This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/4yjEk3uPQykpRiAtMe9Ta3puC7E.asa File: 4yjEk3uPQykpRiAtMe9Ta3puC7E.asa (raw, json) Hash identifier: /0Qgnk924zcdudhtbYhG9R/tRH1/XpJIF8EVd02x/IA= Subject key identifier: E3:28:C4:93:7B:8F:43:29:29:46:20:2D:31:EF:53:6B:7A:6E:0B:B1 Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87 Certificate serial: 019AEE73FBED281BDF87BDB1DAC0766194E2 Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/4yjEk3uPQykpRiAtMe9Ta3puC7E.asa Signing time: Fri 05 Dec 2025 12:19:29 +0000 ASPA not before: Fri 05 Dec 2025 12:19:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 9120 Providers: AS: 1299 AS: 31027 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:73:fb:ed:28:1b:df:87:bd:b1:da:c0:76:61:94:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87 Validity Not Before: Dec 5 12:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e328c4937b8f43292946202d31ef536b7a6e0bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:e9:13:30:3b:af:f2:ae:be:dc:d0:08:63: 07:70:62:bb:f2:11:e9:19:23:f0:48:a3:3b:f8:f5: 37:ff:30:4f:b3:ef:ae:ac:fc:e2:95:b7:a5:1b:75: 86:43:f8:87:59:18:d7:f0:4a:6f:cc:42:85:cc:40: 9c:01:aa:69:d2:aa:fc:01:90:f2:eb:07:44:f9:55: f8:13:ce:30:a5:a9:3f:6f:d6:a2:50:2b:a1:60:a0: c1:ce:c1:dd:78:f4:78:c5:0a:74:2d:47:ba:28:ea: c7:bb:30:de:48:0a:c9:7f:98:5a:c0:8b:f9:6c:7f: 26:cf:a5:f8:11:56:4c:fa:10:9d:25:8b:7b:a7:ba: 78:3f:e0:d6:3a:d3:d5:df:86:ba:bb:17:5a:f3:e2: 14:d6:5d:6b:18:46:a4:f0:53:f0:51:54:be:50:e7: ae:80:ee:2f:1b:04:a5:89:13:04:85:0f:9b:76:f6: 56:89:fe:f6:59:fb:9b:4c:bf:f4:65:c5:dd:83:5b: 78:ca:63:b5:91:01:38:99:a8:8d:d5:ef:80:a0:fe: 2c:d4:42:0e:b2:db:a1:85:f0:a1:86:b8:fe:c4:78: de:c1:fc:e2:c8:d3:f6:cd:ce:88:eb:8e:b8:d8:de: fe:4c:3b:bc:ef:24:44:9d:26:dd:2f:cd:71:da:e0: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:28:C4:93:7B:8F:43:29:29:46:20:2D:31:EF:53:6B:7A:6E:0B:B1 X509v3 Authority Key Identifier: keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/4yjEk3uPQykpRiAtMe9Ta3puC7E.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 9120 Signature Algorithm: sha256WithRSAEncryption 58:ca:a1:15:3e:33:17:e9:4c:97:e8:9c:37:f8:cc:1e:18:29: 7d:65:19:f8:7e:50:68:c2:60:99:1c:47:0a:f2:94:7f:b0:8a: c5:a9:64:26:75:85:ce:5f:0b:1b:a2:db:ea:58:ce:bb:44:5c: b3:7f:5e:d2:d1:c2:d4:d3:e8:10:49:7f:1c:a3:74:e2:e6:90: 6a:80:0c:4c:90:56:ae:a7:11:f9:24:24:ec:c4:09:50:ab:c8: 17:ae:a5:d9:04:e2:22:ad:29:77:ad:77:f1:4c:3b:37:08:41: 78:22:95:bc:8c:ee:a9:42:83:e3:69:a3:c5:68:c1:4b:b3:4c: 21:27:ce:74:51:df:ed:92:f1:36:c6:07:9e:ab:08:55:fe:af: 20:7f:04:d3:ff:f2:93:8e:08:a4:3f:35:26:90:5e:64:3f:60: 58:ad:29:45:b9:32:32:50:10:a0:a3:97:db:ba:88:f7:15:4c: 16:7a:41:82:d1:17:05:38:da:bb:7f:0b:36:45:03:0b:f4:33: ab:63:14:91:62:f1:8b:02:5d:97:f2:38:d1:3e:e3:db:f4:f9: f3:af:30:28:16:cc:c0:cc:18:46:64:cc:fc:f4:d0:65:0b:64: f2:34:52:69:c7:d6:2d:e6:17:47:a2:bf:0c:88:07:dd:69:64: 87:b8:c6:36 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZruc/vtKBvfh72x2sB2YZTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjFkMGRiZTA5M2M3MjIzNTA2MThmNDA0NWMyNWJhOTQz MTdmODcwHhcNMjUxMjA1MTIxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzI4YzQ5MzdiOGY0MzI5Mjk0NjIwMmQzMWVmNTM2YjdhNmUwYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDpEzA7r/KuvtzQCGMHcGK78hHp GSPwSKM7+PU3/zBPs++urPzilbelG3WGQ/iHWRjX8EpvzEKFzECcAapp0qr8AZDy 6wdE+VX4E84wpak/b9aiUCuhYKDBzsHdePR4xQp0LUe6KOrHuzDeSArJf5hawIv5 bH8mz6X4EVZM+hCdJYt7p7p4P+DWOtPV34a6uxda8+IU1l1rGEak8FPwUVS+UOeu gO4vGwSliRMEhQ+bdvZWif72WfubTL/0ZcXdg1t4ymO1kQE4maiN1e+AoP4s1EIO stuhhfChhrj+xHjewfziyNP2zc6I64642N7+TDu87yREnSbdL81x2uBFhwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFOMoxJN7j0MpKUYgLTHvU2t6bguxMB8GA1UdIwQY MBaAFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYt MmYwYTZiZGJiZTUxLzEvNHlqRWszdVBReWtwUmlBdE1lOVRhM3B1QzdFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYtMmYwYTZiZGJiZTUx LzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiOgMA0GCSqGSIb3 DQEBCwUAA4IBAQBYyqEVPjMX6UyX6Jw3+MweGCl9ZRn4flBowmCZHEcK8pR/sIrF qWQmdYXOXwsbotvqWM67RFyzf17S0cLU0+gQSX8co3Ti5pBqgAxMkFaupxH5JCTs xAlQq8gXrqXZBOIirSl3rXfxTDs3CEF4IpW8jO6pQoPjaaPFaMFLs0whJ850Ud/t kvE2xgeeqwhV/q8gfwTT//KTjgikPzUmkF5kP2BYrSlFuTIyUBCgo5fbuoj3FUwW ekGC0RcFONq7fws2RQML9DOrYxSRYvGLAl2X8jjRPuPb9PnzrzAoFszAzBhGZMz8 9NBlC2TyNFJpx9Yt5hdHor8MiAfdaWSHuMY2 -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:45 2025 by rpki-client