This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa File: hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa (raw, json) Hash identifier: R04Z5dzTVpp/mJ118ZonHq/GgrG1tGSGF8iWqD8/YV8= Subject key identifier: 85:6E:EC:E0:EF:53:74:10:1F:4F:83:AC:6A:4D:8E:8F:90:49:03:3E Certificate issuer: /CN=d850b960ade9449f1e808143a371ce2e3a187e48 Certificate serial: 019AE9C0FA1680E0F7E041E880D13B641EF6 Authority key identifier: D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa Signing time: Thu 04 Dec 2025 14:25:29 +0000 ASPA not before: Thu 04 Dec 2025 14:25:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 43851 Providers: AS: 3170 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:c0:fa:16:80:e0:f7:e0:41:e8:80:d1:3b:64:1e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d850b960ade9449f1e808143a371ce2e3a187e48 Validity Not Before: Dec 4 14:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=856eece0ef5374101f4f83ac6a4d8e8f9049033e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:e7:54:29:e4:f0:db:d2:57:80:df:52:36: 27:04:ff:ac:9b:ee:b8:28:73:1d:43:36:97:57:23: 0c:87:1f:9d:4c:a6:8a:10:4d:2b:ee:db:da:37:68: 45:37:96:8c:f4:f3:73:e4:ec:c4:24:56:b0:f2:98: 74:c3:a0:cc:94:ac:07:3d:96:c8:1d:62:18:ac:8f: 15:46:c9:f4:0c:e6:f3:64:1c:dd:3d:1d:b6:67:38: d4:8a:40:16:81:22:55:32:fe:f1:7e:76:3c:ff:56: 83:44:ee:1f:9b:1d:18:8a:b7:0a:a3:82:28:8b:0a: fe:99:f8:25:c4:7c:ad:51:d5:cf:d9:04:3a:ce:0f: af:53:2e:9c:c1:57:e4:3a:f3:3a:36:28:20:83:67: 1d:23:a0:6c:96:68:0f:c1:f5:9c:d1:96:9a:fb:cf: 03:64:6e:19:26:03:1f:22:c9:4d:13:d2:e0:89:42: 01:b9:31:19:14:01:a5:8b:c0:04:64:d1:cd:af:fd: 4e:b7:40:fa:a8:a7:89:75:e8:13:7c:21:79:56:e8: b5:35:5c:e9:b1:71:5b:22:e6:0d:87:be:3c:14:de: a0:a6:bf:f6:49:6a:02:92:8a:20:34:6f:a2:8c:db: 6c:2c:c7:bd:98:7b:51:29:f1:32:59:47:91:95:35: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6E:EC:E0:EF:53:74:10:1F:4F:83:AC:6A:4D:8E:8F:90:49:03:3E X509v3 Authority Key Identifier: keyid:D8:50:B9:60:AD:E9:44:9F:1E:80:81:43:A3:71:CE:2E:3A:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FC5YK3pRJ8egIFDo3HOLjoYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/hW7s4O9TdBAfT4Osak2Oj5BJAz4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/2FC5YK3pRJ8egIFDo3HOLjoYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 43851 Signature Algorithm: sha256WithRSAEncryption 57:06:0f:de:4f:af:0d:0a:a9:c2:87:7b:23:23:8e:fd:0e:70: 40:7a:bc:d0:e5:54:aa:d8:01:80:03:bc:61:2c:72:ea:05:75: 24:70:ea:06:12:3d:0f:ea:bc:63:db:80:93:90:a2:83:bb:40: 2e:de:b5:d5:4b:86:0a:fc:38:20:d8:ec:cf:62:8e:25:9f:a3: 97:2c:72:64:df:5b:eb:ca:0d:d9:b8:26:1e:05:c1:12:43:1a: aa:0c:14:80:c5:b7:e3:d7:98:71:a9:19:65:fd:27:4e:76:69: b4:8a:2a:eb:0e:8d:b9:86:7c:3e:e8:27:ab:dc:c5:78:67:7a: 86:ea:36:db:4b:7a:2c:70:f2:fc:7c:f8:90:0a:5d:58:9b:ec: 15:e7:d7:a1:0d:bb:65:8c:b9:a8:05:96:37:ae:50:95:65:95: 44:1b:b3:e8:ec:e2:95:7e:ed:af:c9:94:a9:aa:31:d4:4f:10: 09:01:52:91:02:8f:fe:29:7c:da:7b:6b:f6:40:da:14:33:f6: 8e:84:bd:35:ff:4f:dd:3a:87:37:96:d6:11:65:d9:cd:93:a4: 41:f6:e1:e2:8d:9d:02:2c:c5:34:bc:b0:8c:82:c5:51:5b:d7: f3:8f:dd:54:ab:d7:5f:a1:9b:0c:43:0d:73:20:c9:ff:7c:b8: 46:f1:49:5c -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrpwPoWgOD34EHogNE7ZB72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4NTBiOTYwYWRlOTQ0OWYxZTgwODE0M2EzNzFjZTJlM2Ex ODdlNDgwHhcNMjUxMjA0MTQyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTZlZWNlMGVmNTM3NDEwMWY0ZjgzYWM2YTRkOGU4ZjkwNDkwMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2TnVCnk8NvSV4DfUjYnBP+sm+64 KHMdQzaXVyMMhx+dTKaKEE0r7tvaN2hFN5aM9PNz5OzEJFaw8ph0w6DMlKwHPZbI HWIYrI8VRsn0DObzZBzdPR22ZzjUikAWgSJVMv7xfnY8/1aDRO4fmx0YircKo4Io iwr+mfglxHytUdXP2QQ6zg+vUy6cwVfkOvM6Niggg2cdI6BslmgPwfWc0Zaa+88D ZG4ZJgMfIslNE9LgiUIBuTEZFAGli8AEZNHNr/1Ot0D6qKeJdegTfCF5Vui1NVzp sXFbIuYNh748FN6gpr/2SWoCkoogNG+ijNtsLMe9mHtRKfEyWUeRlTVWJQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFIVu7ODvU3QQH0+DrGpNjo+QSQM+MB8GA1UdIwQY MBaAFNhQuWCt6USfHoCBQ6Nxzi46GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt MDE1MGM5NGY5NDBkLzEvaFc3czRPOVRkQkFmVDRPc2FrMk9qNUJKQXo0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk LzEvMkZDNVlLM3BSSjhlZ0lGRG8zSE9Mam9ZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCrSzANBgkqhkiG 9w0BAQsFAAOCAQEAVwYP3k+vDQqpwod7IyOO/Q5wQHq80OVUqtgBgAO8YSxy6gV1 JHDqBhI9D+q8Y9uAk5Cig7tALt611UuGCvw4INjsz2KOJZ+jlyxyZN9b68oN2bgm HgXBEkMaqgwUgMW349eYcakZZf0nTnZptIoq6w6NuYZ8Pugnq9zFeGd6huo220t6 LHDy/Hz4kApdWJvsFefXoQ27ZYy5qAWWN65QlWWVRBuz6OzilX7tr8mUqaox1E8Q CQFSkQKP/il82ntr9kDaFDP2joS9Nf9P3TqHN5bWEWXZzZOkQfbh4o2dAizFNLyw jILFUVvX84/dVKvXX6GbDEMNcyDJ/3y4RvFJXA== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:38 2025 by rpki-client