This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa File: xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa (raw, json) Hash identifier: 4iBkWP8qWume/2A2mXJkWl5EI5fYnKSC+vvo5StFXVg= Subject key identifier: C7:04:5D:A9:7B:E9:67:51:38:3F:40:3A:CC:01:B7:EC:60:98:44:B8 Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Certificate serial: 019AE3CD3A95B005CC841AFCE2992109883C Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa Signing time: Wed 03 Dec 2025 10:41:09 +0000 ASPA not before: Wed 03 Dec 2025 10:41:09 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 31454 Providers: AS: 8708 AS: 9050 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:cd:3a:95:b0:05:cc:84:1a:fc:e2:99:21:09:88:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0 Validity Not Before: Dec 3 10:41:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7045da97be96751383f403acc01b7ec609844b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:f3:1b:d3:c9:40:d2:1e:46:e1:8e:99:ab: 77:21:2d:53:6a:3c:07:8a:f5:e1:80:ba:7b:52:c2: 27:3d:77:d9:0c:2f:e9:c5:5e:b7:24:4b:bd:05:f1: c9:2b:12:22:90:34:4c:6c:e6:b9:13:af:63:5e:f1: 05:4f:1b:4f:0f:05:67:d6:a5:d1:9e:1a:57:7d:ef: ab:a6:74:27:66:fe:13:5b:01:c4:cc:51:a2:00:a4: f3:7b:a8:6d:29:b6:29:38:e0:6f:22:47:5c:e6:6e: 2b:7c:59:82:84:6c:bb:c6:e8:40:77:39:14:a0:2f: 05:59:7e:ee:44:23:61:1f:40:3a:37:a7:1d:de:28: 14:83:2d:fd:42:34:6f:eb:6a:ca:a8:f1:ff:01:fe: 57:38:e4:53:3b:42:37:97:6f:b7:6e:09:12:70:05: c1:06:53:05:0b:0a:ff:f7:a3:47:87:cb:c6:67:fd: fc:10:d4:d1:dc:4e:2c:e2:24:d2:1b:16:c4:fd:2a: 31:62:3c:e5:68:c4:b7:82:84:6f:10:90:87:04:08: 48:14:9e:59:ea:8f:f6:09:8c:5e:81:66:c7:e1:f7: a2:39:d2:d3:bf:28:94:16:84:ce:3f:fb:ad:75:7f: e8:c8:e2:fa:c1:b7:fa:54:d8:e9:f6:bc:da:8b:04: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:04:5D:A9:7B:E9:67:51:38:3F:40:3A:CC:01:B7:EC:60:98:44:B8 X509v3 Authority Key Identifier: keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/xwRdqXvpZ1E4P0A6zAG37GCYRLg.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 31454 Signature Algorithm: sha256WithRSAEncryption 7e:d3:01:67:3e:6d:f3:48:9d:ae:5e:57:eb:f9:f6:c6:b1:cc: d0:99:de:ab:6b:90:56:b1:af:f1:7d:f5:3c:0d:28:90:9a:f8: da:a2:bf:79:de:76:13:cb:aa:45:a7:95:8b:39:af:63:f9:cf: 74:2b:c3:56:f5:a5:38:03:26:72:4e:89:8c:cc:b3:38:b5:44: 0f:9b:be:1d:86:db:23:10:d0:44:f3:1b:be:61:e7:e7:f6:ff: 6c:65:f1:a5:36:e6:2f:9f:98:47:84:aa:47:06:39:21:80:eb: f7:d3:77:6a:46:a0:9c:57:bf:89:00:76:de:14:f1:40:ae:11: f9:33:65:06:8d:23:67:11:32:24:93:5b:1b:1b:a0:58:fe:95: 49:53:30:b8:a8:b7:95:03:b0:c7:84:74:a9:c4:01:cc:70:e2: 68:c9:50:0d:88:02:cb:7a:fd:92:1d:c7:fd:c2:8b:d9:18:9f: 3f:39:2d:78:7f:46:de:10:e2:88:ee:42:dc:c6:40:58:b8:99: 54:82:89:10:26:de:c8:07:43:e0:99:7e:93:07:ce:94:bc:5c: d3:06:80:ee:e6:e2:c2:d1:3a:02:9e:36:ec:4a:df:d3:c0:2e: 37:ab:b2:4c:bd:83:42:f0:10:c1:45:f2:27:0f:65:a2:9b:d3: ae:42:7b:37 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZrjzTqVsAXMhBr84pkhCYg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMDE5ODZlNjU1MWJiM2EwMTVhYzY0ZWQ2NzQ3YzIzNGIy YTc5ZTAwHhcNMjUxMjAzMTA0MTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzA0NWRhOTdiZTk2NzUxMzgzZjQwM2FjYzAxYjdlYzYwOTg0NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsLzG9PJQNIeRuGOmat3IS1TajwH ivXhgLp7UsInPXfZDC/pxV63JEu9BfHJKxIikDRMbOa5E69jXvEFTxtPDwVn1qXR nhpXfe+rpnQnZv4TWwHEzFGiAKTze6htKbYpOOBvIkdc5m4rfFmChGy7xuhAdzkU oC8FWX7uRCNhH0A6N6cd3igUgy39QjRv62rKqPH/Af5XOORTO0I3l2+3bgkScAXB BlMFCwr/96NHh8vGZ/38ENTR3E4s4iTSGxbE/SoxYjzlaMS3goRvEJCHBAhIFJ5Z 6o/2CYxegWbH4feiOdLTvyiUFoTOP/utdX/oyOL6wbf6VNjp9rzaiwQPSQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFMcEXal76WdROD9AOswBt+xgmES4MB8GA1UdIwQY MBaAFB4BmG5lUbs6AVrGTtZ0fCNLKnngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMt ZmY4ZjU1NDVlYmEyLzEveHdSZHFYdnBaMUU0UDBBNnpBRzM3R0NZUkxnLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8zY2JiOWMtNTAwNi00NmJlLWI0YzMtZmY4ZjU1NDVlYmEy LzEvSGdHWWJtVlJ1em9CV3NaTzFuUjhJMHNxZWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnreMA0GCSqGSIb3 DQEBCwUAA4IBAQB+0wFnPm3zSJ2uXlfr+fbGsczQmd6ra5BWsa/xffU8DSiQmvja or953nYTy6pFp5WLOa9j+c90K8NW9aU4AyZyTomMzLM4tUQPm74dhtsjENBE8xu+ Yefn9v9sZfGlNuYvn5hHhKpHBjkhgOv303dqRqCcV7+JAHbeFPFArhH5M2UGjSNn ETIkk1sbG6BY/pVJUzC4qLeVA7DHhHSpxAHMcOJoyVANiALLev2SHcf9wovZGJ8/ OS14f0beEOKI7kLcxkBYuJlUgokQJt7IB0PgmX6TB86UvFzTBoDu5uLC0ToCnjbs St/TwC43q7JMvYNC8BDBRfInD2Wim9OuQns3 -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:29 2025 by rpki-client