This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/c4N6Dzbu5kdIWMEW0ityTPeoKwA.asa File: c4N6Dzbu5kdIWMEW0ityTPeoKwA.asa (raw, json) Hash identifier: gZyC1G0jy4VVzBtjmMqoQl9JxZxTvwDrJdjGiklu/qU= Subject key identifier: 73:83:7A:0F:36:EE:E6:47:48:58:C1:16:D2:2B:72:4C:F7:A8:2B:00 Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5 Certificate serial: 019ACB97B3E7749F11888F3F823154B5B532 Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/c4N6Dzbu5kdIWMEW0ityTPeoKwA.asa Signing time: Fri 28 Nov 2025 17:51:48 +0000 ASPA not before: Fri 28 Nov 2025 17:51:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 12779 Providers: AS: 174 AS: 2914 AS: 3257 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:97:b3:e7:74:9f:11:88:8f:3f:82:31:54:b5:b5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5 Validity Not Before: Nov 28 17:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73837a0f36eee6474858c116d22b724cf7a82b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:1f:04:73:7b:b9:ef:06:54:6b:20:c9:51: 0c:38:a4:ff:0b:b1:c6:28:35:f2:b1:15:92:ee:d7: a7:77:f0:4a:e9:3b:a0:df:00:44:5b:a2:d5:fa:06: f4:15:5f:92:d4:02:4d:35:01:1c:a7:0c:e4:10:b7: b9:8e:95:c8:14:dd:e3:c6:b1:70:98:37:6e:72:b8: 41:1d:3d:07:b0:8d:b5:6c:9f:22:19:e0:2f:54:2b: 7d:ea:46:c8:31:7d:b9:da:2d:3e:78:36:f5:59:bb: 4d:19:20:71:2c:f3:42:96:f0:48:e2:72:8c:c4:c2: 91:c0:ea:78:d0:a2:12:20:44:b4:9a:c1:b6:85:b8: cf:37:6c:e1:8f:35:4f:71:c8:0d:9a:cd:db:f7:c3: 34:3b:9c:93:6e:19:bb:2f:d7:69:fa:bd:35:33:9c: 22:59:36:74:46:52:76:ff:02:70:25:08:1f:a4:69: 53:ea:45:16:2a:32:45:b6:1d:41:87:cc:29:ef:22: bf:62:c4:92:03:75:42:45:95:ab:cf:d5:72:0f:b3: de:2e:53:14:e2:bd:c3:1f:9a:c1:05:a7:31:38:3b: e7:4d:7e:46:a1:ce:d9:c8:dc:62:18:39:92:a8:5b: 18:9f:92:19:72:4d:58:2c:8d:68:f3:50:15:d0:89: 29:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:83:7A:0F:36:EE:E6:47:48:58:C1:16:D2:2B:72:4C:F7:A8:2B:00 X509v3 Authority Key Identifier: keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/c4N6Dzbu5kdIWMEW0ityTPeoKwA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 12779 Signature Algorithm: sha256WithRSAEncryption 1f:4a:c4:bc:89:69:d3:ef:13:21:e0:e0:d3:5d:99:da:a1:92: ca:97:e1:f6:d9:19:9f:22:1e:ca:b8:f1:85:10:25:ed:3c:dd: 46:80:35:3d:74:0c:c5:56:6e:90:58:53:a2:4c:73:76:e6:d8: 3e:77:1a:cd:3d:12:f8:e5:2c:c8:00:36:97:a9:7d:27:ac:73: fd:bb:59:d9:45:5f:74:05:15:4d:5d:c0:05:98:b2:a4:cc:b9: 06:86:19:ab:14:51:86:1d:d0:21:27:3e:72:85:c8:1a:7d:d9: 39:b7:b8:43:47:72:27:f8:c9:84:75:82:e7:c6:3c:15:af:b0: ee:8f:1d:3f:0e:f6:b9:7d:a1:d2:43:05:43:c1:70:be:46:ab: e2:1e:b5:d4:81:b7:42:d6:db:37:25:cf:2c:5e:49:40:91:7e: 72:29:41:08:2a:a0:6d:06:3f:43:44:72:24:12:e1:ee:b6:08: d9:4b:11:6b:82:e8:1e:90:f6:9c:af:ab:4f:9a:40:e7:62:d7: 67:72:12:d7:ba:25:52:c5:5f:d9:df:15:5d:03:c6:89:f7:7c: 4c:bf:c8:b6:97:10:b0:57:ad:99:06:9a:22:c6:85:47:d5:a5: 64:83:4b:be:6c:c2:86:86:77:49:5c:84:03:35:36:a1:eb:cb: 99:ab:08:27 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZrLl7PndJ8RiI8/gjFUtbUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi ODM5YTUwHhcNMjUxMTI4MTc1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzgzN2EwZjM2ZWVlNjQ3NDg1OGMxMTZkMjJiNzI0Y2Y3YTgyYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ofBHN7ue8GVGsgyVEMOKT/C7HG KDXysRWS7tend/BK6Tug3wBEW6LV+gb0FV+S1AJNNQEcpwzkELe5jpXIFN3jxrFw mDducrhBHT0HsI21bJ8iGeAvVCt96kbIMX252i0+eDb1WbtNGSBxLPNClvBI4nKM xMKRwOp40KISIES0msG2hbjPN2zhjzVPccgNms3b98M0O5yTbhm7L9dp+r01M5wi WTZ0RlJ2/wJwJQgfpGlT6kUWKjJFth1Bh8wp7yK/YsSSA3VCRZWrz9VyD7PeLlMU 4r3DH5rBBacxODvnTX5Goc7ZyNxiGDmSqFsYn5IZck1YLI1o81AV0Ikp0QIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFHODeg827uZHSFjBFtIrckz3qCsAMB8GA1UdIwQY MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt ODBhN2ViYTZmOGU5LzEvYzRONkR6YnU1a2RJV01FVzBpdHlUUGVvS3dBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5 LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjHrMA0GCSqGSIb3 DQEBCwUAA4IBAQAfSsS8iWnT7xMh4ODTXZnaoZLKl+H22RmfIh7KuPGFECXtPN1G gDU9dAzFVm6QWFOiTHN25tg+dxrNPRL45SzIADaXqX0nrHP9u1nZRV90BRVNXcAF mLKkzLkGhhmrFFGGHdAhJz5yhcgafdk5t7hDR3In+MmEdYLnxjwVr7Dujx0/Dva5 faHSQwVDwXC+RqviHrXUgbdC1ts3Jc8sXklAkX5yKUEIKqBtBj9DRHIkEuHutgjZ SxFrgugekPacr6tPmkDnYtdnchLXuiVSxV/Z3xVdA8aJ93xMv8i2lxCwV62ZBpoi xoVH1aVkg0u+bMKGhndJXIQDNTah68uZqwgn -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:44 2025 by rpki-client