This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/aOIB9EStz9INgqU7CaINwxaJwCI.asa File: aOIB9EStz9INgqU7CaINwxaJwCI.asa (raw, json) Hash identifier: fTrgt59qEsUmg3U5HKMz/aoIoO12wBSOasyIJfXjnlM= Subject key identifier: 68:E2:01:F4:44:AD:CF:D2:0D:82:A5:3B:09:A2:0D:C3:16:89:C0:22 Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601 Certificate serial: 019AFE481AE2C67AFA8B67FF29F16EA8823F Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/aOIB9EStz9INgqU7CaINwxaJwCI.asa Signing time: Mon 08 Dec 2025 14:05:29 +0000 ASPA not before: Mon 08 Dec 2025 14:05:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 56853 Providers: AS: 44030 AS: 48416 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:48:1a:e2:c6:7a:fa:8b:67:ff:29:f1:6e:a8:82:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601 Validity Not Before: Dec 8 14:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68e201f444adcfd20d82a53b09a20dc31689c022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:ce:aa:a4:af:35:1c:fe:b2:69:3f:b9:df: a8:43:ca:9a:f6:bb:5d:5a:0c:9f:57:ee:4f:8c:97: 57:cb:50:d7:d6:f6:12:66:67:e9:02:50:27:31:72: 2d:d8:83:95:04:36:a6:54:e2:79:a4:7a:6c:03:d2: e9:1e:96:68:9b:bf:c9:70:c3:c8:a6:8c:24:bd:9f: 5c:35:28:11:68:8a:46:61:99:7c:c6:c5:de:03:aa: d7:9d:05:e9:0d:88:b7:4c:5f:63:f4:40:07:0c:c3: 93:f2:16:a1:50:7f:78:06:d4:ee:cd:06:d2:73:5f: 01:3f:72:de:25:ba:32:00:56:c7:7f:29:7c:12:a2: 46:28:44:27:89:ce:5e:cb:63:a4:fc:84:60:0c:65: 05:8c:c6:1f:ce:26:7e:42:ae:9d:1f:88:d4:95:4e: c6:e0:22:7d:06:f8:c0:fb:ac:14:81:55:21:10:3f: 11:e6:1f:85:af:ee:a2:62:13:12:62:a8:31:ee:8d: 81:51:38:15:3d:43:58:f3:97:9d:1f:81:ec:66:3d: b1:77:0c:d6:fd:37:df:38:63:43:f2:22:6b:03:98: 43:b3:bd:23:39:3f:a5:ac:ba:1d:5d:75:08:83:e9: 8b:1b:80:8c:f4:86:5e:47:e7:5a:8a:a9:b8:2f:80: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E2:01:F4:44:AD:CF:D2:0D:82:A5:3B:09:A2:0D:C3:16:89:C0:22 X509v3 Authority Key Identifier: keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/aOIB9EStz9INgqU7CaINwxaJwCI.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 56853 Signature Algorithm: sha256WithRSAEncryption 8d:28:58:ad:67:b4:33:cf:a1:34:4c:fd:c9:64:fa:51:e0:5e: 32:2f:f1:06:60:4b:a7:fd:50:b3:84:9f:df:83:7e:0f:66:e6: aa:9a:d7:6c:b7:0f:d1:4b:63:ba:8c:b4:ed:bb:99:42:25:63: 20:be:33:d5:15:21:e2:98:3c:59:a7:9f:e8:f2:34:97:96:30: fb:e9:94:44:72:33:7b:db:b7:d7:8c:83:b3:ac:ad:d0:8d:e4: cd:c5:9b:3f:e4:e5:02:04:5d:19:e8:93:bd:59:a0:89:2b:04: da:4b:70:ca:e1:c1:4c:e0:0d:b0:ea:3e:a2:6b:9d:38:88:9a: db:93:d8:62:00:e5:53:52:79:1c:3b:eb:4b:cb:d9:9d:2b:a3: d6:f7:23:74:08:19:df:7c:c9:ee:0c:1f:dc:04:62:f2:c6:bf: 63:51:eb:95:8a:7c:ba:b1:22:08:d8:9e:77:70:5f:9d:fa:b2: 68:c8:3a:e5:59:88:49:d9:e0:8c:d4:6a:33:94:4f:9e:9c:ec: 61:91:98:57:b1:ea:04:39:74:1e:0b:97:c3:41:56:d6:85:72: d5:9d:53:8b:77:d0:50:55:5e:16:af:2f:5c:13:62:23:55:1a: d8:f2:bb:af:e8:ff:76:db:24:f1:81:60:02:3c:ee:9e:84:50: 0a:16:22:2d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr+SBrixnr6i2f/KfFuqII/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj OTc2MDEwHhcNMjUxMjA4MTQwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGUyMDFmNDQ0YWRjZmQyMGQ4MmE1M2IwOWEyMGRjMzE2ODljMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmHOqqSvNRz+smk/ud+oQ8qa9rtd WgyfV+5PjJdXy1DX1vYSZmfpAlAnMXIt2IOVBDamVOJ5pHpsA9LpHpZom7/JcMPI powkvZ9cNSgRaIpGYZl8xsXeA6rXnQXpDYi3TF9j9EAHDMOT8hahUH94BtTuzQbS c18BP3LeJboyAFbHfyl8EqJGKEQnic5ey2Ok/IRgDGUFjMYfziZ+Qq6dH4jUlU7G 4CJ9BvjA+6wUgVUhED8R5h+Fr+6iYhMSYqgx7o2BUTgVPUNY85edH4HsZj2xdwzW /TffOGND8iJrA5hDs70jOT+lrLodXXUIg+mLG4CM9IZeR+daiqm4L4ByKQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFGjiAfRErc/SDYKlOwmiDcMWicAiMB8GA1UdIwQY MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt MTYzMjczZDNkMTMxLzEvYU9JQjlFU3R6OUlOZ3FVN0NhSU53eGFKd0NJLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDeFTANBgkqhkiG 9w0BAQsFAAOCAQEAjShYrWe0M8+hNEz9yWT6UeBeMi/xBmBLp/1Qs4Sf34N+D2bm qprXbLcP0Utjuoy07buZQiVjIL4z1RUh4pg8Waef6PI0l5Yw++mURHIze9u314yD s6yt0I3kzcWbP+TlAgRdGeiTvVmgiSsE2ktwyuHBTOANsOo+omudOIia25PYYgDl U1J5HDvrS8vZnSuj1vcjdAgZ33zJ7gwf3ARi8sa/Y1HrlYp8urEiCNied3Bfnfqy aMg65VmISdngjNRqM5RPnpzsYZGYV7HqBDl0HguXw0FW1oVy1Z1Ti3fQUFVeFq8v XBNiI1Ua2PK7r+j/dtsk8YFgAjzunoRQChYiLQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:51 2025 by rpki-client