This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/jO3T1-EOvm7phVXV6edT90rIeh0.asa File: jO3T1-EOvm7phVXV6edT90rIeh0.asa (raw, json) Hash identifier: 6/Ul++o9f4AGDv6T10uaHtnXB8UK/eOuxrUr++EWOSQ= Subject key identifier: 8C:ED:D3:D7:E1:0E:BE:6E:E9:85:55:D5:E9:E7:53:F7:4A:C8:7A:1D Certificate issuer: /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1 Certificate serial: 019B212DD1C587736F1F309709872D853921 Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/jO3T1-EOvm7phVXV6edT90rIeh0.asa Signing time: Mon 15 Dec 2025 08:43:29 +0000 ASPA not before: Mon 15 Dec 2025 08:43:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 208995 Providers: AS: 12578 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:2d:d1:c5:87:73:6f:1f:30:97:09:87:2d:85:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1 Validity Not Before: Dec 15 08:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8cedd3d7e10ebe6ee98555d5e9e753f74ac87a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:64:db:07:79:f8:79:94:e2:69:b0:e0:04: 80:10:2f:9a:c8:eb:82:43:36:0e:92:ed:f2:2e:0a: 99:f4:3e:de:1c:9b:be:36:a0:2d:84:b7:52:bb:b0: e9:a6:73:cf:6b:dc:95:e0:ba:db:ce:38:15:ae:90: 45:29:f0:ee:3f:c5:22:e6:d8:b6:f4:b9:80:8e:de: b6:fb:1b:e2:8d:76:d7:08:be:75:27:c8:13:66:80: 8b:f4:56:2b:a0:3e:19:ff:8c:78:af:34:c6:bf:ee: 39:d7:ef:08:f8:93:f6:34:06:b0:47:3a:73:28:9e: f6:ad:8a:80:3a:a7:d5:16:ca:76:b2:12:1f:2b:1b: 86:bd:71:44:93:85:cc:36:30:20:5b:2d:36:12:cc: 1b:1c:32:75:56:ab:b6:2b:90:f0:08:60:14:f7:4d: 60:2d:3c:aa:c3:ab:bc:f9:c1:c1:c7:7a:7a:10:7d: cb:8b:5c:6e:04:52:e5:c3:b2:4e:9e:20:0c:3b:01: 36:8a:17:4b:d6:20:28:2f:65:08:d7:bd:e0:a5:c8: f5:a6:54:d5:93:3c:a8:fc:0f:13:b9:d9:be:13:80: 33:52:22:8a:51:3e:7e:bb:21:f7:e4:a4:a9:e4:76: 21:83:66:16:67:3e:b9:b8:c5:19:bf:57:87:81:db: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:D3:D7:E1:0E:BE:6E:E9:85:55:D5:E9:E7:53:F7:4A:C8:7A:1D X509v3 Authority Key Identifier: keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/jO3T1-EOvm7phVXV6edT90rIeh0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208995 Signature Algorithm: sha256WithRSAEncryption 43:a1:af:a5:ed:1f:c9:4c:79:ec:fb:0a:20:1c:5f:63:1f:25: d0:ea:dc:af:10:61:5d:c5:ad:58:6b:11:af:43:2b:00:40:0d: 0e:f3:b9:62:98:8e:1a:a0:6e:9a:1a:84:37:39:b4:49:0b:3a: 7a:4d:ef:46:72:de:da:6d:48:b1:8b:9f:c8:4b:d8:39:bd:a4: 92:fb:f4:16:26:c5:8b:0c:eb:50:ce:2b:13:3e:c7:28:e7:68: f5:f4:a5:9a:05:29:e2:99:31:3c:da:69:3e:5e:65:b5:06:61: 1e:6d:c5:17:98:45:c7:e2:db:45:4b:c3:ee:85:3f:42:a5:77: 68:d8:e4:7f:76:60:cb:71:1d:56:04:24:22:3f:93:ef:d4:68: 2e:f2:48:96:bf:42:ba:68:e6:3d:33:c5:db:27:11:d1:a6:2c: c8:13:06:7b:05:e2:ec:b8:28:bb:e0:e1:1b:8b:8d:4a:4d:64: b4:ac:c5:70:2e:4d:6b:84:88:6f:06:c5:a1:e2:cc:0c:e0:9e: be:03:60:da:40:23:26:a0:c1:d2:7d:d4:5a:a0:a0:65:b8:4b: 8e:47:5c:49:8a:f6:c9:da:5c:1f:f7:e0:80:d0:7b:38:64:66: 50:a4:4c:13:27:ac:4c:7e:23:bf:a4:95:01:91:80:ef:d5:9e: 28:81:88:6a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZshLdHFh3NvHzCXCYcthTkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NjJhZDViODFiODA3MTNkZWQzZWZmZjQ0Mjk5ZmNkNzY1 ZjJhYjEwHhcNMjUxMjE1MDg0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2VkZDNkN2UxMGViZTZlZTk4NTU1ZDVlOWU3NTNmNzRhYzg3YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Vk2wd5+HmU4mmw4ASAEC+ayOuC QzYOku3yLgqZ9D7eHJu+NqAthLdSu7DppnPPa9yV4LrbzjgVrpBFKfDuP8Ui5ti2 9LmAjt62+xvijXbXCL51J8gTZoCL9FYroD4Z/4x4rzTGv+451+8I+JP2NAawRzpz KJ72rYqAOqfVFsp2shIfKxuGvXFEk4XMNjAgWy02EswbHDJ1Vqu2K5DwCGAU901g LTyqw6u8+cHBx3p6EH3Li1xuBFLlw7JOniAMOwE2ihdL1iAoL2UI173gpcj1plTV kzyo/A8Tudm+E4AzUiKKUT5+uyH35KSp5HYhg2YWZz65uMUZv1eHgdtnDQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFIzt09fhDr5u6YVV1ennU/dKyHodMB8GA1UdIwQY MBaAFPZirVuBuAcT3tPv/0Qpn812XyqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEt YTY2MGZhZWViMWUyLzEvak8zVDEtRU92bTdwaFZYVjZlZFQ5MHJJZWgwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEtYTY2MGZhZWViMWUy LzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwYzANBgkqhkiG 9w0BAQsFAAOCAQEAQ6Gvpe0fyUx57PsKIBxfYx8l0OrcrxBhXcWtWGsRr0MrAEAN DvO5YpiOGqBumhqENzm0SQs6ek3vRnLe2m1IsYufyEvYOb2kkvv0FibFiwzrUM4r Ez7HKOdo9fSlmgUp4pkxPNppPl5ltQZhHm3FF5hFx+LbRUvD7oU/QqV3aNjkf3Zg y3EdVgQkIj+T79RoLvJIlr9CumjmPTPF2ycR0aYsyBMGewXi7Lgou+DhG4uNSk1k tKzFcC5Na4SIbwbFoeLMDOCevgNg2kAjJqDB0n3UWqCgZbhLjkdcSYr2ydpcH/fg gNB7OGRmUKRMEyesTH4jv6SVAZGA79WeKIGIag== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:36 2025 by rpki-client