This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/nKQXbT6FciiHVvddJS0_5sOh1ms.asa File: nKQXbT6FciiHVvddJS0_5sOh1ms.asa (raw, json) Hash identifier: 7BE1jfl/pKiooWczO/8pMkQZmIL4Zuvts1Z6qAFpwl4= Subject key identifier: 9C:A4:17:6D:3E:85:72:28:87:56:F7:5D:25:2D:3F:E6:C3:A1:D6:6B Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019B5EEA917E69BC9E1E0295DECCAB35495A Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/nKQXbT6FciiHVvddJS0_5sOh1ms.asa Signing time: Sat 27 Dec 2025 08:26:29 +0000 ASPA not before: Sat 27 Dec 2025 08:26:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 34696 Providers: AS: 174 AS: 6204 AS: 6939 AS: 29119 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:ea:91:7e:69:bc:9e:1e:02:95:de:cc:ab:35:49:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Dec 27 08:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ca4176d3e8572288756f75d252d3fe6c3a1d66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:28:94:35:3a:39:ad:37:16:e7:23:91:5d: 4b:e3:1a:06:a5:96:af:f0:cd:55:cc:a7:c2:56:d8: 4f:88:b4:03:a1:e5:e3:db:ab:41:63:04:6d:20:ad: 77:c9:c8:d7:11:2f:f6:49:78:57:f6:c0:99:9e:b6: 29:17:dc:53:b7:82:6e:88:0e:ff:cb:8a:dd:14:0d: ea:34:d4:06:04:8e:48:1c:3d:74:f4:5a:49:8e:80: 55:51:69:77:8a:f1:f3:3c:e5:ea:49:fe:46:3a:86: 02:eb:c7:b0:c4:02:a4:fb:27:8b:97:fc:0a:be:19: 0a:d0:4d:86:b6:c6:00:d7:29:f9:22:3e:9c:5d:e6: 91:e1:12:f2:ec:0d:ee:c4:b9:02:2c:74:ec:84:6b: 61:be:b1:75:fc:a2:54:7f:ff:e6:fc:ef:a5:37:c7: 9e:2e:12:1b:6a:fa:7d:34:34:ba:5c:6d:2d:41:31: 81:dd:fe:32:de:b6:71:5a:29:a9:98:72:cc:69:e6: 99:68:ee:68:21:79:da:76:ed:86:36:e6:76:fa:c4: c2:68:5a:15:e4:25:85:df:77:14:05:19:f0:50:dc: e5:b0:af:2e:3f:7b:3c:17:4f:45:e6:2c:89:fd:4e: f5:79:29:58:9d:03:36:54:b0:eb:36:9f:4b:3b:3e: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A4:17:6D:3E:85:72:28:87:56:F7:5D:25:2D:3F:E6:C3:A1:D6:6B X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/nKQXbT6FciiHVvddJS0_5sOh1ms.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 34696 Signature Algorithm: sha256WithRSAEncryption 81:1e:68:48:f5:aa:47:02:fd:eb:df:6c:df:07:e1:c7:de:01: 9b:2a:cf:5a:79:29:51:2b:26:ff:c7:dc:da:f3:08:40:7d:8d: 0d:c1:a7:52:fb:75:d8:e8:d5:55:51:66:ff:53:c0:bd:40:4a: c5:64:53:6c:b5:56:24:39:5b:34:fd:44:04:1f:3a:20:3d:39: df:fa:ed:50:69:c2:50:e0:1b:ac:ff:fb:c6:6c:74:c3:69:d8: b9:f9:39:6e:fe:7e:b2:5e:97:f7:af:14:a7:9f:9d:29:9d:8e: da:ed:41:8c:74:0a:8f:72:51:c7:10:75:8c:46:09:e9:43:c2: ac:f4:5a:72:f4:73:18:1a:08:67:9e:00:71:c5:f0:10:57:30: 27:99:87:e6:b2:9c:85:59:eb:bc:9d:4b:2e:65:92:0a:f3:50: a1:ba:10:0b:bc:40:a5:46:47:c9:e7:19:e2:be:08:a5:32:eb: ae:73:47:23:cf:8b:71:c1:d6:ba:6e:de:b9:6d:6c:5c:10:11: 21:72:c9:f8:f0:cb:d6:4c:f1:e4:6f:4b:54:44:38:bd:74:19: 27:c0:ed:5d:82:e7:d5:f8:9a:09:79:99:19:d2:25:53:9e:9b: 3f:b1:e5:e2:6d:0c:74:9d:93:c0:fd:f9:77:c0:9e:8d:50:18: 84:61:65:d9 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZte6pF+abyeHgKV3syrNUlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjUxMjI3MDgyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2E0MTc2ZDNlODU3MjI4ODc1NmY3NWQyNTJkM2ZlNmMzYTFkNjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwolDU6Oa03FucjkV1L4xoGpZav 8M1VzKfCVthPiLQDoeXj26tBYwRtIK13ycjXES/2SXhX9sCZnrYpF9xTt4JuiA7/ y4rdFA3qNNQGBI5IHD109FpJjoBVUWl3ivHzPOXqSf5GOoYC68ewxAKk+yeLl/wK vhkK0E2GtsYA1yn5Ij6cXeaR4RLy7A3uxLkCLHTshGthvrF1/KJUf//m/O+lN8ee LhIbavp9NDS6XG0tQTGB3f4y3rZxWimpmHLMaeaZaO5oIXnadu2GNuZ2+sTCaFoV 5CWF33cUBRnwUNzlsK8uP3s8F09F5iyJ/U71eSlYnQM2VLDrNp9LOz6lAQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJykF20+hXIoh1b3XSUtP+bDodZrMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvbktRWGJUNkZjaWlIVnZkZEpTMF81c09oMW1zLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCHiDANBgkqhkiG 9w0BAQsFAAOCAQEAgR5oSPWqRwL9699s3wfhx94BmyrPWnkpUSsm/8fc2vMIQH2N DcGnUvt12OjVVVFm/1PAvUBKxWRTbLVWJDlbNP1EBB86ID053/rtUGnCUOAbrP/7 xmx0w2nYufk5bv5+sl6X968Up5+dKZ2O2u1BjHQKj3JRxxB1jEYJ6UPCrPRacvRz GBoIZ54AccXwEFcwJ5mH5rKchVnrvJ1LLmWSCvNQoboQC7xApUZHyecZ4r4IpTLr rnNHI8+LccHWum7euW1sXBARIXLJ+PDL1kzx5G9LVEQ4vXQZJ8DtXYLn1fiaCXmZ GdIlU56bP7Hl4m0MdJ2TwP35d8CejVAYhGFl2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:39 2026 by rpki-client