 17:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24edede30ce3e6930ef296a4580c25ceabeaa913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:75:9d:15:13:56:75:ca:47:00:80:3c:4d: 9e:f1:3f:22:7d:bf:e6:db:85:71:53:66:2e:ae:28: e2:d8:20:e6:54:ca:f5:95:91:27:db:10:71:1d:19: 8b:bc:e4:79:00:8b:2f:d5:a4:4c:5b:8e:b1:17:71: f6:e8:f2:e7:ea:1c:43:14:6b:da:9f:2a:2e:c4:fa: 19:bc:ba:ce:8f:91:4e:d7:7e:c9:80:c7:4d:5d:88: 5f:0f:24:bb:fb:b9:20:76:68:87:22:5b:37:ff:f0: 0e:6e:1d:94:c8:0f:70:fa:7f:12:52:6f:a5:05:13: 84:a7:68:c1:61:9d:97:f8:fd:ca:b0:8a:96:2a:b7: cb:e4:c7:50:94:56:6e:36:da:a2:28:7e:62:93:c9: 72:59:2c:d6:d1:1e:6f:ba:ca:25:b8:39:3a:a7:2f: fc:c0:d4:f7:c8:32:cf:7d:00:a3:1a:a5:e9:d2:3a: 7d:4e:fd:14:af:bc:0e:f6:9e:c3:85:e6:2b:e1:25: 8d:e7:55:93:4b:4f:f4:ed:52:ee:e8:db:c8:a1:3b: 2c:be:30:12:e1:ab:6f:47:5a:ea:45:35:b3:b2:28: 7f:02:e0:c7:14:32:b6:22:85:82:36:08:0b:84:f6: 18:ff:d7:7d:44:f3:9f:2e:46:f4:c2:ea:3b:80:e8: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:ED:ED:E3:0C:E3:E6:93:0E:F2:96:A4:58:0C:25:CE:AB:EA:A9:13 X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/JO3t4wzj5pMO8pakWAwlzqvqqRM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 43541 Signature Algorithm: sha256WithRSAEncryption 07:81:57:03:aa:08:d1:0d:56:ec:38:6e:d9:6a:f6:c9:89:1c: 64:85:93:c1:6f:df:b4:38:6e:34:64:28:70:d3:0c:59:62:a6: de:7e:f4:c4:74:75:c7:8a:ec:21:e7:e2:bd:80:14:44:e2:69: 5d:f5:f0:32:18:4a:e0:37:3d:93:d9:ae:41:20:44:93:b1:e6: 12:d1:ec:6c:10:23:3e:67:ac:f9:c7:7a:6a:9b:87:80:43:ea: 48:ec:40:d9:cd:ae:ed:43:2a:9f:72:0e:44:f0:c9:ca:31:74: 43:fb:8d:8e:d6:8c:14:13:6d:5a:a5:01:ab:20:f1:a8:0e:a5: 62:18:1b:7c:62:61:1f:14:fd:24:ad:f0:20:90:83:15:1b:93: 44:f5:74:3f:dc:c7:9e:fb:8e:65:5b:af:ea:8d:ae:65:76:9f: c6:6e:71:3b:e5:d5:4b:ef:8c:e1:ad:4f:93:50:ea:99:bd:2f: 06:10:56:66:e3:c8:6b:4e:b6:03:65:5b:a0:64:2e:a3:05:06: 27:1a:e0:5f:ad:9a:e9:1c:d7:07:ad:be:51:4f:be:eb:06:8d: 7a:0c:28:1f:8c:9c:c0:5a:5e:4a:95:40:2f:8a:32:47:91:6f: 77:4d:0f:74:3f:77:b9:f5:10:e6:3f:af:31:cb:7c:ed:f5:62: 39:f3:05:30 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvhh3gGyFKI8mV1CQCQNjZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTIxMTcwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGVkZWRlMzBjZTNlNjkzMGVmMjk2YTQ1ODBjMjVjZWFiZWFhOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA91nRUTVnXKRwCAPE2e8T8ifb/m 24VxU2Yuriji2CDmVMr1lZEn2xBxHRmLvOR5AIsv1aRMW46xF3H26PLn6hxDFGva nyouxPoZvLrOj5FO137JgMdNXYhfDyS7+7kgdmiHIls3//AObh2UyA9w+n8SUm+l BROEp2jBYZ2X+P3KsIqWKrfL5MdQlFZuNtqiKH5ik8lyWSzW0R5vusoluDk6py/8 wNT3yDLPfQCjGqXp0jp9Tv0Ur7wO9p7DheYr4SWN51WTS0/07VLu6NvIoTssvjAS 4atvR1rqRTWzsih/AuDHFDK2IoWCNggLhPYY/9d9RPOfLkb0wuo7gOhmRQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCTt7eMM4+aTDvKWpFgMJc6r6qkTMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvSk8zdDR3emo1cE1POHBha1dBd2x6cXZxcVJNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqFTANBgkqhkiG 9w0BAQsFAAOCAQEAB4FXA6oI0Q1W7Dhu2Wr2yYkcZIWTwW/ftDhuNGQocNMMWWKm 3n70xHR1x4rsIefivYAUROJpXfXwMhhK4Dc9k9muQSBEk7HmEtHsbBAjPmes+cd6 apuHgEPqSOxA2c2u7UMqn3IORPDJyjF0Q/uNjtaMFBNtWqUBqyDxqA6lYhgbfGJh HxT9JK3wIJCDFRuTRPV0P9zHnvuOZVuv6o2uZXafxm5xO+XVS++M4a1Pk1Dqmb0v BhBWZuPIa062A2VboGQuowUGJxrgX62a6RzXB62+UU++6waNegwoH4ycwFpeSpVA L4oyR5Fvd00PdD93ufUQ5j+vMct87fViOfMFMA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:19 2026 by rpki-client