This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/kDYozZEWu2W8znIaj8exYx-L2Bs.asa File: kDYozZEWu2W8znIaj8exYx-L2Bs.asa (raw, json) Hash identifier: j0/c6bh6BWZ0FlNxEde74E3WHSTFdY59g7eeu3U3o4g= Subject key identifier: 90:36:28:CD:91:16:BB:65:BC:CE:72:1A:8F:C7:B1:63:1F:8B:D8:1B Certificate issuer: /CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Certificate serial: 019BD66C03B7B3754C311E42F02CB1A15AC4 Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/kDYozZEWu2W8znIaj8exYx-L2Bs.asa Signing time: Mon 19 Jan 2026 13:22:41 +0000 ASPA not before: Mon 19 Jan 2026 13:22:41 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 47311 Providers: AS: 6939 AS: 24198 AS: 45296 AS: 45735 AS: 58495 AS: 133210 AS: 137409 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:6c:03:b7:b3:75:4c:31:1e:42:f0:2c:b1:a1:5a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0 Validity Not Before: Jan 19 13:22:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=903628cd9116bb65bcce721a8fc7b1631f8bd81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:03:3c:9b:e7:d0:ed:c4:4e:b7:7d:4b:5c: 74:0d:bc:14:03:57:61:07:34:b8:b3:1f:09:ba:16: b0:7d:90:5d:ed:39:85:11:53:28:94:16:53:48:be: 27:00:b5:67:9d:a0:98:3f:7e:bd:12:93:51:1a:a5: a5:54:91:f6:d2:b8:5e:28:5b:7b:3c:92:0b:3f:1a: da:49:c7:38:03:a8:6d:22:9c:8f:7b:db:f6:04:36: 77:a2:3b:0f:16:cf:87:eb:3c:72:7b:10:82:68:bb: 11:b6:74:cb:1c:21:1a:37:b8:b8:e6:ae:b7:a6:a0: ec:27:72:3c:7b:a2:2b:ae:40:98:d5:a2:84:77:b9: 4b:04:80:49:96:b5:49:ef:c2:b0:7f:18:62:36:42: be:d4:7b:fa:2f:f9:cb:2e:a5:e0:88:5d:fd:61:ee: e1:7f:b6:12:32:ee:55:b5:c9:18:39:1d:7a:96:c6: 9c:9b:9f:66:fc:08:48:81:f7:e0:c7:16:a5:af:42: 10:0b:00:54:7a:75:ef:73:0e:d8:c7:fb:94:21:22: cc:bc:a0:eb:34:49:39:0e:9c:fd:1d:bd:37:84:db: 00:d5:2b:6b:0c:cc:eb:0b:99:a4:cf:02:f3:93:84: 01:61:3d:e4:68:7b:63:2b:b3:b0:18:5d:89:ca:25: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:36:28:CD:91:16:BB:65:BC:CE:72:1A:8F:C7:B1:63:1F:8B:D8:1B X509v3 Authority Key Identifier: keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/kDYozZEWu2W8znIaj8exYx-L2Bs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47311 Signature Algorithm: sha256WithRSAEncryption 5a:6d:34:49:75:85:66:98:c8:50:cd:2e:78:96:49:fd:b6:3e: b8:6a:bc:02:42:73:98:09:64:f7:74:fc:f8:cc:66:03:32:fd: 88:6d:01:fd:2a:e3:9b:f9:35:9a:be:69:95:f7:ff:ed:5c:cd: 98:1a:73:26:96:59:ec:80:91:cd:50:b5:e5:b7:ea:4f:2f:69: cd:5d:f9:80:f2:de:2c:75:92:b9:80:f9:ba:87:22:8b:5f:b0: 91:21:23:ea:a9:c6:64:3f:7d:bb:bf:de:a6:7f:95:e9:5c:30: 02:74:ad:7e:c7:f0:46:67:dc:f2:38:31:a1:71:e2:b6:cc:3e: c1:1c:79:08:e1:22:d4:83:db:57:af:c0:ef:0a:d8:7d:77:25: 8c:c8:13:69:67:e8:ad:b3:f8:71:ed:04:3d:65:16:53:af:70: dd:c5:34:ce:64:cd:1b:45:fd:fd:48:43:7c:3c:e6:8a:4f:58: 1c:b3:33:a0:79:41:68:90:f9:89:bc:ea:6f:b1:da:34:c0:fa: 79:29:fe:8d:55:0c:32:fe:bb:07:d4:e3:ed:b2:e4:79:f9:2f: ab:1a:d3:5a:0f:36:1a:d5:9e:35:25:d9:1e:08:2e:e6:a1:a9: 24:85:79:4c:9c:8e:fd:81:10:97:98:3a:1a:fe:3b:7c:b4:dc: 89:30:c9:7b -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvWbAO3s3VMMR5C8CyxoVrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl NTlkZjAwHhcNMjYwMTE5MTMyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDM2MjhjZDkxMTZiYjY1YmNjZTcyMWE4ZmM3YjE2MzFmOGJkODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeYDPJvn0O3ETrd9S1x0DbwUA1dh BzS4sx8JuhawfZBd7TmFEVMolBZTSL4nALVnnaCYP369EpNRGqWlVJH20rheKFt7 PJILPxraScc4A6htIpyPe9v2BDZ3ojsPFs+H6zxyexCCaLsRtnTLHCEaN7i45q63 pqDsJ3I8e6IrrkCY1aKEd7lLBIBJlrVJ78KwfxhiNkK+1Hv6L/nLLqXgiF39Ye7h f7YSMu5VtckYOR16lsacm59m/AhIgffgxxalr0IQCwBUenXvcw7Yx/uUISLMvKDr NEk5Dpz9Hb03hNsA1StrDMzrC5mkzwLzk4QBYT3kaHtjK7OwGF2JyiVCLQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJA2KM2RFrtlvM5yGo/HsWMfi9gbMB8GA1UdIwQY MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt ZTJmZWRhYjNjYjA5LzEva0RZb3paRVd1Mlc4em5JYWo4ZXhZeC1MMkJzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5 LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4zzANBgkqhkiG 9w0BAQsFAAOCAQEAWm00SXWFZpjIUM0ueJZJ/bY+uGq8AkJzmAlk93T8+MxmAzL9 iG0B/Srjm/k1mr5plff/7VzNmBpzJpZZ7ICRzVC15bfqTy9pzV35gPLeLHWSuYD5 uocii1+wkSEj6qnGZD99u7/epn+V6VwwAnStfsfwRmfc8jgxoXHitsw+wRx5COEi 1IPbV6/A7wrYfXcljMgTaWforbP4ce0EPWUWU69w3cU0zmTNG0X9/UhDfDzmik9Y HLMzoHlBaJD5ibzqb7HaNMD6eSn+jVUMMv67B9Tj7bLkefkvqxrTWg82GtWeNSXZ Hggu5qGpJIV5TJyO/YEQl5g6Gv47fLTciTDJew== -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:31 2026 by rpki-client