This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/bfGP5wDGs8mut0cXRDEC84CTDeM.asa File: bfGP5wDGs8mut0cXRDEC84CTDeM.asa (raw, json) Hash identifier: 8+qCFKSvCD04vmJQcLwz8ThkiIUKqoFrthzvpdwRvKQ= Subject key identifier: 6D:F1:8F:E7:00:C6:B3:C9:AE:B7:47:17:44:31:02:F3:80:93:0D:E3 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B01B33E7F197409BED5F08487B2BBC2E3 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/bfGP5wDGs8mut0cXRDEC84CTDeM.asa Signing time: Tue 09 Dec 2025 06:01:22 +0000 ASPA not before: Tue 09 Dec 2025 06:01:22 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 15974 Providers: AS: 9049 AS: 20485 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:b3:3e:7f:19:74:09:be:d5:f0:84:87:b2:bb:c2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Dec 9 06:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6df18fe700c6b3c9aeb74717443102f380930de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:5e:24:1d:23:cd:d4:5b:db:46:de:eb:da: 1a:d3:9e:fe:fe:15:f3:d1:32:a9:ec:56:43:ce:73: 7c:9d:af:68:8d:5d:e5:0f:0c:73:ce:fb:32:c4:09: 2b:35:38:f8:e0:1a:78:c2:6f:04:3a:ae:5b:e0:df: bf:9a:89:81:a5:93:35:23:a1:fd:a7:34:e1:4f:9a: f4:10:26:97:ca:d3:40:e3:4c:25:cf:35:a4:b2:82: 03:5f:6e:22:47:dd:27:81:ce:e8:62:3c:95:66:28: 1d:1c:37:24:65:84:c6:08:80:54:0a:b3:8f:0f:f4: 97:10:4d:fe:d2:69:ae:da:03:3f:7d:cf:d1:39:7f: d9:15:b8:fc:ee:1a:78:5a:df:a3:4b:81:97:82:dc: 01:58:37:45:5d:33:10:d6:00:4f:72:b3:4d:b7:7b: 3c:7c:b4:03:2a:9e:f7:a4:ed:5e:2b:6e:99:4a:b4: 1a:84:6c:fa:e7:d1:58:d2:b2:83:2b:a4:57:df:5e: 3d:b7:ff:2e:1b:39:37:ef:69:69:9a:ac:56:02:30: 02:50:ad:f5:7f:d6:7a:87:ff:3c:8c:d3:dc:b8:6c: 73:d6:4b:2a:88:e1:46:f9:2c:0e:5a:29:aa:e3:71: ed:37:4b:f2:c5:e6:5a:9b:5b:28:c0:6d:40:88:cd: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F1:8F:E7:00:C6:B3:C9:AE:B7:47:17:44:31:02:F3:80:93:0D:E3 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/bfGP5wDGs8mut0cXRDEC84CTDeM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 15974 Signature Algorithm: sha256WithRSAEncryption cc:a3:b0:cd:f3:07:1f:ac:9b:4b:fe:f5:52:50:12:38:05:8d: fb:dc:84:ad:49:eb:b9:64:10:c1:0a:4c:a3:99:c6:d1:d5:d6: 13:5f:1f:15:4c:2f:7f:18:31:bf:67:ba:3f:83:3f:4b:da:60: 85:c8:33:be:38:1f:ef:74:6e:d3:c4:b9:3d:f3:d1:13:f1:bd: 43:50:9a:3e:21:77:85:66:57:d7:0d:b2:1b:82:fe:b5:79:58: 42:d0:b8:2b:eb:40:a5:3a:10:18:fc:4c:a7:56:0a:09:10:14: e9:2f:2d:25:a4:12:34:a2:4c:6c:c6:51:72:35:8a:e8:ec:50: d1:45:61:8d:35:ba:48:eb:30:4a:35:ff:70:3e:21:40:af:9b: 3a:89:08:d4:5c:c0:5d:fe:6d:12:84:81:4e:cb:b3:a2:00:1d: 68:62:39:24:1b:8b:0f:0c:61:8d:ca:89:61:48:af:f2:0e:97: f9:25:16:72:ba:42:fb:ea:a6:15:bf:7f:40:2c:a3:92:8d:46: 2e:92:8f:9f:fd:b0:d9:21:40:a3:f0:d6:6f:63:10:b5:93:ad: 7a:72:53:03:38:d7:5b:cc:4a:a4:68:2f:3c:08:55:af:f7:da: 0b:e2:5a:e5:e9:50:80:f8:8c:57:6e:2c:6b:38:b3:3e:29:06: b9:96:a8:16 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZsBsz5/GXQJvtXwhIeyu8LjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUxMjA5MDYwMTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGYxOGZlNzAwYzZiM2M5YWViNzQ3MTc0NDMxMDJmMzgwOTMwZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iZeJB0jzdRb20be69oa057+/hXz 0TKp7FZDznN8na9ojV3lDwxzzvsyxAkrNTj44Bp4wm8EOq5b4N+/momBpZM1I6H9 pzThT5r0ECaXytNA40wlzzWksoIDX24iR90ngc7oYjyVZigdHDckZYTGCIBUCrOP D/SXEE3+0mmu2gM/fc/ROX/ZFbj87hp4Wt+jS4GXgtwBWDdFXTMQ1gBPcrNNt3s8 fLQDKp73pO1eK26ZSrQahGz659FY0rKDK6RX3149t/8uGzk372lpmqxWAjACUK31 f9Z6h/88jNPcuGxz1ksqiOFG+SwOWimq43HtN0vyxeZam1sowG1AiM3XBwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFG3xj+cAxrPJrrdHF0QxAvOAkw3jMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvYmZHUDV3REdzOG11dDBjWFJERUM4NENURGVNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj5mMA0GCSqGSIb3 DQEBCwUAA4IBAQDMo7DN8wcfrJtL/vVSUBI4BY373IStSeu5ZBDBCkyjmcbR1dYT Xx8VTC9/GDG/Z7o/gz9L2mCFyDO+OB/vdG7TxLk989ET8b1DUJo+IXeFZlfXDbIb gv61eVhC0Lgr60ClOhAY/EynVgoJEBTpLy0lpBI0okxsxlFyNYro7FDRRWGNNbpI 6zBKNf9wPiFAr5s6iQjUXMBd/m0ShIFOy7OiAB1oYjkkG4sPDGGNyolhSK/yDpf5 JRZyukL76qYVv39ALKOSjUYuko+f/bDZIUCj8NZvYxC1k616clMDONdbzEqkaC88 CFWv99oL4lrl6VCA+IxXbixrOLM+KQa5lqgW -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:53 2025 by rpki-client