This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa File: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (raw, json) Hash identifier: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk= Subject key identifier: 04:D6:D8:09:3C:02:E1:41:10:71:DE:67:57:49:72:BC:EF:3F:14:5E Certificate issuer: /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424 Certificate serial: 019B6664EF4E85CAE63615F5C8AE9D3C891C Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa Signing time: Sun 28 Dec 2025 19:17:29 +0000 ASPA not before: Sun 28 Dec 2025 19:17:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 208249 Providers: AS: 42615 AS: 202562 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:64:ef:4e:85:ca:e6:36:15:f5:c8:ae:9d:3c:89:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424 Validity Not Before: Dec 28 19:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04d6d8093c02e1411071de67574972bcef3f145e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:c0:c2:b9:41:15:b5:65:84:56:73:08:89: b5:09:99:df:fd:e2:10:fb:0e:9c:b8:68:a4:c3:c4: bb:29:be:4c:b8:20:b0:71:3b:79:02:3a:40:2b:a9: 33:1e:e4:73:9d:f3:42:ff:34:c6:76:5f:07:cc:41: 74:e6:35:cc:f3:85:e0:f4:95:f0:f8:47:e0:3f:e2: ce:58:d4:cb:91:9c:ac:81:14:00:92:5b:2e:ae:0d: be:6b:07:40:56:25:49:ad:09:91:a3:9c:16:ef:65: 25:35:22:a6:ac:5a:ac:cb:a1:5f:9d:92:88:4a:bf: f5:4a:26:00:bb:ff:8d:8a:e8:66:96:07:af:0d:4c: c8:c0:41:e4:05:9c:93:eb:7c:22:e5:41:ad:28:00: 88:ff:b1:8b:1a:d6:59:c2:28:30:d1:7c:c0:9f:39: 85:4d:c1:fa:65:7c:58:56:ff:9a:d3:8b:1e:e5:3a: 24:72:cd:9a:09:99:15:ba:3a:06:d7:98:04:19:07: 4e:45:d7:db:02:0a:e1:b7:be:7c:70:5c:e1:2f:7a: da:25:a1:3d:20:42:26:6d:dc:f4:9e:ac:dc:60:25: 9f:46:bb:5d:f9:28:1d:a1:8b:9b:4f:80:67:fa:6d: 1d:34:d3:5a:a8:49:f2:ba:4d:6f:cb:2b:e4:f3:97: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D6:D8:09:3C:02:E1:41:10:71:DE:67:57:49:72:BC:EF:3F:14:5E X509v3 Authority Key Identifier: keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208249 Signature Algorithm: sha256WithRSAEncryption ab:f3:4d:a2:9e:ae:3f:5a:93:2a:17:b3:bd:10:46:05:1f:09: 0c:ca:7e:7b:29:a3:73:b6:60:03:b4:41:c2:85:c9:ee:e2:ff: 34:4f:69:81:e2:bb:ac:89:6c:6f:51:2d:60:89:47:ea:87:c9: c5:c4:71:6c:0a:6a:75:59:67:3e:6d:e6:09:39:0d:cb:e2:d3: 31:97:4c:e4:0c:e3:9c:74:f7:49:99:5e:a3:28:6e:8a:55:d0: 89:2b:c4:00:d4:82:31:1e:9a:87:36:62:18:9e:7e:32:72:bb: 94:51:b5:20:9d:b5:bd:5b:dc:fd:86:08:2a:66:7c:64:7a:1b: ca:12:fa:de:1f:a5:11:65:e6:32:64:19:71:8a:71:c3:97:7f: 77:87:c5:d8:22:16:db:da:a6:85:11:24:72:28:4f:80:d0:86: f3:d1:13:95:e3:43:e8:f1:67:b6:a1:4c:94:28:63:4d:16:b2: bc:3b:75:9b:ed:f5:2b:65:0f:54:c1:88:29:3f:d8:6d:1c:fb: 96:2d:74:5c:25:67:24:a5:ec:24:15:29:89:1e:0e:9c:ff:1f: 3a:bf:79:23:3f:a3:e8:0e:c3:72:1a:1b:45:aa:72:a0:a3:f5: 7e:e2:a7:12:62:56:9b:62:fe:56:73:55:aa:89:92:c1:f8:a0: e7:69:b0:f0 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgISAZtmZO9OhcrmNhX1yK6dPIkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDAyNTIwOGM4NTY4Y2U4ZTU4ZGUxYWU3ZDgzZWY4ZDJi Mjc0MjQwHhcNMjUxMjI4MTkxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGQ2ZDgwOTNjMDJlMTQxMTA3MWRlNjc1NzQ5NzJiY2VmM2YxNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRDAwrlBFbVlhFZzCIm1CZnf/eIQ +w6cuGikw8S7Kb5MuCCwcTt5AjpAK6kzHuRznfNC/zTGdl8HzEF05jXM84Xg9JXw +EfgP+LOWNTLkZysgRQAklsurg2+awdAViVJrQmRo5wW72UlNSKmrFqsy6FfnZKI Sr/1SiYAu/+NiuhmlgevDUzIwEHkBZyT63wi5UGtKACI/7GLGtZZwigw0XzAnzmF TcH6ZXxYVv+a04se5Tokcs2aCZkVujoG15gEGQdORdfbAgrht758cFzhL3raJaE9 IEImbdz0nqzcYCWfRrtd+SgdoYubT4Bn+m0dNNNaqEnyuk1vyyvk85euRQIDAQAB o4ICBjCCAgIwHQYDVR0OBBYEFATW2Ak8AuFBEHHeZ1dJcrzvPxReMB8GA1UdIwQY MBaAFPhAJSCMhWjOjljeGufYPvjSsnQkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FQWxJSXlGYU02T1dONGE1OWctLU5LeWRDUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5 LWVmZWE2NWRjMzAyMC8xL0JOYllDVHdDNFVFUWNkNW5WMGx5dk84X0ZGNC5hc2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5LWVmZWE2NWRjMzAy MC8xLzEtRUFsSUl5RmFNNk9XTjRhNTlnLS1OS3lkQ1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAy15MA0GCSqG SIb3DQEBCwUAA4IBAQCr802inq4/WpMqF7O9EEYFHwkMyn57KaNztmADtEHChcnu 4v80T2mB4rusiWxvUS1giUfqh8nFxHFsCmp1WWc+beYJOQ3L4tMxl0zkDOOcdPdJ mV6jKG6KVdCJK8QA1IIxHpqHNmIYnn4ycruUUbUgnbW9W9z9hggqZnxkehvKEvre H6URZeYyZBlxinHDl393h8XYIhbb2qaFESRyKE+A0Ibz0ROV40Po8We2oUyUKGNN FrK8O3Wb7fUrZQ9UwYgpP9htHPuWLXRcJWckpewkFSmJHg6c/x86v3kjP6PoDsNy GhtFqnKgo/V+4qcSYlabYv5Wc1WqiZLB+KDnabDw -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:59 2026 by rpki-client