This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/2bQPYE6C1xPKacn71h7uNUfwW5k.asa File: 2bQPYE6C1xPKacn71h7uNUfwW5k.asa (raw, json) Hash identifier: S/35bcKz6xhuKu6KdcMaM7TFCVzuh91pCLHJRPyRwag= Subject key identifier: D9:B4:0F:60:4E:82:D7:13:CA:69:C9:FB:D6:1E:EE:35:47:F0:5B:99 Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d Certificate serial: 019ADF27533D7F3B2C29BEA7291AAFC4FB53 Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/2bQPYE6C1xPKacn71h7uNUfwW5k.asa Signing time: Tue 02 Dec 2025 13:01:27 +0000 ASPA not before: Tue 02 Dec 2025 13:01:27 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 199881 Providers: AS: 60983 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:27:53:3d:7f:3b:2c:29:be:a7:29:1a:af:c4:fb:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d Validity Not Before: Dec 2 13:01:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9b40f604e82d713ca69c9fbd61eee3547f05b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:c0:8f:9b:c6:69:50:9f:55:57:72:b5:c2: d6:1a:7a:68:0c:f7:a3:61:4f:8d:aa:3d:55:c1:34: 61:a2:64:cc:86:93:83:33:48:40:9f:50:a3:62:70: a3:a3:2c:58:57:c5:bd:10:87:a2:89:a8:f3:7a:a9: 89:4b:c1:f5:06:e6:e6:6a:2f:d7:20:a3:1f:c7:6e: 4f:eb:11:ae:0d:07:36:81:48:f7:7d:b9:d8:bf:01: d2:c9:be:bb:b4:c4:40:a2:69:89:9a:73:01:7e:d9: 3e:d2:3e:a2:52:e2:d9:47:04:08:48:87:85:94:fd: 30:0b:6d:16:76:62:14:33:1b:15:00:b6:f4:90:15: cf:eb:a2:d8:5b:64:33:6a:c7:5a:5d:46:d4:88:16: f2:7e:40:76:32:d8:68:ee:11:2d:01:3d:bb:86:03: b0:11:b9:72:d3:9f:3a:c1:68:ad:f3:4a:a3:1a:54: 1e:b1:50:44:7e:94:a7:d8:79:ab:2f:ae:97:27:fb: 5f:5a:bd:4c:47:62:b2:46:96:4a:83:da:bc:ca:d6: 80:71:28:97:d0:22:b5:ba:08:ee:13:7d:ac:ad:11: 11:e6:b1:fc:62:ea:e3:69:16:17:28:a9:a2:ac:3f: a3:17:69:9a:78:dd:2d:c3:9d:98:37:b6:b4:3f:cc: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B4:0F:60:4E:82:D7:13:CA:69:C9:FB:D6:1E:EE:35:47:F0:5B:99 X509v3 Authority Key Identifier: keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/2bQPYE6C1xPKacn71h7uNUfwW5k.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199881 Signature Algorithm: sha256WithRSAEncryption 5e:9c:0a:f3:bc:51:81:c0:e1:7b:38:fd:d2:5d:75:5d:67:12: 03:d9:f8:82:fd:01:63:b2:3e:e3:84:73:89:6c:4e:c9:03:f0: 99:ef:e4:f1:b3:8d:49:17:62:67:ed:9e:d1:7e:e0:b9:bf:1e: 64:6a:2e:d0:11:9c:10:00:cd:7e:ed:2c:99:1f:3f:3e:d1:13: 83:dc:18:74:9d:e7:3e:73:c4:5d:17:68:97:40:37:ff:8a:8c: 26:2b:68:6a:66:de:69:a5:fb:78:73:e6:54:ad:cd:46:9d:62: 25:8e:a2:7e:07:7d:23:6f:18:10:54:87:9d:ad:79:b8:99:5d: bf:c6:14:43:21:36:6f:19:81:a1:a9:32:32:7a:6f:25:51:7c: 27:14:2e:11:4b:2e:e0:a8:af:fb:1c:dc:82:3b:46:0d:0e:37: 50:fc:50:89:13:a6:f3:d6:ba:7f:bc:dc:76:31:b5:f5:27:9c: 6e:64:e6:b9:62:f2:83:08:11:21:a7:ae:21:2c:56:30:55:e7: aa:ca:1c:7a:15:06:eb:c9:01:1b:ee:6a:5b:0d:ab:41:c1:81: bd:66:95:33:e7:9a:ef:93:00:f1:6d:e1:98:a6:bc:c5:6f:71: f5:3e:90:e9:2c:2a:53:f6:c5:10:9d:05:9b:b1:48:43:6b:10: 4a:43:db:9e -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrfJ1M9fzssKb6nKRqvxPtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl OGIyOWQwHhcNMjUxMjAyMTMwMTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWI0MGY2MDRlODJkNzEzY2E2OWM5ZmJkNjFlZWUzNTQ3ZjA1Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJnAj5vGaVCfVVdytcLWGnpoDPej YU+Nqj1VwTRhomTMhpODM0hAn1CjYnCjoyxYV8W9EIeiiajzeqmJS8H1Bubmai/X IKMfx25P6xGuDQc2gUj3fbnYvwHSyb67tMRAommJmnMBftk+0j6iUuLZRwQISIeF lP0wC20WdmIUMxsVALb0kBXP66LYW2QzasdaXUbUiBbyfkB2Mtho7hEtAT27hgOw Ebly0586wWit80qjGlQesVBEfpSn2HmrL66XJ/tfWr1MR2KyRpZKg9q8ytaAcSiX 0CK1ugjuE32srRER5rH8YurjaRYXKKmirD+jF2maeN0tw52YN7a0P8yIFwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNm0D2BOgtcTymnJ+9Ye7jVH8FuZMB8GA1UdIwQY MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt YTEwNTZmNTg5MzU0LzEvMmJRUFlFNkMxeFBLYWNuNzFoN3VOVWZ3VzVrLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0 LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMMyTANBgkqhkiG 9w0BAQsFAAOCAQEAXpwK87xRgcDhezj90l11XWcSA9n4gv0BY7I+44RziWxOyQPw me/k8bONSRdiZ+2e0X7gub8eZGou0BGcEADNfu0smR8/PtETg9wYdJ3nPnPEXRdo l0A3/4qMJitoambeaaX7eHPmVK3NRp1iJY6ifgd9I28YEFSHna15uJldv8YUQyE2 bxmBoakyMnpvJVF8JxQuEUsu4Kiv+xzcgjtGDQ43UPxQiROm89a6f7zcdjG19Sec bmTmuWLygwgRIaeuISxWMFXnqsocehUG68kBG+5qWw2rQcGBvWaVM+ea75MA8W3h mKa8xW9x9T6Q6SwqU/bFEJ0Fm7FIQ2sQSkPbng== -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:27 2025 by rpki-client