This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa File: ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa (raw, json) Hash identifier: L7UykFBpSjqzqUVBMQkwTJ7cCxGIKVsQmZrcRxIm9gc= Subject key identifier: 0A:11:51:87:95:F0:D2:8A:24:C2:7B:08:2C:9D:D4:05:D6:EE:E7:2F Certificate issuer: /CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Certificate serial: 019BE1F0C1837F30C208FC309AD409B9020A Authority key identifier: 2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa Signing time: Wed 21 Jan 2026 19:03:30 +0000 ASPA not before: Wed 21 Jan 2026 19:03:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 202673 Providers: AS: 174 AS: 3223 AS: 9002 AS: 34872 AS: 53667 AS: 56630 AS: 60068 AS: 207994 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:f0:c1:83:7f:30:c2:08:fc:30:9a:d4:09:b9:02:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3ee18d09748f46dc53ad94b729f31110acac34 Validity Not Before: Jan 21 19:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a11518795f0d28a24c27b082c9dd405d6eee72f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:39:04:9d:6e:87:20:bf:ba:ac:f8:76:cc:4c: 91:a5:90:39:94:9e:6d:9f:3c:c9:fa:99:fc:63:c9: ef:a9:e5:13:95:f2:95:ad:89:6b:b3:c6:11:ee:02: 7f:c5:f0:d1:73:84:7e:c1:27:d1:2a:5a:03:a4:08: 16:ea:88:cf:42:3b:f8:dd:0e:be:fd:04:05:1b:cc: eb:1e:35:bd:26:5e:22:85:a8:fc:24:85:71:e2:9e: 84:4e:4f:15:be:30:ce:a2:c3:f6:86:06:e4:6e:1a: 12:d6:69:30:66:77:93:29:ec:24:25:a5:29:68:7e: 85:c4:ef:d5:54:36:1d:f1:56:d3:1f:87:fe:d2:43: f2:5e:0f:ad:6c:6b:44:5d:35:20:ad:2b:bc:2d:fd: f6:4d:f9:64:e6:df:4f:61:ad:8e:3e:4e:8b:d5:84: 41:39:39:d1:e5:be:e1:c6:24:c1:5b:55:f4:ff:38: 60:3c:31:b5:33:24:db:f1:c0:db:a0:c1:ea:1d:b4: f7:fe:c0:3b:0d:35:89:3c:d0:fd:93:c9:05:76:f8: 3e:a4:38:b7:17:7b:f0:a2:28:d1:3c:6d:23:e2:68: ea:f0:91:ed:3a:c8:80:71:57:27:40:4e:0e:15:3e: 03:5b:9e:6d:33:82:86:61:ea:e8:53:bd:70:34:91: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:51:87:95:F0:D2:8A:24:C2:7B:08:2C:9D:D4:05:D6:EE:E7:2F X509v3 Authority Key Identifier: keyid:2E:3E:E1:8D:09:74:8F:46:DC:53:AD:94:B7:29:F3:11:10:AC:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lj7hjQl0j0bcU62UtynzERCsrDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/ChFRh5Xw0ookwnsILJ3UBdbu5y8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/fd4999-7e0e-4bb7-aba9-d84869ff9561/1/Lj7hjQl0j0bcU62UtynzERCsrDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202673 Signature Algorithm: sha256WithRSAEncryption 6c:c0:b2:e5:fb:fb:c9:7a:97:c1:e2:1b:a7:78:4d:bf:44:fd: 3f:fc:43:6d:00:15:a3:ff:93:5e:cd:2c:4b:fc:c9:46:0e:bc: e5:57:83:8a:1f:51:58:0c:43:42:7a:27:a0:08:a1:dd:48:ea: 84:24:b5:2d:ed:f2:c0:28:2c:d1:cd:33:90:3b:51:a7:c2:23: f5:f1:15:b9:33:da:82:da:38:07:04:0f:18:7a:34:1f:a8:90: 10:7d:7e:6b:2a:27:d6:2f:46:75:38:ea:47:e0:80:a5:46:fb: f8:d8:a5:64:7d:cd:82:94:47:9a:50:a8:db:db:33:b9:45:c9: 21:56:7c:6d:d9:68:a4:fc:8e:5e:72:8c:af:e2:54:91:b6:78: d3:a3:1a:0a:6b:50:50:d8:85:3f:57:75:30:f8:35:b8:ff:55: 88:c2:f5:02:f6:97:12:8c:1f:59:02:02:eb:cc:6e:a3:92:d9: 98:c7:9c:c1:4d:c8:41:32:eb:00:19:4a:82:70:0b:1a:35:3e: 6c:e3:d8:25:05:d8:5d:86:bf:a5:1f:61:ea:a8:07:38:6e:f8: 4b:96:2d:0a:85:ab:49:8c:4d:15:bb:d9:1d:01:89:e8:bd:f6: c9:44:7b:2b:9c:8b:f9:09:7f:20:bc:82:20:44:df:ef:9f:76: ef:47:b3:13 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvh8MGDfzDCCPwwmtQJuQIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlM2VlMThkMDk3NDhmNDZkYzUzYWQ5NGI3MjlmMzExMTBh Y2FjMzQwHhcNMjYwMTIxMTkwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTExNTE4Nzk1ZjBkMjhhMjRjMjdiMDgyYzlkZDQwNWQ2ZWVlNzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzkEnW6HIL+6rPh2zEyRpZA5lJ5t nzzJ+pn8Y8nvqeUTlfKVrYlrs8YR7gJ/xfDRc4R+wSfRKloDpAgW6ojPQjv43Q6+ /QQFG8zrHjW9Jl4ihaj8JIVx4p6ETk8VvjDOosP2hgbkbhoS1mkwZneTKewkJaUp aH6FxO/VVDYd8VbTH4f+0kPyXg+tbGtEXTUgrSu8Lf32Tflk5t9PYa2OPk6L1YRB OTnR5b7hxiTBW1X0/zhgPDG1MyTb8cDboMHqHbT3/sA7DTWJPND9k8kFdvg+pDi3 F3vwoijRPG0j4mjq8JHtOsiAcVcnQE4OFT4DW55tM4KGYeroU71wNJEzTwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAoRUYeV8NKKJMJ7CCyd1AXW7ucvMB8GA1UdIwQY MBaAFC4+4Y0JdI9G3FOtlLcp8xEQrKw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTkt ZDg0ODY5ZmY5NTYxLzEvQ2hGUmg1WHcwb29rd25zSUxKM1VCZGJ1NXk4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mZDQ5OTktN2UwZS00YmI3LWFiYTktZDg0ODY5ZmY5NTYx LzEvTGo3aGpRbDBqMGJjVTYyVXR5bnpFUkNzckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXsTANBgkqhkiG 9w0BAQsFAAOCAQEAbMCy5fv7yXqXweIbp3hNv0T9P/xDbQAVo/+TXs0sS/zJRg68 5VeDih9RWAxDQnonoAih3UjqhCS1Le3ywCgs0c0zkDtRp8Ij9fEVuTPagto4BwQP GHo0H6iQEH1+ayon1i9GdTjqR+CApUb7+NilZH3NgpRHmlCo29szuUXJIVZ8bdlo pPyOXnKMr+JUkbZ406MaCmtQUNiFP1d1MPg1uP9ViML1AvaXEowfWQIC68xuo5LZ mMecwU3IQTLrABlKgnALGjU+bOPYJQXYXYa/pR9h6qgHOG74S5YtCoWrSYxNFbvZ HQGJ6L32yUR7K5yL+Ql/ILyCIETf759270ezEw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:09 2026 by rpki-client