This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fX3tPrrAy5l65982bntPZMbTKXM.asa File: fX3tPrrAy5l65982bntPZMbTKXM.asa (raw, json) Hash identifier: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8= Subject key identifier: 7D:7D:ED:3E:BA:C0:CB:99:7A:E7:DF:36:6E:7B:4F:64:C6:D3:29:73 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019BEC1705B4B7FEB7C795BC73BDD7444ED9 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fX3tPrrAy5l65982bntPZMbTKXM.asa Signing time: Fri 23 Jan 2026 18:21:30 +0000 ASPA not before: Fri 23 Jan 2026 18:21:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 9053 Providers: AS: 29838 AS: 39020 AS: 43541 AS: 56430 AS: 62240 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:17:05:b4:b7:fe:b7:c7:95:bc:73:bd:d7:44:4e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 23 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7ded3ebac0cb997ae7df366e7b4f64c6d32973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:b7:08:30:1f:00:7a:96:29:d6:e4:5a:b6: 77:a4:28:00:b6:10:9a:9c:5f:e5:2f:b4:ac:f8:a6: 6c:b8:1a:2d:c0:d6:a3:a3:5c:e3:f3:31:0c:5b:e4: 3a:86:4e:db:5e:87:89:f8:e1:46:42:30:29:b1:51: 31:a0:c8:ee:e5:6c:f1:29:49:72:a2:5b:22:69:3a: 86:1b:8c:f2:ee:55:8f:06:37:4a:89:bb:fe:79:eb: ab:16:d1:6f:04:15:71:85:b7:97:43:d1:10:af:ef: 69:fe:78:71:28:5d:b1:c8:3e:6d:9a:54:9f:c5:bd: 49:37:57:e3:ac:81:c0:b3:b2:39:63:35:a3:13:9e: ac:7e:50:8a:6b:99:bc:60:c1:8e:5b:3a:d8:d5:1f: 33:b2:59:2e:fa:41:19:49:87:a2:57:56:2c:28:55: ee:9e:34:04:16:68:ca:18:ce:37:90:84:50:2a:d0: 1e:f9:89:c4:67:c6:72:90:58:78:37:35:7c:3b:67: 62:d4:5f:5e:51:c0:6a:b6:a1:e6:8a:65:50:d3:72: 47:b0:58:0c:f3:87:b9:e2:c3:72:7e:95:8e:c2:eb: 70:94:98:3a:18:a2:82:14:c4:ca:e5:c7:d0:23:f3: 0a:e1:7b:80:48:10:22:6d:a1:ff:f5:52:8c:67:2d: eb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7D:ED:3E:BA:C0:CB:99:7A:E7:DF:36:6E:7B:4F:64:C6:D3:29:73 X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fX3tPrrAy5l65982bntPZMbTKXM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 9053 Signature Algorithm: sha256WithRSAEncryption 7d:45:37:84:ee:80:16:c1:cf:f4:e1:11:f2:ea:43:c4:d1:99: 4c:27:33:b8:43:d7:b5:f3:70:4c:a6:35:9c:f1:22:06:a0:ca: 1f:98:d9:3e:eb:63:67:28:4e:e0:3c:8a:81:a4:8f:67:b2:97: 44:53:0b:1a:a7:a5:32:d9:11:75:7b:77:4c:04:33:6b:30:0b: e4:0f:5b:81:5c:85:0e:2e:7a:90:48:fe:91:a8:ba:c4:2b:22: e4:41:b4:51:1f:15:2f:cb:27:c5:35:3e:cc:e0:e9:38:fd:71: 66:70:ab:7c:aa:3e:cf:5f:2e:26:b7:97:d6:0d:dd:a6:68:57: 54:a1:82:5b:28:87:b6:8d:3b:56:0a:dd:2c:46:2b:ae:0f:7b: 2f:52:f2:d1:15:05:5f:34:aa:09:d3:53:2f:51:4b:68:fd:ff: 76:1e:bb:97:c3:9c:d5:95:8f:fa:88:8b:e9:89:ea:89:d4:21: a9:14:3a:f3:1a:af:50:b8:5c:35:17:bf:53:83:81:fb:75:c4: 8a:10:c5:61:f7:3c:45:a2:e1:46:ef:79:db:ae:f2:9b:e3:67: 1a:47:52:73:84:e2:ed:d8:f7:22:32:dc:78:ce:9e:e2:31:60: ba:08:a0:e6:92:48:fc:9e:f6:a4:80:0e:54:05:e5:cf:15:19: 6b:0b:1e:58 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZvsFwW0t/63x5W8c73XRE7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTIzMTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDdkZWQzZWJhYzBjYjk5N2FlN2RmMzY2ZTdiNGY2NGM2ZDMyOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7S3CDAfAHqWKdbkWrZ3pCgAthCa nF/lL7Ss+KZsuBotwNajo1zj8zEMW+Q6hk7bXoeJ+OFGQjApsVExoMju5WzxKUly olsiaTqGG4zy7lWPBjdKibv+eeurFtFvBBVxhbeXQ9EQr+9p/nhxKF2xyD5tmlSf xb1JN1fjrIHAs7I5YzWjE56sflCKa5m8YMGOWzrY1R8zslku+kEZSYeiV1YsKFXu njQEFmjKGM43kIRQKtAe+YnEZ8ZykFh4NzV8O2di1F9eUcBqtqHmimVQ03JHsFgM 84e54sNyfpWOwutwlJg6GKKCFMTK5cfQI/MK4XuASBAibaH/9VKMZy3rWQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFH197T66wMuZeuffNm57T2TG0ylzMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvZlgzdFByckF5NWw2NTk4MmJudFBaTWJUS1hNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiNdMA0GCSqGSIb3 DQEBCwUAA4IBAQB9RTeE7oAWwc/04RHy6kPE0ZlMJzO4Q9e183BMpjWc8SIGoMof mNk+62NnKE7gPIqBpI9nspdEUwsap6Uy2RF1e3dMBDNrMAvkD1uBXIUOLnqQSP6R qLrEKyLkQbRRHxUvyyfFNT7M4Ok4/XFmcKt8qj7PXy4mt5fWDd2maFdUoYJbKIe2 jTtWCt0sRiuuD3svUvLRFQVfNKoJ01MvUUto/f92HruXw5zVlY/6iIvpieqJ1CGp FDrzGq9QuFw1F79Tg4H7dcSKEMVh9zxFouFG73nbrvKb42caR1JzhOLt2PciMtx4 zp7iMWC6CKDmkkj8nvakgA5UBeXPFRlrCx5Y -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:47 2026 by rpki-client