This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa File: TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa (raw, json) Hash identifier: e9qExWlAmx5vz0q1YZDmh+ciU3YnYVxiZifW/Xth3Zc= Subject key identifier: 4C:89:99:EC:3A:46:5B:0E:6D:18:FD:8E:85:EF:11:74:01:D0:B2:91 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019AFE0AC4CE9CFBD2A91A61453AE009CC35 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa Signing time: Mon 08 Dec 2025 12:58:29 +0000 ASPA not before: Mon 08 Dec 2025 12:58:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 212557 Providers: AS: 0 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:0a:c4:ce:9c:fb:d2:a9:1a:61:45:3a:e0:09:cc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Dec 8 12:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c8999ec3a465b0e6d18fd8e85ef117401d0b291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:e7:69:00:df:36:9d:13:6c:18:f4:c5:f8: 5d:66:20:d0:2c:57:e2:4f:77:32:e0:97:a5:d8:d2: b5:96:f8:1c:ca:4e:ed:c6:ec:70:28:00:b5:b6:9c: 2f:eb:f4:dd:90:22:6a:b7:e7:5c:37:dd:65:cf:d8: 4d:84:02:aa:db:3e:86:e2:eb:f2:a9:03:e8:98:f8: c7:b3:6e:8d:28:cf:ae:5a:d2:f5:eb:41:55:4e:7e: 18:b6:91:f4:07:d1:27:5d:d8:1d:1a:8d:40:b3:a4: 29:36:5a:cc:76:13:23:21:b0:13:d1:d8:90:ff:a0: e2:b4:0c:fe:d2:7a:80:62:59:2f:42:ac:3a:df:ec: 6f:01:9f:6a:d2:c6:6f:d7:29:63:cf:30:42:0a:5d: e9:5a:cd:6f:31:95:4a:6c:a6:10:f0:79:30:57:62: af:75:4f:22:fb:18:43:2a:39:77:c2:39:cc:99:47: 36:01:96:a7:20:1f:17:ab:ee:2c:8e:b8:a1:c2:ac: 10:34:99:99:0e:14:76:23:e1:6e:43:94:d5:35:a8: e0:b6:9a:3e:79:22:e8:14:43:6c:74:cd:42:fb:e9: ee:54:b4:76:d0:c3:e4:6e:6f:c1:0b:1d:ba:54:6e: 20:60:09:d6:a0:8d:8a:a9:6b:b5:f0:62:da:c9:d0: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:89:99:EC:3A:46:5B:0E:6D:18:FD:8E:85:EF:11:74:01:D0:B2:91 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/TImZ7DpGWw5tGP2Ohe8RdAHQspE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212557 Signature Algorithm: sha256WithRSAEncryption bc:80:b3:99:88:e7:57:76:5b:23:52:7b:10:c8:aa:11:94:93: c9:21:07:6f:47:75:af:b1:7c:72:c0:6d:18:99:f5:cc:0f:e2: 5f:74:ec:73:83:3c:87:cd:5b:b7:24:65:f7:7b:98:1a:6c:e2: c6:51:c5:d2:f6:5f:21:19:27:fb:80:91:dc:70:73:e8:5c:0e: ec:91:5c:a7:fa:13:ae:c2:9a:64:e9:29:91:d9:e7:fa:81:94: c5:1f:ff:58:bf:d4:02:7b:0c:42:3c:80:ef:8b:9c:ee:0f:7a: d6:c5:d7:c3:01:fd:96:42:b9:a1:53:a3:5f:47:61:85:eb:0e: 22:8e:5b:97:7a:cb:c0:cc:e6:1f:c3:0d:dd:4d:5d:1b:de:28: 97:6f:2f:ab:39:61:fe:a7:a8:f1:68:3b:1c:78:51:06:6b:9a: cf:0f:b2:68:0d:23:0b:76:10:49:4d:c7:ec:72:9a:7f:ed:4a: c8:9f:d1:1a:d9:54:07:45:44:a0:63:2c:c7:74:5c:7a:fd:47: b1:e2:9d:d0:a4:4d:3d:f5:10:58:9d:b4:25:5c:c1:93:89:5d: d3:e4:cd:a4:bd:48:4b:c4:63:a2:83:dd:50:ff:25:05:d8:5f: a6:ac:be:25:88:8f:bb:ad:5d:95:01:9a:2c:0d:05:8f:66:87: 36:f1:f7:40 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr+CsTOnPvSqRphRTrgCcw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjUxMjA4MTI1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Yzg5OTllYzNhNDY1YjBlNmQxOGZkOGU4NWVmMTE3NDAxZDBiMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQbnaQDfNp0TbBj0xfhdZiDQLFfi T3cy4Jel2NK1lvgcyk7txuxwKAC1tpwv6/TdkCJqt+dcN91lz9hNhAKq2z6G4uvy qQPomPjHs26NKM+uWtL160FVTn4YtpH0B9EnXdgdGo1As6QpNlrMdhMjIbAT0diQ /6DitAz+0nqAYlkvQqw63+xvAZ9q0sZv1yljzzBCCl3pWs1vMZVKbKYQ8HkwV2Kv dU8i+xhDKjl3wjnMmUc2AZanIB8Xq+4sjrihwqwQNJmZDhR2I+FuQ5TVNajgtpo+ eSLoFENsdM1C++nuVLR20MPkbm/BCx26VG4gYAnWoI2KqWu18GLaydDQ3QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFEyJmew6RlsObRj9joXvEXQB0LKRMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEvVEltWjdEcEdXdzV0R1AyT2hlOFJkQUhRc3BFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+TTANBgkqhkiG 9w0BAQsFAAOCAQEAvICzmYjnV3ZbI1J7EMiqEZSTySEHb0d1r7F8csBtGJn1zA/i X3Tsc4M8h81btyRl93uYGmzixlHF0vZfIRkn+4CR3HBz6FwO7JFcp/oTrsKaZOkp kdnn+oGUxR//WL/UAnsMQjyA74uc7g961sXXwwH9lkK5oVOjX0dhhesOIo5bl3rL wMzmH8MN3U1dG94ol28vqzlh/qeo8Wg7HHhRBmuazw+yaA0jC3YQSU3H7HKaf+1K yJ/RGtlUB0VEoGMsx3Rcev1HseKd0KRNPfUQWJ20JVzBk4ld0+TNpL1IS8RjooPd UP8lBdhfpqy+JYiPu61dlQGaLA0Fj2aHNvH3QA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:51 2025 by rpki-client