This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/yAkFpEjxzs83ywPRwqAL5e8lJeY.asa File: yAkFpEjxzs83ywPRwqAL5e8lJeY.asa (raw, json) Hash identifier: UIEBVxj1ZzIVrxFkEdeMxmISP4feVXlw74eOZ0lv+Sk= Subject key identifier: C8:09:05:A4:48:F1:CE:CF:37:CB:03:D1:C2:A0:0B:E5:EF:25:25:E6 Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf Certificate serial: 019B4B610C4EE1AC61E189B056CBC166DD5D Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/yAkFpEjxzs83ywPRwqAL5e8lJeY.asa Signing time: Tue 23 Dec 2025 13:23:29 +0000 ASPA not before: Tue 23 Dec 2025 13:23:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 42695 Providers: AS: 174 AS: 1299 AS: 3356 AS: 36352 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:61:0c:4e:e1:ac:61:e1:89:b0:56:cb:c1:66:dd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf Validity Not Before: Dec 23 13:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c80905a448f1cecf37cb03d1c2a00be5ef2525e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2a:b0:9b:3d:bb:a4:52:a8:0e:b8:20:3c:f4: 25:18:f8:fd:ae:9e:4e:b1:df:5d:d2:29:78:86:8c: be:8c:50:b3:ea:f4:64:db:57:32:42:6f:ba:d6:2f: 69:e7:36:d1:01:49:08:23:0f:0d:7d:53:34:50:b0: 87:cf:c9:0f:55:af:ea:4c:8c:a1:af:44:65:7b:46: 37:85:bb:c8:fb:8a:e9:42:c1:35:63:30:15:6d:76: 14:77:f0:47:9d:42:31:8d:f9:de:e0:57:6e:7e:1c: cb:44:a1:a0:f6:12:98:77:70:5b:d9:4f:d2:53:94: 8f:ec:b1:4f:3e:a4:34:7a:5c:fc:12:09:9e:02:4d: 2c:5d:94:21:bd:b6:b2:33:65:26:ba:59:3f:63:9a: 7e:d9:46:f2:ce:3a:9b:80:4d:4a:77:9e:17:45:85: a4:c5:85:83:6f:7a:4a:9a:76:be:f7:dd:12:57:a0: c8:4d:14:14:34:a0:2f:39:cc:4a:76:b6:b6:d9:05: 8e:dc:1a:19:fc:1e:d7:59:72:9e:2c:5e:4b:3c:54: 55:20:66:82:db:8e:36:a9:96:45:18:7b:7b:de:80: b1:98:9d:cd:23:88:d1:13:e9:8d:04:11:71:ad:f0: d5:1f:3a:f7:29:db:2f:0f:f1:8b:2b:91:f2:b8:25: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:09:05:A4:48:F1:CE:CF:37:CB:03:D1:C2:A0:0B:E5:EF:25:25:E6 X509v3 Authority Key Identifier: keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/yAkFpEjxzs83ywPRwqAL5e8lJeY.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 42695 Signature Algorithm: sha256WithRSAEncryption 72:87:c0:87:d4:88:f7:5d:31:c3:cc:0e:94:ff:6a:c5:b5:7f: 1f:a9:b3:ea:f3:f6:ce:71:e2:fa:41:ac:f3:a0:4f:4a:46:92: 8e:e7:56:c6:84:44:a2:93:0e:6e:f5:eb:08:d1:2e:81:43:ce: 16:7d:a4:93:5c:7c:c6:8b:0a:cb:f9:4e:42:fd:0d:2c:40:19: 70:7f:df:16:e4:c4:8a:4f:60:19:b0:e1:ce:50:0a:7d:bc:b0: fd:29:57:b9:94:11:62:31:b4:0c:3d:93:50:03:3d:77:6e:05: 19:af:9b:65:96:c2:8f:9b:87:e9:a8:e4:1b:5d:a6:f6:00:35: 8e:2c:b1:2e:26:bc:70:cd:94:b2:9c:e3:cd:10:92:30:e4:48: 8c:a7:c3:ea:a2:4f:04:69:cb:91:61:4d:db:6e:0b:33:b9:5e: 8c:7f:be:1d:aa:14:97:3a:99:6a:d2:08:5d:e0:fd:f7:48:42: 0f:87:19:ae:fa:c5:11:b8:57:53:c6:5a:92:8b:b0:c8:95:cc: 81:90:eb:88:16:95:a4:0b:bd:60:94:02:ed:4e:1e:91:bf:9c: 69:b0:dc:3f:01:c4:88:88:81:82:d2:d1:71:5b:d0:03:e6:c9: 55:0b:30:79:5c:a5:5a:6b:70:61:66:42:4b:44:8c:12:94:b4: 9b:18:3a:e8 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtLYQxO4axh4YmwVsvBZt1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjkyNmY4YzYwM2FhYjc5Y2I0NmE4ODNiZjYzMjU2NGEz ZmFhYmYwHhcNMjUxMjIzMTMyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODA5MDVhNDQ4ZjFjZWNmMzdjYjAzZDFjMmEwMGJlNWVmMjUyNWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Sqwmz27pFKoDrggPPQlGPj9rp5O sd9d0il4hoy+jFCz6vRk21cyQm+61i9p5zbRAUkIIw8NfVM0ULCHz8kPVa/qTIyh r0Rle0Y3hbvI+4rpQsE1YzAVbXYUd/BHnUIxjfne4FdufhzLRKGg9hKYd3Bb2U/S U5SP7LFPPqQ0elz8EgmeAk0sXZQhvbayM2Umulk/Y5p+2UbyzjqbgE1Kd54XRYWk xYWDb3pKmna+990SV6DITRQUNKAvOcxKdra22QWO3BoZ/B7XWXKeLF5LPFRVIGaC 2442qZZFGHt73oCxmJ3NI4jRE+mNBBFxrfDVHzr3KdsvD/GLK5HyuCXi1wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMgJBaRI8c7PN8sD0cKgC+XvJSXmMB8GA1UdIwQY MBaAFO25JvjGA6q3nLRqiDv2MlZKP6q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2Mt M2JkMTk3OGJmMmY2LzEveUFrRnBFanh6czgzeXdQUndxQUw1ZThsSmVZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NmM5MzQtY2YxNC00YTRmLWFlN2MtM2JkMTk3OGJmMmY2 LzEvN2JrbS1NWURxcmVjdEdxSU9fWXlWa29fcXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCmxzANBgkqhkiG 9w0BAQsFAAOCAQEAcofAh9SI910xw8wOlP9qxbV/H6mz6vP2znHi+kGs86BPSkaS judWxoREopMObvXrCNEugUPOFn2kk1x8xosKy/lOQv0NLEAZcH/fFuTEik9gGbDh zlAKfbyw/SlXuZQRYjG0DD2TUAM9d24FGa+bZZbCj5uH6ajkG12m9gA1jiyxLia8 cM2UspzjzRCSMORIjKfD6qJPBGnLkWFN224LM7lejH++HaoUlzqZatIIXeD990hC D4cZrvrFEbhXU8ZakouwyJXMgZDriBaVpAu9YJQC7U4ekb+cabDcPwHEiIiBgtLR cVvQA+bJVQsweVylWmtwYWZCS0SMEpS0mxg66A== -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:04 2026 by rpki-client