This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/BAg_Ypk_PlO9OmQW9r_dUEQ6g5o.asa File: BAg_Ypk_PlO9OmQW9r_dUEQ6g5o.asa (raw, json) Hash identifier: +ryzpmFM32+zN+fQmTR5d7h8PbiYBUthX6q2UqNCB3s= Subject key identifier: 04:08:3F:62:99:3F:3E:53:BD:3A:64:16:F6:BF:DD:50:44:3A:83:9A Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77 Certificate serial: 019AF3BB4C5D4242049AF87AF5C225BEF52C Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/BAg_Ypk_PlO9OmQW9r_dUEQ6g5o.asa Signing time: Sat 06 Dec 2025 12:55:29 +0000 ASPA not before: Sat 06 Dec 2025 12:55:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 215236 Providers: AS: 29670 AS: 59645 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bb:4c:5d:42:42:04:9a:f8:7a:f5:c2:25:be:f5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77 Validity Not Before: Dec 6 12:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=04083f62993f3e53bd3a6416f6bfdd50443a839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ea:2b:b9:0c:7c:90:e0:13:6f:b7:72:3f:5e: 21:38:a1:f8:bd:07:0e:ed:bf:30:4b:82:dc:84:81: a0:31:7c:4a:8a:49:9c:38:2a:59:1e:46:74:66:71: f9:12:e1:f0:7d:66:32:38:03:b7:54:5f:f7:aa:ca: 06:da:b3:f4:42:12:56:21:12:d6:1b:2a:cf:d5:30: c0:eb:97:88:a8:3f:a6:37:95:3f:41:7d:be:58:04: af:84:64:67:a1:db:a7:ad:f2:11:72:b5:d2:dd:f4: 90:30:45:cb:2a:2c:99:a1:cf:ce:08:ff:09:5c:e1: 1e:66:5b:38:a3:00:ef:06:75:4f:6b:a6:05:0c:55: a6:f6:10:88:ab:1a:50:82:8c:27:14:42:33:5f:5d: 74:98:a5:d5:cc:b8:a9:9b:72:8f:43:4a:7f:9c:c6: 74:00:49:3a:1e:a9:e2:16:ea:d2:58:2a:2a:03:4f: 19:69:d7:80:3b:aa:8b:df:46:e1:fb:f7:69:fc:33: 4a:00:16:ef:e2:80:c5:b6:27:78:90:08:2c:4b:b6: 6a:8b:30:91:9f:21:73:a8:8b:c8:4e:e5:7d:91:f1: b9:b3:a0:88:7b:e3:1e:49:3d:5f:e2:28:45:d2:38: 62:1a:ef:c7:fc:9e:e9:c9:a0:08:d0:a9:a0:e4:5e: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:08:3F:62:99:3F:3E:53:BD:3A:64:16:F6:BF:DD:50:44:3A:83:9A X509v3 Authority Key Identifier: keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/BAg_Ypk_PlO9OmQW9r_dUEQ6g5o.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215236 Signature Algorithm: sha256WithRSAEncryption 4b:58:83:95:02:13:38:df:01:e5:b1:5e:b2:dd:b3:b7:61:37: f5:4e:86:cf:be:8e:b1:36:66:3d:74:1d:52:8b:73:72:b3:50: c6:4a:4e:f7:c9:f0:81:7e:1c:47:9a:ce:8f:34:02:b5:ba:9a: dd:88:14:d3:43:3b:cf:d6:09:36:02:9c:76:9f:a1:fc:c2:93: c4:ff:b1:98:65:3e:38:e2:9f:4d:48:d4:d5:1d:4b:ef:f1:c4: 34:8a:c1:3b:4b:82:6e:e2:00:0e:4b:b2:98:b5:18:b1:aa:b6: 59:c5:9d:18:a0:64:08:f2:c6:04:b2:cd:ed:27:99:89:16:41: da:62:1c:d0:e2:40:36:d9:41:45:33:b5:b2:8f:51:d4:a5:95: 0d:80:d6:e0:fc:a7:10:4a:0a:75:ec:9f:32:7e:09:92:6b:a5: 1d:22:38:c8:a8:1b:74:76:63:85:16:96:4c:c2:e7:af:39:6a: 4e:5c:0d:0e:4a:78:e1:53:bd:a4:66:e5:63:f8:12:64:ab:ca: 88:45:d9:3b:68:c1:b7:79:4a:b5:69:22:a1:7f:84:a1:84:5f: e3:b6:01:41:18:9a:95:a5:68:da:f6:b5:e3:96:25:bc:0a:c4: b8:d9:8c:e7:66:a1:a2:31:01:e6:f1:b2:60:b3:f2:ce:62:91: 9f:f4:2c:69 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrzu0xdQkIEmvh69cIlvvUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmE3YTQyNmRjNTE5OTYzZDMzZDJkYzZjZWY3ODJmZDVm MmRjNzcwHhcNMjUxMjA2MTI1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDA4M2Y2Mjk5M2YzZTUzYmQzYTY0MTZmNmJmZGQ1MDQ0M2E4MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uoruQx8kOATb7dyP14hOKH4vQcO 7b8wS4LchIGgMXxKikmcOCpZHkZ0ZnH5EuHwfWYyOAO3VF/3qsoG2rP0QhJWIRLW GyrP1TDA65eIqD+mN5U/QX2+WASvhGRnodunrfIRcrXS3fSQMEXLKiyZoc/OCP8J XOEeZls4owDvBnVPa6YFDFWm9hCIqxpQgownFEIzX110mKXVzLipm3KPQ0p/nMZ0 AEk6HqniFurSWCoqA08ZadeAO6qL30bh+/dp/DNKABbv4oDFtid4kAgsS7ZqizCR nyFzqIvITuV9kfG5s6CIe+MeST1f4ihF0jhiGu/H/J7pyaAI0Kmg5F7jDQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAQIP2KZPz5TvTpkFva/3VBEOoOaMB8GA1UdIwQY MBaAFM9qekJtxRmWPTPS3GzveC/V8tx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2Ut ZDJkYjczZmYzMWJjLzEvQkFnX1lwa19QbE85T21RVzlyX2RVRVE2ZzVvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2UtZDJkYjczZmYzMWJj LzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIxDANBgkqhkiG 9w0BAQsFAAOCAQEAS1iDlQITON8B5bFest2zt2E39U6Gz76OsTZmPXQdUotzcrNQ xkpO98nwgX4cR5rOjzQCtbqa3YgU00M7z9YJNgKcdp+h/MKTxP+xmGU+OOKfTUjU 1R1L7/HENIrBO0uCbuIADkuymLUYsaq2WcWdGKBkCPLGBLLN7SeZiRZB2mIc0OJA NtlBRTO1so9R1KWVDYDW4PynEEoKdeyfMn4JkmulHSI4yKgbdHZjhRaWTMLnrzlq TlwNDkp44VO9pGblY/gSZKvKiEXZO2jBt3lKtWkioX+EoYRf47YBQRialaVo2va1 45YlvArEuNmM52ahojEB5vGyYLPyzmKRn/QsaQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:56 2025 by rpki-client