This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/0MTEIApza-zMErqUQKyZ3kgNJ9E.asa File: 0MTEIApza-zMErqUQKyZ3kgNJ9E.asa (raw, json) Hash identifier: qpLhmjd5x1a/DwAKZgvcj6+FKTceZgxXZNAd83zxp78= Subject key identifier: D0:C4:C4:20:0A:73:6B:EC:CC:12:BA:94:40:AC:99:DE:48:0D:27:D1 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019AFE09D8EEAE197996BDA09E912C86A705 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/0MTEIApza-zMErqUQKyZ3kgNJ9E.asa Signing time: Mon 08 Dec 2025 12:57:29 +0000 ASPA not before: Mon 08 Dec 2025 12:57:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 202010 Providers: AS: 0 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:09:d8:ee:ae:19:79:96:bd:a0:9e:91:2c:86:a7:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Dec 8 12:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0c4c4200a736beccc12ba9440ac99de480d27d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:15:52:ac:be:0d:6f:a8:9d:59:9c:5a:5b:57: 2e:88:bd:1b:88:8a:ce:c4:90:8f:82:53:b7:b9:c7: 43:dd:b2:ca:82:42:26:73:3f:d8:9e:c9:c7:c8:77: 65:04:1d:7e:ca:99:27:d9:af:09:ab:5e:f1:94:81: 4b:7a:50:0d:04:67:ba:13:b4:06:b8:35:1c:d5:e2: 01:79:51:ac:0b:0c:dd:d6:1f:0f:f0:d2:c5:e2:3b: a5:3b:9f:d0:5c:2c:d4:4f:69:76:f2:1b:de:2f:be: 96:ca:7a:c7:27:2d:e7:3b:e7:4e:46:c1:73:99:e0: 93:9a:ef:f6:52:b1:52:e1:66:98:06:49:c9:44:8a: 10:5e:b6:a3:49:3d:dc:75:cf:38:e8:42:7a:22:01: 31:06:4c:36:59:0d:25:f0:40:fd:1c:4b:30:bb:31: 8a:7b:ad:39:04:02:f4:41:7e:57:d4:d3:05:65:6f: a7:85:62:16:3d:55:60:ae:54:db:b4:c3:f2:d7:40: 0b:b5:24:65:1b:b4:08:0d:19:8e:78:56:ca:0e:f3: b0:65:e8:d9:51:cd:6d:5a:74:c3:fd:8c:ff:f1:c7: ca:ee:33:3f:4d:b9:82:10:bd:4a:9a:60:47:05:aa: 0b:78:b5:74:85:12:e8:24:a4:67:d4:c5:98:3b:96: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:C4:20:0A:73:6B:EC:CC:12:BA:94:40:AC:99:DE:48:0D:27:D1 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/0MTEIApza-zMErqUQKyZ3kgNJ9E.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202010 Signature Algorithm: sha256WithRSAEncryption 81:32:c6:a9:4f:f0:49:8f:54:b8:73:44:de:0f:d0:4d:b3:2f: c0:31:f6:00:7e:00:e4:ad:09:d3:10:ce:b2:5e:08:fe:66:01: ec:28:d5:7f:c7:b7:9b:12:68:23:2c:50:73:b4:51:8e:0b:a3: 8c:5c:9f:e3:38:42:e7:44:88:a4:6c:5a:3b:0f:ca:a9:96:54: 7e:92:7f:ea:8a:02:58:e1:08:39:d6:8f:51:d5:f0:ce:44:4c: b5:c8:12:a4:bb:53:f5:1d:5e:bf:9d:61:36:20:fa:de:71:83: e8:c4:5a:eb:f2:bd:8f:55:34:b3:17:f0:5d:f8:8d:90:62:11: e6:11:cb:4e:13:6a:7e:ad:dc:38:8a:1b:01:ea:62:7b:26:c1: fb:e4:e9:24:bb:e3:c9:0f:b2:ef:d7:4d:cb:d5:07:bb:dc:3f: a0:6e:00:54:35:6e:0c:8a:87:e1:e3:c3:a1:24:25:43:f8:9b: b0:a1:3f:18:2f:48:2e:3c:9d:2f:b0:5c:01:3f:94:7d:0f:4e: 99:5b:34:62:cb:1d:fd:2f:ef:4c:14:13:6f:2e:58:86:db:08: dd:d0:92:fa:78:4e:43:b9:d1:49:f6:70:fc:54:8e:27:76:24: 1d:e4:4c:59:51:2e:00:c1:84:59:6c:5a:f4:e7:38:57:67:98: e8:aa:9a:b0 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr+Cdjurhl5lr2gnpEshqcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjUxMjA4MTI1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGM0YzQyMDBhNzM2YmVjY2MxMmJhOTQ0MGFjOTlkZTQ4MGQyN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RVSrL4Nb6idWZxaW1cuiL0biIrO xJCPglO3ucdD3bLKgkImcz/YnsnHyHdlBB1+ypkn2a8Jq17xlIFLelANBGe6E7QG uDUc1eIBeVGsCwzd1h8P8NLF4julO5/QXCzUT2l28hveL76WynrHJy3nO+dORsFz meCTmu/2UrFS4WaYBknJRIoQXrajST3cdc846EJ6IgExBkw2WQ0l8ED9HEswuzGK e605BAL0QX5X1NMFZW+nhWIWPVVgrlTbtMPy10ALtSRlG7QIDRmOeFbKDvOwZejZ Uc1tWnTD/Yz/8cfK7jM/TbmCEL1KmmBHBaoLeLV0hRLoJKRn1MWYO5YYQwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNDExCAKc2vszBK6lECsmd5IDSfRMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvME1URUlBcHphLXpNRXJxVVFLeVoza2dOSjlFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVGjANBgkqhkiG 9w0BAQsFAAOCAQEAgTLGqU/wSY9UuHNE3g/QTbMvwDH2AH4A5K0J0xDOsl4I/mYB 7CjVf8e3mxJoIyxQc7RRjgujjFyf4zhC50SIpGxaOw/KqZZUfpJ/6ooCWOEIOdaP UdXwzkRMtcgSpLtT9R1ev51hNiD63nGD6MRa6/K9j1U0sxfwXfiNkGIR5hHLThNq fq3cOIobAepieybB++TpJLvjyQ+y79dNy9UHu9w/oG4AVDVuDIqH4ePDoSQlQ/ib sKE/GC9ILjydL7BcAT+UfQ9OmVs0Yssd/S/vTBQTby5YhtsI3dCS+nhOQ7nRSfZw /FSOJ3YkHeRMWVEuAMGEWWxa9Oc4V2eY6KqasA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:50 2025 by rpki-client