This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/KkZ9T-InsQon19zi2pp0iLPe7uw.asa File: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (raw, json) Hash identifier: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw= Subject key identifier: 2A:46:7D:4F:E2:27:B1:0A:27:D7:DC:E2:DA:9A:74:88:B3:DE:EE:EC Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Certificate serial: 019B89699927C91939924BEE36DDEC031D2A Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/KkZ9T-InsQon19zi2pp0iLPe7uw.asa Signing time: Sun 04 Jan 2026 14:29:17 +0000 ASPA not before: Sun 04 Jan 2026 14:29:17 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 206974 Providers: AS: 56595 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:69:99:27:c9:19:39:92:4b:ee:36:dd:ec:03:1d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Validity Not Before: Jan 4 14:29:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a467d4fe227b10a27d7dce2da9a7488b3deeeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:72:40:99:4c:33:f0:62:63:39:25:b5:6a: 6f:90:81:3d:7a:60:a1:cc:15:a4:f5:b2:0b:df:ee: 78:1d:01:5a:30:9a:c4:f5:5b:a2:6c:00:36:53:27: 08:5f:02:dd:fc:41:b1:5b:e2:d5:37:3b:4b:bb:c8: c7:a2:94:47:c3:aa:c3:bf:c4:d2:58:bf:54:ce:83: 6c:ce:8c:16:61:2e:0e:25:de:dd:45:6d:73:3d:10: 02:5a:fc:c8:d1:b9:03:15:e0:dc:c9:6b:aa:38:ec: 70:55:bc:ba:a1:57:a7:77:0c:f5:20:18:c4:6e:ec: 2d:49:b6:ff:31:1b:b4:9d:12:f5:67:86:6f:90:45: 75:26:a3:c6:b0:83:ee:53:f0:fb:b8:60:d3:85:74: 0a:7b:ac:6e:8b:7f:37:1d:88:65:a2:1f:f8:e2:d3: bb:34:44:f7:de:1a:57:42:ba:1b:6f:4e:7d:42:eb: 95:89:44:bc:66:45:75:d9:5c:0d:e8:26:44:50:53: de:1a:59:e2:40:88:4a:3c:b0:aa:2e:ff:b3:a8:47: de:8b:0c:2e:dc:f4:aa:f7:72:72:f7:67:df:c6:0c: 79:11:75:fe:2d:56:e0:e8:3b:e7:f9:f5:96:37:58: b9:51:db:14:80:8e:96:c4:af:12:96:90:09:9c:42: 18:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:46:7D:4F:E2:27:B1:0A:27:D7:DC:E2:DA:9A:74:88:B3:DE:EE:EC X509v3 Authority Key Identifier: keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/KkZ9T-InsQon19zi2pp0iLPe7uw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206974 Signature Algorithm: sha256WithRSAEncryption 0b:1f:45:34:e0:c9:b6:28:7d:5e:a4:ec:a7:78:68:d2:6a:94: f2:03:76:73:b8:8c:13:9e:81:0f:89:d2:f3:83:c2:02:1a:25: e3:81:80:d2:02:71:98:94:6d:7d:eb:73:65:b0:93:97:ff:3f: 73:97:6b:8c:7b:40:42:27:da:5e:5c:52:b6:f7:c3:ff:30:57: b8:ce:5f:87:8e:10:2f:88:b8:06:41:71:ea:47:52:7b:d3:19: fd:e3:a6:b2:d1:65:b8:ae:e2:93:20:57:c5:f7:e0:26:d8:e5: 7e:2b:25:82:5f:54:24:8b:e8:9b:1a:6c:5d:36:db:89:3f:d9: ad:5f:9f:49:be:c0:07:e8:b1:e9:eb:55:a7:6a:0f:9c:44:2f: f8:87:f9:a7:8d:62:52:61:ee:97:93:5d:e7:e2:4f:f6:db:1f: 43:8f:44:b6:42:83:7b:86:14:15:cb:53:b8:53:5d:3a:f1:ab: 7c:7a:24:34:ac:1a:0c:9a:0e:e2:1a:73:6d:04:04:4d:95:59: 38:b7:87:2e:42:44:85:3c:f7:13:73:f3:f8:5c:e0:f5:db:86: 8e:4e:45:77:23:a9:4f:1a:61:ab:37:17:3d:23:68:39:2e:42: 33:c3:a7:76:07:b0:3b:1f:02:f5:7e:90:07:57:67:35:2e:a8: aa:58:25:d1 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZuJaZknyRk5kkvuNt3sAx0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz MjBmMTYwHhcNMjYwMTA0MTQyOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTQ2N2Q0ZmUyMjdiMTBhMjdkN2RjZTJkYTlhNzQ4OGIzZGVlZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KdyQJlMM/BiYzkltWpvkIE9emCh zBWk9bIL3+54HQFaMJrE9VuibAA2UycIXwLd/EGxW+LVNztLu8jHopRHw6rDv8TS WL9UzoNszowWYS4OJd7dRW1zPRACWvzI0bkDFeDcyWuqOOxwVby6oVendwz1IBjE buwtSbb/MRu0nRL1Z4ZvkEV1JqPGsIPuU/D7uGDThXQKe6xui383HYhloh/44tO7 NET33hpXQrobb059QuuViUS8ZkV12VwN6CZEUFPeGlniQIhKPLCqLv+zqEfeiwwu 3PSq93Jy92ffxgx5EXX+LVbg6Dvn+fWWN1i5UdsUgI6WxK8SlpAJnEIYcQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCpGfU/iJ7EKJ9fc4tqadIiz3u7sMB8GA1UdIwQY MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct MWM5Y2VmOWQ4ODJmLzEvS2taOVQtSW5zUW9uMTl6aTJwcDBpTFBlN3V3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMofjANBgkqhkiG 9w0BAQsFAAOCAQEACx9FNODJtih9XqTsp3ho0mqU8gN2c7iME56BD4nS84PCAhol 44GA0gJxmJRtfetzZbCTl/8/c5drjHtAQifaXlxStvfD/zBXuM5fh44QL4i4BkFx 6kdSe9MZ/eOmstFluK7ikyBXxffgJtjlfislgl9UJIvomxpsXTbbiT/ZrV+fSb7A B+ix6etVp2oPnEQv+If5p41iUmHul5Nd5+JP9tsfQ49EtkKDe4YUFctTuFNdOvGr fHokNKwaDJoO4hpzbQQETZVZOLeHLkJEhTz3E3Pz+Fzg9duGjk5FdyOpTxphqzcX PSNoOS5CM8OndgewOx8C9X6QB1dnNS6oqlgl0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:10:50 2026 by rpki-client