This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/OVKvymFrbX43XOljNNooa7WThWs.asa File: OVKvymFrbX43XOljNNooa7WThWs.asa (raw, json) Hash identifier: 1FTm/6RnYDK0EBULBUTl49w/2xuw2jLBEG4MKGTL100= Subject key identifier: 39:52:AF:CA:61:6B:6D:7E:37:5C:E9:63:34:DA:28:6B:B5:93:85:6B Certificate issuer: /CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7 Certificate serial: 019B2C4972B79CA19D1470BEF5718D948A00 Authority key identifier: 3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/OVKvymFrbX43XOljNNooa7WThWs.asa Signing time: Wed 17 Dec 2025 12:29:29 +0000 ASPA not before: Wed 17 Dec 2025 12:29:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 62142 Providers: AS: 9049 AS: 211366 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.mft rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:49:72:b7:9c:a1:9d:14:70:be:f5:71:8d:94:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a7a7661d4a01ecee24384d152ec79aa1c807be7 Validity Not Before: Dec 17 12:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3952afca616b6d7e375ce96334da286bb593856b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:99:52:34:47:8d:ab:f4:31:8e:fe:1e:c6: 89:99:b6:be:f5:38:ad:4d:4c:8c:54:0d:26:23:f0: bb:7a:dc:57:3c:00:b5:6c:65:63:e1:49:99:79:79: 35:94:19:bf:df:2d:c1:aa:01:65:b0:f1:f0:84:64: 98:ed:34:b2:da:ce:6b:c1:51:a2:bc:fb:8f:1d:d1: d7:ac:ea:eb:fe:9d:d8:ab:93:a1:38:5f:e0:0c:0d: 69:e9:71:e7:1e:66:e8:f3:9a:e3:69:55:4a:97:bb: 71:22:08:13:9f:5d:af:48:7f:55:42:35:59:16:b1: bd:e2:3f:6f:1c:cc:71:41:ea:80:17:b8:60:c9:41: 98:ab:db:cc:ac:bb:7b:e4:99:3d:30:56:6f:52:05: 3d:42:d3:2a:5d:99:49:3f:c5:12:13:4b:a0:19:0f: 97:18:f7:73:b3:03:41:95:b7:1a:4a:ab:70:e6:7c: 13:9a:c8:fd:03:4a:10:60:02:e3:97:74:3a:4f:2d: e7:3f:f8:1c:b2:ce:55:74:46:23:b2:a4:5a:a2:ea: da:b4:4f:17:54:5e:6c:56:e4:a8:5f:60:97:3f:9a: e6:37:0b:51:23:8d:44:7d:ca:85:8c:79:a8:84:bd: a4:03:ba:89:44:b7:aa:82:7b:70:fc:07:63:56:26: f3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:52:AF:CA:61:6B:6D:7E:37:5C:E9:63:34:DA:28:6B:B5:93:85:6B X509v3 Authority Key Identifier: keyid:3A:7A:76:61:D4:A0:1E:CE:E2:43:84:D1:52:EC:79:AA:1C:80:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onp2YdSgHs7iQ4TRUux5qhyAe-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/OVKvymFrbX43XOljNNooa7WThWs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a1d84e-0c5d-4fb5-9dd1-8c8524e160f7/1/Onp2YdSgHs7iQ4TRUux5qhyAe-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 62142 Signature Algorithm: sha256WithRSAEncryption c0:96:f2:db:dc:14:fa:b8:be:ab:23:ea:36:53:ff:a9:6b:1b: cc:a7:bb:6d:4b:4b:d2:5d:94:7c:26:fc:23:d8:49:11:f0:6c: e8:4c:22:ef:87:8e:18:b5:3e:3f:c8:f2:81:2b:5e:e5:c4:d2: 30:5f:df:8c:f8:41:a7:26:a1:a3:c0:9d:c1:1a:9d:3f:41:8a: 9d:8c:23:3b:f8:89:c1:58:9f:b6:33:c9:a4:53:0b:36:ad:c6: e1:d9:c5:c8:5f:40:33:81:4f:57:f6:53:d7:ef:48:3e:91:40: 78:fd:86:7a:ff:df:74:83:db:17:66:b9:fc:c4:7b:ba:0a:88: 6b:4d:2e:27:c5:58:35:0a:01:f2:c4:fb:b8:5f:82:81:19:96: fc:eb:6b:19:d7:91:68:96:de:48:0f:d4:13:83:b9:26:c0:90: e5:da:1d:cd:ce:af:d4:8f:ff:f6:6c:e3:5a:f8:47:5d:2e:1a: f5:14:d3:b0:07:3d:26:0f:ec:ae:7b:ba:0f:35:3f:a4:ac:ff: 2d:3e:77:93:4a:e5:e3:6f:3c:05:40:31:71:62:a7:b8:75:46: 16:f7:77:a6:ab:a9:24:3f:7b:c4:64:d1:7f:b9:4f:fd:c6:b6: 15:46:af:ba:c5:84:96:be:43:fb:1f:17:c8:2b:92:36:ed:10: b2:31:c2:cb -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZssSXK3nKGdFHC+9XGNlIoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhN2E3NjYxZDRhMDFlY2VlMjQzODRkMTUyZWM3OWFhMWM4 MDdiZTcwHhcNMjUxMjE3MTIyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTUyYWZjYTYxNmI2ZDdlMzc1Y2U5NjMzNGRhMjg2YmI1OTM4NTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFKZUjRHjav0MY7+HsaJmba+9Tit TUyMVA0mI/C7etxXPAC1bGVj4UmZeXk1lBm/3y3BqgFlsPHwhGSY7TSy2s5rwVGi vPuPHdHXrOrr/p3Yq5OhOF/gDA1p6XHnHmbo85rjaVVKl7txIggTn12vSH9VQjVZ FrG94j9vHMxxQeqAF7hgyUGYq9vMrLt75Jk9MFZvUgU9QtMqXZlJP8USE0ugGQ+X GPdzswNBlbcaSqtw5nwTmsj9A0oQYALjl3Q6Ty3nP/gcss5VdEYjsqRaouratE8X VF5sVuSoX2CXP5rmNwtRI41EfcqFjHmohL2kA7qJRLeqgntw/AdjVibzqwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDlSr8pha21+N1zpYzTaKGu1k4VrMB8GA1UdIwQY MBaAFDp6dmHUoB7O4kOE0VLseaocgHvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEt OGM4NTI0ZTE2MGY3LzEvT1ZLdnltRnJiWDQzWE9sak5Ob29hN1dUaFdzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hMWQ4NGUtMGM1ZC00ZmI1LTlkZDEtOGM4NTI0ZTE2MGY3 LzEvT25wMllkU2dIczdpUTRUUlV1eDVxaHlBZS1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyvjANBgkqhkiG 9w0BAQsFAAOCAQEAwJby29wU+ri+qyPqNlP/qWsbzKe7bUtL0l2UfCb8I9hJEfBs 6Ewi74eOGLU+P8jygSte5cTSMF/fjPhBpyaho8CdwRqdP0GKnYwjO/iJwViftjPJ pFMLNq3G4dnFyF9AM4FPV/ZT1+9IPpFAeP2Gev/fdIPbF2a5/MR7ugqIa00uJ8VY NQoB8sT7uF+CgRmW/OtrGdeRaJbeSA/UE4O5JsCQ5dodzc6v1I//9mzjWvhHXS4a 9RTTsAc9Jg/srnu6DzU/pKz/LT53k0rl4288BUAxcWKnuHVGFvd3pqupJD97xGTR f7lP/ca2FUavusWElr5D+x8XyCuSNu0QsjHCyw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:15:49 2025 by rpki-client