This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa File: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (raw, json) Hash identifier: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE= Subject key identifier: 94:F4:60:8D:75:09:2F:36:8E:04:72:35:02:BD:C1:E9:22:85:12:B5 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B21267F50B98E28A01F357F995C68E10C Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa Signing time: Mon 15 Dec 2025 08:35:29 +0000 ASPA not before: Mon 15 Dec 2025 08:35:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 210591 Providers: AS: 5518 AS: 8194 AS: 12578 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:26:7f:50:b9:8e:28:a0:1f:35:7f:99:5c:68:e1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Dec 15 08:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94f4608d75092f368e04723502bdc1e9228512b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:42:4e:75:24:5a:83:fb:e2:e9:c7:b9:d4: f8:dd:d2:13:c5:34:aa:a7:3e:b5:23:db:87:e5:06: 31:c9:b1:3d:9a:10:0b:83:ad:b4:7c:39:3a:78:ce: 3d:a2:84:24:0d:52:f4:5e:97:86:ed:2a:34:15:01: 2c:dd:16:31:34:ad:99:7e:77:98:c2:cf:ee:35:2e: b8:55:2a:b1:4d:28:37:12:cd:bf:b0:7c:68:78:6e: d4:b2:cc:d3:80:ad:d9:fa:84:40:60:d3:af:af:9e: 73:21:ed:70:33:21:fe:f0:56:04:00:82:a5:06:0c: 92:d7:7d:2f:7c:29:58:fd:f7:30:3e:4f:09:36:57: 87:d4:a9:68:60:ea:af:df:7f:69:26:9e:8f:80:c6: 3b:54:93:2a:57:34:1c:50:e5:83:b8:9d:49:d6:17: 1e:1a:46:9b:66:be:8c:ff:9c:60:42:93:a7:d1:9f: 35:d6:db:c1:3c:f0:3c:9a:f5:f1:3c:b1:02:6c:de: 54:fa:e8:8f:be:e1:f0:68:92:ba:6b:b9:25:b4:72: 3c:a7:d2:c8:a0:ce:0f:08:32:96:4c:36:e5:d5:0a: 62:b9:84:a0:ad:74:9a:2b:ce:5e:fb:89:ef:64:62: e6:82:d8:63:93:d1:64:65:0f:f7:e1:40:04:d1:41: 6f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:60:8D:75:09:2F:36:8E:04:72:35:02:BD:C1:E9:22:85:12:B5 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210591 Signature Algorithm: sha256WithRSAEncryption 2a:a7:3f:9b:d9:59:fc:00:e0:00:60:45:9a:b7:32:46:c2:d0: ba:5b:c0:bd:3e:b3:b3:aa:5b:2e:12:2c:b8:be:de:8e:58:db: 21:90:55:09:d4:22:d2:dc:05:15:1c:6c:57:1b:4d:1f:0f:9f: 7e:8c:c1:a7:e9:a9:22:60:35:6d:18:4c:0c:a0:fc:fc:d7:d4: a6:eb:ec:96:db:00:ab:8a:ab:36:2e:36:11:45:f6:b3:6d:a3: 63:65:b0:38:af:f5:e5:a8:74:87:35:19:56:02:0e:4d:ef:6a: 25:3d:62:e9:10:13:3e:41:8c:11:80:8a:73:26:42:d9:66:ef: 1f:19:f8:9b:7e:96:86:97:5c:26:51:90:9c:b1:88:6e:af:a3: 7a:a6:0a:23:c8:4c:c8:86:6f:f9:3b:39:1e:ee:d7:6d:63:2c: 99:31:e8:3b:1a:21:d8:3b:97:e5:08:c7:54:fc:af:d0:55:53: b3:51:6e:31:93:26:50:77:e3:ab:db:2b:41:80:41:2d:bd:c3: 15:79:53:57:c0:8f:65:1c:a3:01:e2:1f:2f:ad:28:3f:d8:66: ba:e8:c3:68:52:46:5b:b6:e6:78:f2:d9:4a:e0:38:67:6e:c4: d3:c0:eb:57:eb:e8:e6:8e:31:74:40:ab:1b:6c:71:fd:90:21: c3:92:85:bd -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZshJn9QuY4ooB81f5lcaOEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUxMjE1MDgzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGY0NjA4ZDc1MDkyZjM2OGUwNDcyMzUwMmJkYzFlOTIyODUxMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v1CTnUkWoP74unHudT43dITxTSq pz61I9uH5QYxybE9mhALg620fDk6eM49ooQkDVL0XpeG7So0FQEs3RYxNK2ZfneY ws/uNS64VSqxTSg3Es2/sHxoeG7UsszTgK3Z+oRAYNOvr55zIe1wMyH+8FYEAIKl BgyS130vfClY/fcwPk8JNleH1KloYOqv339pJp6PgMY7VJMqVzQcUOWDuJ1J1hce GkabZr6M/5xgQpOn0Z811tvBPPA8mvXxPLECbN5U+uiPvuHwaJK6a7kltHI8p9LI oM4PCDKWTDbl1QpiuYSgrXSaK85e+4nvZGLmgthjk9FkZQ/34UAE0UFvyQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJT0YI11CS82jgRyNQK9wekihRK1MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvbFBSZ2pYVUpMemFPQkhJMUFyM0I2U0tGRXJVLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2nzANBgkqhkiG 9w0BAQsFAAOCAQEAKqc/m9lZ/ADgAGBFmrcyRsLQulvAvT6zs6pbLhIsuL7ejljb IZBVCdQi0twFFRxsVxtNHw+ffozBp+mpImA1bRhMDKD8/NfUpuvsltsAq4qrNi42 EUX2s22jY2WwOK/15ah0hzUZVgIOTe9qJT1i6RATPkGMEYCKcyZC2WbvHxn4m36W hpdcJlGQnLGIbq+jeqYKI8hMyIZv+Ts5Hu7XbWMsmTHoOxoh2DuX5QjHVPyv0FVT s1FuMZMmUHfjq9srQYBBLb3DFXlTV8CPZRyjAeIfL60oP9hmuujDaFJGW7bmePLZ SuA4Z27E08DrV+vo5o4xdECrG2xx/ZAhw5KFvQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:53 2025 by rpki-client