This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/4YqUfZCeiEUJuCY-psjsNuWtksw.asa File: 4YqUfZCeiEUJuCY-psjsNuWtksw.asa (raw, json) Hash identifier: sR1+4a2yNEE9K27sk1iLMEzEGkqFA/HBPoWU5NgO9QU= Subject key identifier: E1:8A:94:7D:90:9E:88:45:09:B8:26:3E:A6:C8:EC:36:E5:AD:92:CC Certificate issuer: /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e Certificate serial: 019B1F8A81C4CD57BB6C389EC763F457E19C Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/4YqUfZCeiEUJuCY-psjsNuWtksw.asa Signing time: Mon 15 Dec 2025 01:05:29 +0000 ASPA not before: Mon 15 Dec 2025 01:05:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214906 Providers: AS: 24381 AS: 207252 AS: 210633 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:8a:81:c4:cd:57:bb:6c:38:9e:c7:63:f4:57:e1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e Validity Not Before: Dec 15 01:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e18a947d909e884509b8263ea6c8ec36e5ad92cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:8b:1f:45:ca:49:c7:16:b3:5d:6a:45:d4: c4:04:a0:87:db:e8:09:5e:ea:da:ff:5d:e3:c8:f7: d2:9d:f4:1e:a0:6d:7d:0b:b5:3c:c3:98:19:71:33: 35:e4:b7:93:91:6c:68:6b:9a:19:cc:56:0d:f5:67: 4f:4a:07:b7:71:0c:6e:22:a3:55:58:e6:27:7c:2d: 3a:48:88:77:99:11:67:5b:a6:80:ed:63:46:5f:39: c6:55:5d:56:55:3c:15:22:6d:c5:81:c1:20:36:a0: 0e:b4:3a:a1:86:0c:c2:c5:ee:50:45:ea:9b:db:db: c0:b4:7c:32:e2:d8:6d:e1:da:64:e2:ad:24:56:03: 49:58:ee:dc:8b:7e:66:fb:28:e0:08:0f:77:dd:b5: fc:28:ed:60:a6:1a:7a:66:2b:d7:2c:0b:8e:57:9b: f8:ca:31:75:c5:7a:d7:d5:0e:30:4e:78:ec:19:49: 1d:88:67:c7:f0:aa:90:50:37:ee:07:88:2b:7e:e6: 2b:24:6b:b0:a4:b9:73:89:89:d9:35:f8:ae:0c:49: 68:85:43:af:ba:94:9e:51:70:8b:06:19:5c:7a:2c: 5a:45:9b:24:19:ec:9b:e8:c4:d7:b4:ad:3e:d4:ae: 01:8f:35:55:0a:09:2d:7c:90:d7:7a:40:05:bc:99: 85:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8A:94:7D:90:9E:88:45:09:B8:26:3E:A6:C8:EC:36:E5:AD:92:CC X509v3 Authority Key Identifier: keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/4YqUfZCeiEUJuCY-psjsNuWtksw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214906 Signature Algorithm: sha256WithRSAEncryption a8:17:bf:d1:04:6a:d2:f6:b6:14:f2:6c:60:66:9f:0a:e6:22: 9d:87:93:a1:37:eb:01:b7:26:cb:b9:69:4b:c7:8a:fa:8d:a7: 32:4c:6c:ab:43:c5:03:ed:8c:9f:ad:10:c4:48:a7:01:c8:78: 68:b8:4c:71:e4:e9:44:19:0d:7c:b5:d5:f4:32:aa:50:85:bd: 4b:29:ea:6c:78:4e:a3:74:74:3b:a7:34:b6:14:f4:c4:70:59: e0:18:00:88:c4:45:22:69:a6:88:2c:53:5d:7f:e5:90:2b:1d: 9c:6d:46:13:bb:cf:ef:f7:bd:01:8a:d0:a0:de:62:3a:d6:8b: 20:b9:b5:31:8b:d6:22:f7:d2:30:2d:0e:ce:76:24:95:ed:88: da:4e:11:55:32:6e:d0:e0:87:1d:12:39:b8:3c:d1:2b:ce:59: 02:da:27:fa:90:ca:5c:e9:9d:6d:cb:fa:bb:a7:94:a2:42:b1: 99:c9:97:43:9c:73:51:bf:73:c3:6d:b5:2e:ad:a4:c5:f8:79: 15:cb:02:f6:d2:00:af:cb:bc:1c:30:7d:e9:db:61:8e:40:27: bf:8e:3a:56:d3:a2:d5:d8:e2:49:f1:16:fb:f8:3f:41:e4:5c: 8d:f3:d7:c9:39:7b:51:35:44:d9:e4:34:6d:26:7f:9b:ad:f2: af:96:f8:09 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsfioHEzVe7bDiex2P0V+GcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NDVhNjgyOTYwNWM2ZDU4ZTRlMGMxYTc0NzRjMGEzZjMw NjhkNmUwHhcNMjUxMjE1MDEwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMThhOTQ3ZDkwOWU4ODQ1MDliODI2M2VhNmM4ZWMzNmU1YWQ5MmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+6LH0XKSccWs11qRdTEBKCH2+gJ Xura/13jyPfSnfQeoG19C7U8w5gZcTM15LeTkWxoa5oZzFYN9WdPSge3cQxuIqNV WOYnfC06SIh3mRFnW6aA7WNGXznGVV1WVTwVIm3FgcEgNqAOtDqhhgzCxe5QReqb 29vAtHwy4tht4dpk4q0kVgNJWO7ci35m+yjgCA933bX8KO1gphp6ZivXLAuOV5v4 yjF1xXrX1Q4wTnjsGUkdiGfH8KqQUDfuB4grfuYrJGuwpLlziYnZNfiuDElohUOv upSeUXCLBhlceixaRZskGeyb6MTXtK0+1K4BjzVVCgktfJDXekAFvJmFiQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFOGKlH2QnohFCbgmPqbI7DblrZLMMB8GA1UdIwQY MBaAFKZFpoKWBcbVjk4MGnR0wKPzBo1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgt MmQ4ZjNiNmUxYjk0LzEvNFlxVWZaQ2VpRVVKdUNZLXBzanNOdVd0a3N3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNDIwOTctNTU2MS00YjdlLTk0NTgtMmQ4ZjNiNmUxYjk0 LzEvcGtXbWdwWUZ4dFdPVGd3YWRIVEFvX01Halc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHejANBgkqhkiG 9w0BAQsFAAOCAQEAqBe/0QRq0va2FPJsYGafCuYinYeToTfrAbcmy7lpS8eK+o2n Mkxsq0PFA+2Mn60QxEinAch4aLhMceTpRBkNfLXV9DKqUIW9SynqbHhOo3R0O6c0 thT0xHBZ4BgAiMRFImmmiCxTXX/lkCsdnG1GE7vP7/e9AYrQoN5iOtaLILm1MYvW IvfSMC0OznYkle2I2k4RVTJu0OCHHRI5uDzRK85ZAton+pDKXOmdbcv6u6eUokKx mcmXQ5xzUb9zw221Lq2kxfh5FcsC9tIAr8u8HDB96dthjkAnv446VtOi1djiSfEW +/g/QeRcjfPXyTl7UTVE2eQ0bSZ/m63yr5b4CQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:50 2025 by rpki-client