This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/u0GdgN-zNrCqYGut-a35qKNwzjs.asa File: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (raw, json) Hash identifier: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4= Subject key identifier: BB:41:9D:80:DF:B3:36:B0:AA:60:6B:AD:F9:AD:F9:A8:A3:70:CE:3B Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a Certificate serial: 019AC9516DB096F65E61626BC7F78EDBAFE8 Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/u0GdgN-zNrCqYGut-a35qKNwzjs.asa Signing time: Fri 28 Nov 2025 07:15:48 +0000 ASPA not before: Fri 28 Nov 2025 07:15:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 38927 Providers: AS: 9063 AS: 15965 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:51:6d:b0:96:f6:5e:61:62:6b:c7:f7:8e:db:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a Validity Not Before: Nov 28 07:15:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb419d80dfb336b0aa606badf9adf9a8a370ce3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:06:d6:cd:ae:34:22:5d:cc:a9:7e:65:5d: 9d:cc:73:16:25:26:5e:9b:a5:5d:82:87:8d:39:0c: d6:70:b2:eb:a9:b8:ff:24:c5:b0:12:ae:13:83:f4: 26:b0:04:a8:98:77:74:3d:56:f0:77:71:a0:c2:80: 49:8d:b6:b5:ff:80:40:d7:61:78:3d:2e:27:86:e5: 86:8d:29:23:7c:6b:2d:74:b9:da:52:9d:11:ca:30: 9e:50:c5:ea:b4:00:8d:1b:ec:d7:ec:aa:09:2e:e3: 58:54:18:f6:50:54:0c:d2:d6:36:25:f4:53:a4:ae: 8f:c3:61:8f:f7:c5:b2:0a:a0:2b:2b:bf:7e:76:5a: 9a:db:7a:90:a3:f4:f6:62:2d:48:42:b3:35:0b:58: c7:de:6f:41:0f:fc:cb:b9:c9:e4:34:b8:90:d4:bf: 41:22:d1:8a:fd:ce:98:ca:a3:4c:d3:2a:26:57:46: 8f:8e:1e:27:8d:0c:13:c5:1a:73:cb:f9:8b:2f:fa: 73:e4:c7:6a:e4:af:69:35:a0:a1:bf:58:da:22:dc: 83:5e:1d:87:bc:a6:f0:b1:0c:b9:38:a3:56:4c:25: 1e:0e:75:7e:71:51:65:95:89:c6:d7:aa:62:5d:41: 7a:ef:54:01:ff:c5:18:53:c9:7f:d9:82:69:61:15: d4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:41:9D:80:DF:B3:36:B0:AA:60:6B:AD:F9:AD:F9:A8:A3:70:CE:3B X509v3 Authority Key Identifier: keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/u0GdgN-zNrCqYGut-a35qKNwzjs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 38927 Signature Algorithm: sha256WithRSAEncryption 8c:a2:6b:c9:96:c7:aa:d8:b1:0e:f5:2b:0c:10:fb:2b:f2:6c: a2:dd:cd:ec:a6:ea:a9:3e:5f:e7:63:e6:01:14:7a:f8:09:f0: dd:63:f3:46:bd:0c:7f:1a:ad:b0:c4:bf:43:1f:2b:fd:e4:98: 44:c0:32:61:e7:8a:1d:95:46:cd:6d:46:38:b1:ab:c0:1d:e5: b9:1a:00:da:14:69:b2:07:60:33:bf:b2:19:2a:c2:40:7b:ca: 53:00:5b:54:66:e5:b4:21:b7:4c:05:aa:ec:d6:c3:13:4a:f4: 21:ee:87:cb:33:c9:86:0d:d3:72:15:4d:64:43:32:15:c0:03: cb:a3:20:3a:db:6c:cb:0d:05:55:ff:02:bf:3e:ac:81:c9:b4: 86:cb:57:87:44:2e:a4:cd:5b:68:53:b3:d0:27:c6:5a:ca:7d: 6a:fc:41:9b:4d:bc:a5:ea:a5:70:b7:04:a6:b2:30:04:f9:fe: d1:0f:a8:4d:b0:a8:b1:5a:ff:ec:36:40:1d:51:de:20:cc:33: ff:23:7c:6d:3d:15:9a:17:7d:25:29:8d:41:af:13:1a:4a:7a: 56:2e:f4:57:2a:8a:06:e6:15:c7:cd:dd:77:03:dc:5a:f7:18: d4:2a:e9:77:92:e4:0d:35:25:58:b6:38:6b:76:1e:a1:ef:86: 58:f0:27:17 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrJUW2wlvZeYWJrx/eO26/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjAwZWQ2MmJlZWYzMDcwYTEzNmRkOTg0NWZkMjZlMjFm ZDI2MWEwHhcNMjUxMTI4MDcxNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQxOWQ4MGRmYjMzNmIwYWE2MDZiYWRmOWFkZjlhOGEzNzBjZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2toG1s2uNCJdzKl+ZV2dzHMWJSZe m6VdgoeNOQzWcLLrqbj/JMWwEq4Tg/QmsASomHd0PVbwd3GgwoBJjba1/4BA12F4 PS4nhuWGjSkjfGstdLnaUp0RyjCeUMXqtACNG+zX7KoJLuNYVBj2UFQM0tY2JfRT pK6Pw2GP98WyCqArK79+dlqa23qQo/T2Yi1IQrM1C1jH3m9BD/zLucnkNLiQ1L9B ItGK/c6YyqNM0yomV0aPjh4njQwTxRpzy/mLL/pz5Mdq5K9pNaChv1jaItyDXh2H vKbwsQy5OKNWTCUeDnV+cVFllYnG16piXUF671QB/8UYU8l/2YJpYRXUswIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFLtBnYDfszawqmBrrfmt+aijcM47MB8GA1UdIwQY MBaAFKywDtYr7vMHChNt2YRf0m4h/SYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAt YWFjODlmMmYxN2NkLzEvdTBHZGdOLXpOckNxWUd1dC1hMzVxS053empzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAtYWFjODlmMmYxN2Nk LzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYDzANBgkqhkiG 9w0BAQsFAAOCAQEAjKJryZbHqtixDvUrDBD7K/Jsot3N7KbqqT5f52PmARR6+Anw 3WPzRr0MfxqtsMS/Qx8r/eSYRMAyYeeKHZVGzW1GOLGrwB3luRoA2hRpsgdgM7+y GSrCQHvKUwBbVGbltCG3TAWq7NbDE0r0Ie6HyzPJhg3TchVNZEMyFcADy6MgOtts yw0FVf8Cvz6sgcm0hstXh0QupM1baFOz0CfGWsp9avxBm028peqlcLcEprIwBPn+ 0Q+oTbCosVr/7DZAHVHeIMwz/yN8bT0Vmhd9JSmNQa8TGkp6Vi70VyqKBuYVx83d dwPcWvcY1Crpd5LkDTUlWLY4a3Yeoe+GWPAnFw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:37 2025 by rpki-client