This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/QUWFgCmw4YvFuNhA76fhRZo1qdA.asa File: QUWFgCmw4YvFuNhA76fhRZo1qdA.asa (raw, json) Hash identifier: qlWMvZSHFjKwoiR9XSDKRHRr7ChwOKhh6yQ7lTCbwBE= Subject key identifier: 41:45:85:80:29:B0:E1:8B:C5:B8:D8:40:EF:A7:E1:45:9A:35:A9:D0 Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Certificate serial: 019B04D46F288FB72E10054ECB9230344DBD Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/QUWFgCmw4YvFuNhA76fhRZo1qdA.asa Signing time: Tue 09 Dec 2025 20:36:29 +0000 ASPA not before: Tue 09 Dec 2025 20:36:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 211024 Providers: AS: 6939 AS: 8283 AS: 20473 AS: 34927 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:d4:6f:28:8f:b7:2e:10:05:4e:cb:92:30:34:4d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb Validity Not Before: Dec 9 20:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4145858029b0e18bc5b8d840efa7e1459a35a9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:21:f7:17:cf:70:54:96:7d:cf:fd:66:eb: 0b:45:cc:a1:b9:2f:a8:18:bc:66:e1:32:d4:65:e1: a5:48:b2:ee:68:0e:73:fe:f5:43:62:d1:25:74:52: 1a:5a:aa:5b:dd:67:74:ba:bb:be:8b:76:53:bf:d4: 3d:ec:51:58:03:04:ba:a0:e4:fb:f3:86:21:af:fd: 71:34:da:15:3b:2d:e2:87:f7:13:ce:62:1f:e7:8c: ec:98:bc:f6:8e:a5:8e:84:b1:95:a2:65:ec:39:ff: 9f:85:a5:45:e6:75:d2:1a:4c:5d:2e:59:e5:d3:d3: e0:ca:a5:2f:8b:9b:db:5a:6a:9d:6f:e8:82:b8:b6: 2d:46:52:a0:ea:65:db:b3:93:95:2f:da:75:aa:ff: bc:c9:4f:32:31:32:d3:de:48:d6:d5:71:bc:56:5d: c9:61:b0:03:08:dd:eb:2c:d7:8e:97:56:8c:01:20: 27:51:b8:3e:45:c6:b2:38:6a:f7:c3:ed:86:06:69: be:f3:52:88:37:81:91:22:cb:c4:e9:30:d2:f7:d8: 70:1a:e3:83:ab:ff:42:54:55:aa:2d:7a:f0:33:15: 28:e3:22:25:74:b4:b4:de:23:7b:e4:0d:5c:fc:50: 21:01:d4:ba:47:28:c4:a5:dc:4e:ed:69:11:d5:76: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:85:80:29:B0:E1:8B:C5:B8:D8:40:EF:A7:E1:45:9A:35:A9:D0 X509v3 Authority Key Identifier: keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/QUWFgCmw4YvFuNhA76fhRZo1qdA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211024 Signature Algorithm: sha256WithRSAEncryption 0c:ef:cc:f0:59:6c:0f:ec:b6:54:eb:ae:72:cb:e1:22:ba:b6: 7c:5a:29:f5:a1:a0:1b:9a:11:76:90:15:38:88:f4:f2:d0:4d: b3:84:81:f8:6b:96:c1:66:5e:eb:a5:28:07:e4:e6:04:e6:6e: dd:a3:7f:72:09:71:47:01:3a:2f:f3:19:bb:ec:8c:de:59:8a: 6c:45:fc:d0:e8:20:1d:97:d7:9e:4e:c9:65:6a:2d:56:6f:f1: 09:d7:93:d6:c2:fb:e0:18:08:63:97:ef:16:48:2a:db:44:2b: 74:13:89:f0:56:df:2b:77:1b:35:b0:86:28:6e:e4:00:e4:65: 5f:da:c1:43:eb:71:a7:d3:69:cb:ea:ea:a3:5e:5e:cd:bc:d1: d9:89:f8:d3:3c:85:67:d2:a9:62:43:8a:31:ad:60:d3:3e:1d: 3c:d3:a5:09:32:d1:45:9e:a6:7a:34:6a:00:d1:5f:f9:52:6f: d6:f9:6c:e2:d8:4f:99:ae:08:7e:f0:04:bf:aa:bb:ad:c2:3d: 90:08:64:9b:06:10:c8:15:4a:cc:4f:eb:6d:ff:1d:70:7c:e4: 3d:56:4a:c9:47:e8:c5:1b:5d:6b:09:3c:36:76:1f:a0:b8:bb: 95:17:9e:84:f6:1b:c6:57:6d:6c:6f:c7:b6:cd:33:8f:8f:ee: b6:30:7a:29 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsE1G8oj7cuEAVOy5IwNE29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj MjUwZmIwHhcNMjUxMjA5MjAzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTQ1ODU4MDI5YjBlMThiYzViOGQ4NDBlZmE3ZTE0NTlhMzVhOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt84h9xfPcFSWfc/9ZusLRcyhuS+o GLxm4TLUZeGlSLLuaA5z/vVDYtEldFIaWqpb3Wd0uru+i3ZTv9Q97FFYAwS6oOT7 84Yhr/1xNNoVOy3ih/cTzmIf54zsmLz2jqWOhLGVomXsOf+fhaVF5nXSGkxdLlnl 09PgyqUvi5vbWmqdb+iCuLYtRlKg6mXbs5OVL9p1qv+8yU8yMTLT3kjW1XG8Vl3J YbADCN3rLNeOl1aMASAnUbg+RcayOGr3w+2GBmm+81KIN4GRIsvE6TDS99hwGuOD q/9CVFWqLXrwMxUo4yIldLS03iN75A1c/FAhAdS6RyjEpdxO7WkR1Xa9ewIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFEFFhYApsOGLxbjYQO+n4UWaNanQMB8GA1UdIwQY MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt MmQzZWY5YjBhZDIzLzEvUVVXRmdDbXc0WXZGdU5oQTc2ZmhSWm8xcWRBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM4UDANBgkqhkiG 9w0BAQsFAAOCAQEADO/M8FlsD+y2VOuucsvhIrq2fFop9aGgG5oRdpAVOIj08tBN s4SB+GuWwWZe66UoB+TmBOZu3aN/cglxRwE6L/MZu+yM3lmKbEX80OggHZfXnk7J ZWotVm/xCdeT1sL74BgIY5fvFkgq20QrdBOJ8FbfK3cbNbCGKG7kAORlX9rBQ+tx p9Npy+rqo15ezbzR2Yn40zyFZ9KpYkOKMa1g0z4dPNOlCTLRRZ6mejRqANFf+VJv 1vls4thPma4IfvAEv6q7rcI9kAhkmwYQyBVKzE/rbf8dcHzkPVZKyUfoxRtdawk8 NnYfoLi7lReehPYbxldtbG/Hts0zj4/utjB6KQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:36 2025 by rpki-client