This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/xrO5D70sBfqzb1KvKjiSlTkOZTM.asa File: xrO5D70sBfqzb1KvKjiSlTkOZTM.asa (raw, json) Hash identifier: Y/Q2yHL7nhqRTsgsaLHI7AHhGC8nNqJved6iT4rcOy0= Subject key identifier: C6:B3:B9:0F:BD:2C:05:FA:B3:6F:52:AF:2A:38:92:95:39:0E:65:33 Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b Certificate serial: 019BCD380433972ED5116424D15C7C864E3C Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/xrO5D70sBfqzb1KvKjiSlTkOZTM.asa Signing time: Sat 17 Jan 2026 18:29:18 +0000 ASPA not before: Sat 17 Jan 2026 18:29:18 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 208223 Providers: AS: 6939 AS: 14447 AS: 17408 AS: 18041 AS: 20473 AS: 27523 AS: 44324 AS: 53356 AS: 53808 AS: 58057 AS: 59105 AS: 204539 AS: 209533 AS: 212895 AS: 213605 AS: 215828 AS: 216324 AS: 393577 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:38:04:33:97:2e:d5:11:64:24:d1:5c:7c:86:4e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b Validity Not Before: Jan 17 18:29:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6b3b90fbd2c05fab36f52af2a389295390e6533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:f8:2d:89:6b:e4:06:80:61:98:1b:79:bc: cc:fc:ef:e3:d6:92:41:09:2e:39:a6:ec:84:e9:71: d3:5b:61:d0:89:72:a8:48:f8:d4:dd:ce:c7:65:91: 38:1e:87:0a:dc:07:7a:38:62:e1:9e:9b:b6:f6:87: 9d:f1:8d:9f:24:2a:f9:ea:0e:b7:52:7b:c0:de:dc: 17:cb:98:88:c9:55:17:a2:30:18:eb:7c:25:d7:3a: 65:1c:19:41:0f:37:e0:a5:5a:b0:43:55:e7:7a:90: 57:d4:02:b6:c4:42:0a:0f:a3:24:eb:70:39:6a:cc: 9d:67:a1:ed:67:f4:db:f6:ba:51:2c:fb:0c:28:2a: d9:d6:47:2c:04:aa:6c:05:2a:60:5f:c2:dc:d2:a8: 3e:a3:6b:fd:71:15:d3:47:df:15:bd:d7:17:20:ff: cc:27:27:b3:cd:8c:23:f2:f8:7f:71:c4:61:19:a5: bd:95:82:89:30:c8:47:be:f2:b6:39:0a:02:e0:b4: a3:5a:7d:c2:16:bf:cb:41:69:dc:46:8e:f7:97:a4: 25:c2:e1:14:2f:87:ad:52:99:dc:33:ff:dc:f1:93: 59:5b:fd:55:0d:1a:f3:79:c7:4e:34:fd:0f:77:92: d3:a1:c9:16:09:2e:04:23:52:c0:d1:3f:36:b0:6f: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B3:B9:0F:BD:2C:05:FA:B3:6F:52:AF:2A:38:92:95:39:0E:65:33 X509v3 Authority Key Identifier: keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/xrO5D70sBfqzb1KvKjiSlTkOZTM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208223 Signature Algorithm: sha256WithRSAEncryption 05:aa:8f:9c:b2:70:f8:8e:9c:7d:a5:18:6c:df:1d:d5:72:aa: 13:1e:70:d8:e3:cb:6d:14:52:44:6c:2f:62:7f:18:16:fe:88: c3:14:3a:6d:96:06:1e:2b:7f:21:ee:32:c4:4b:2b:74:4b:a8: 21:17:8b:ea:c9:55:3b:f6:2f:80:18:b7:f7:6a:89:93:67:07: 1c:88:81:d4:c4:ac:4c:06:b5:5c:00:ea:7c:5c:b1:58:ee:2c: 7e:83:4d:94:44:03:15:d2:b9:10:65:ee:ae:77:23:ed:8b:43: 79:9e:9d:4d:13:ff:b7:e4:78:88:d1:4f:50:89:20:b2:2a:f6: 0c:cf:c0:b8:a5:97:ed:f7:b4:7c:ab:ec:20:be:50:c2:7b:a6: ac:59:d1:5a:a3:6f:6a:9c:86:26:a5:c1:5e:6b:21:7b:8a:8d: 3c:6d:c0:74:20:a4:ab:31:66:96:93:ba:63:f5:f3:9c:2e:f9: 14:d3:86:9f:cf:a3:61:9c:ef:b1:5e:33:cf:00:fd:d5:fc:d7: 9f:df:fa:55:39:f5:88:5f:8e:60:a7:fd:06:16:d9:4e:90:83: b2:56:00:a3:29:9a:a8:82:1f:12:b5:bb:84:a5:5b:e0:50:27: a1:91:ec:96:7d:ca:4c:eb:cf:23:d0:e5:54:05:24:0b:90:7b: 59:94:3b:08 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvNOAQzly7VEWQk0Vx8hk48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWMzNzJmN2E5YjgxNzFkY2JmYzExNjBjYWEyMmM4ZmRj NjhiN2IwHhcNMjYwMTE3MTgyOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmIzYjkwZmJkMmMwNWZhYjM2ZjUyYWYyYTM4OTI5NTM5MGU2NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M74LYlr5AaAYZgbebzM/O/j1pJB CS45puyE6XHTW2HQiXKoSPjU3c7HZZE4HocK3Ad6OGLhnpu29oed8Y2fJCr56g63 UnvA3twXy5iIyVUXojAY63wl1zplHBlBDzfgpVqwQ1XnepBX1AK2xEIKD6Mk63A5 asydZ6HtZ/Tb9rpRLPsMKCrZ1kcsBKpsBSpgX8Lc0qg+o2v9cRXTR98VvdcXIP/M JyezzYwj8vh/ccRhGaW9lYKJMMhHvvK2OQoC4LSjWn3CFr/LQWncRo73l6QlwuEU L4etUpncM//c8ZNZW/1VDRrzecdONP0Pd5LTockWCS4EI1LA0T82sG9lrwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMazuQ+9LAX6s29Sryo4kpU5DmUzMB8GA1UdIwQY MBaAFMysNy96m4Fx3L/BFgyqIsj9xot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQt YzQ1MDJkYTg2OWJiLzEveHJPNUQ3MHNCZnF6YjFLdktqaVNsVGtPWlRNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQtYzQ1MDJkYTg2OWJi LzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMtXzANBgkqhkiG 9w0BAQsFAAOCAQEABaqPnLJw+I6cfaUYbN8d1XKqEx5w2OPLbRRSRGwvYn8YFv6I wxQ6bZYGHit/Ie4yxEsrdEuoIReL6slVO/YvgBi392qJk2cHHIiB1MSsTAa1XADq fFyxWO4sfoNNlEQDFdK5EGXurncj7YtDeZ6dTRP/t+R4iNFPUIkgsir2DM/AuKWX 7fe0fKvsIL5QwnumrFnRWqNvapyGJqXBXmshe4qNPG3AdCCkqzFmlpO6Y/XznC75 FNOGn8+jYZzvsV4zzwD91fzXn9/6VTn1iF+OYKf9BhbZTpCDslYAoymaqIIfErW7 hKVb4FAnoZHsln3KTOvPI9DlVAUkC5B7WZQ7CA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:56 2026 by rpki-client