This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/_dnntVUjWH4EUr4UpgbEErzH-do.asa File: _dnntVUjWH4EUr4UpgbEErzH-do.asa (raw, json) Hash identifier: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY= Subject key identifier: FD:D9:E7:B5:55:23:58:7E:04:52:BE:14:A6:06:C4:12:BC:C7:F9:DA Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Certificate serial: 019AE6B00DF1C265065F60D68CAECD528A52 Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/_dnntVUjWH4EUr4UpgbEErzH-do.asa Signing time: Thu 04 Dec 2025 00:08:08 +0000 ASPA not before: Thu 04 Dec 2025 00:08:08 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 44980 Providers: AS: 8607 AS: 15830 AS: 21371 AS: 29611 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:b0:0d:f1:c2:65:06:5f:60:d6:8c:ae:cd:52:8a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Validity Not Before: Dec 4 00:08:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fdd9e7b55523587e0452be14a606c412bcc7f9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:64:a4:75:93:14:70:14:32:45:49:25:2b: 47:3f:1a:3c:84:aa:e3:89:ab:4d:a1:4d:af:9f:e0: d1:9a:09:f3:ac:e6:82:24:d5:e3:fc:4c:52:74:56: 8b:48:60:55:74:51:2a:08:13:65:b7:85:70:c1:ba: c0:2d:32:83:b2:83:76:80:74:b5:2d:ee:62:99:24: 95:3e:a9:8e:9c:bc:25:5d:ac:d3:e8:99:f1:eb:64: 12:ea:89:29:75:66:59:21:d4:0b:f5:61:ec:b9:7d: ef:7e:68:5a:5c:c5:f1:4d:15:72:35:17:9e:35:4a: 1a:dd:77:90:d0:b5:94:f1:7f:93:e8:96:7d:37:00: f7:cd:b2:d9:8f:6b:d3:12:06:2a:70:a1:1e:a0:95: 52:80:e4:dd:b3:e1:77:02:52:bc:72:59:54:06:0a: 08:db:bd:fe:fb:b8:d5:20:aa:61:68:16:95:02:dd: 6c:c3:c4:af:51:fa:9b:30:57:d6:bf:a2:e7:6e:64: 78:6d:9d:e2:e7:4a:7d:ca:b0:8e:21:f3:d2:c3:ad: 87:b1:8e:b6:ce:1e:7d:48:56:b3:2b:c0:51:84:46: 5a:63:86:be:77:35:40:ea:ba:b6:fd:8c:f1:f1:27: fc:41:d3:bc:4e:25:b4:e9:d9:3a:9a:70:fa:7a:35: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:E7:B5:55:23:58:7E:04:52:BE:14:A6:06:C4:12:BC:C7:F9:DA X509v3 Authority Key Identifier: keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/_dnntVUjWH4EUr4UpgbEErzH-do.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44980 Signature Algorithm: sha256WithRSAEncryption a3:94:c8:cc:e3:fc:e8:86:4c:1d:15:2c:98:52:6e:ef:ab:fd: 8b:b2:ec:13:36:b6:7b:40:d6:40:3f:b3:01:a4:49:ae:91:79: e2:19:8c:8c:96:0c:85:13:82:c8:4e:fc:03:28:4c:17:52:cd: 94:78:44:8c:65:b9:69:51:87:80:a8:fe:42:94:fa:14:c2:47: eb:ee:84:ec:c9:c1:26:6e:8e:2b:e6:0c:d3:b3:61:28:d1:9d: bd:7f:4e:f1:d5:36:95:84:41:a3:0e:2d:88:d5:c8:5a:c3:87: f5:c8:a0:f8:ac:0f:10:28:bf:e3:89:55:df:45:f9:6a:36:16: ed:87:06:50:d7:0b:e2:3a:bb:e0:96:fd:bb:90:ed:d1:ba:46: 17:ad:75:85:bc:dc:03:bb:bb:ad:0a:84:8a:4b:2c:fc:d5:fb: 95:d4:d1:34:b8:19:6f:1a:e0:01:11:74:4e:51:a8:6f:f8:4b: 90:d4:eb:dc:74:37:b1:a9:90:65:3e:40:bf:fd:4c:d1:5d:29: 47:b4:4c:be:ba:0b:dd:d4:6e:65:28:9c:a7:31:e2:25:5d:63: 6c:5c:9b:eb:4e:cf:6f:14:04:7d:d2:2e:a3:ff:b4:17:e8:4a: b0:09:30:24:49:3b:f6:5a:15:5d:f9:5e:98:6d:a6:24:0d:7f: c4:99:ec:d4 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrmsA3xwmUGX2DWjK7NUopSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh MGRmODQwHhcNMjUxMjA0MDAwODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQ5ZTdiNTU1MjM1ODdlMDQ1MmJlMTRhNjA2YzQxMmJjYzdmOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0btkpHWTFHAUMkVJJStHPxo8hKrj iatNoU2vn+DRmgnzrOaCJNXj/ExSdFaLSGBVdFEqCBNlt4VwwbrALTKDsoN2gHS1 Le5imSSVPqmOnLwlXazT6Jnx62QS6okpdWZZIdQL9WHsuX3vfmhaXMXxTRVyNRee NUoa3XeQ0LWU8X+T6JZ9NwD3zbLZj2vTEgYqcKEeoJVSgOTds+F3AlK8cllUBgoI 273++7jVIKphaBaVAt1sw8SvUfqbMFfWv6LnbmR4bZ3i50p9yrCOIfPSw62HsY62 zh59SFazK8BRhEZaY4a+dzVA6rq2/Yzx8Sf8QdO8TiW06dk6mnD6ejUnFwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFP3Z57VVI1h+BFK+FKYGxBK8x/naMB8GA1UdIwQY MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct NzczY2ZjNDMzM2UxLzEvX2RubnRWVWpXSDRFVXI0VXBnYkVFcnpILWRvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCvtDANBgkqhkiG 9w0BAQsFAAOCAQEAo5TIzOP86IZMHRUsmFJu76v9i7LsEza2e0DWQD+zAaRJrpF5 4hmMjJYMhROCyE78AyhMF1LNlHhEjGW5aVGHgKj+QpT6FMJH6+6E7MnBJm6OK+YM 07NhKNGdvX9O8dU2lYRBow4tiNXIWsOH9cig+KwPECi/44lV30X5ajYW7YcGUNcL 4jq74Jb9u5Dt0bpGF611hbzcA7u7rQqEikss/NX7ldTRNLgZbxrgARF0TlGob/hL kNTr3HQ3samQZT5Av/1M0V0pR7RMvroL3dRuZSicpzHiJV1jbFyb607PbxQEfdIu o/+0F+hKsAkwJEk79loVXflemG2mJA1/xJns1A== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:45 2025 by rpki-client