This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa File: v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa (raw, json) Hash identifier: R4mBNHuUDg1/Cm7AUx43PJr/9fmdUhHVc5FWE7aFrnc= Subject key identifier: BF:46:67:2C:FF:01:E4:44:14:AC:8B:A4:A3:9F:F2:43:18:77:81:20 Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c Certificate serial: 019B6FA3818716DABA774EEB888D6638419C Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa Signing time: Tue 30 Dec 2025 14:22:25 +0000 ASPA not before: Tue 30 Dec 2025 14:22:25 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 25145 Providers: AS: 3223 AS: 6762 AS: 6939 AS: 9002 AS: 9121 AS: 34984 AS: 39582 AS: 47123 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:a3:81:87:16:da:ba:77:4e:eb:88:8d:66:38:41:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c Validity Not Before: Dec 30 14:22:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf46672cff01e44414ac8ba4a39ff24318778120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:51:9e:6b:69:d9:ae:d3:c0:15:e9:97:4b: ee:0c:20:dc:63:45:4e:2a:25:70:1d:b1:3c:62:12: d2:5b:bd:3a:08:0c:9d:be:15:55:cd:67:c2:5c:09: 73:12:ed:66:0f:40:68:3f:b6:0e:9f:4d:2d:b0:57: 39:5a:af:b9:8c:74:24:a6:40:3f:2a:07:84:5e:7c: 32:34:45:71:68:ad:8f:bb:b0:bd:1d:72:31:95:85: 60:a0:08:f7:d9:75:ab:f9:3b:17:e7:f8:82:74:a6: 1f:0e:af:b8:7d:86:aa:16:80:74:ed:3b:fe:5a:ab: 11:44:34:2c:74:f7:4e:8e:86:0d:de:b2:f3:85:27: a4:c2:61:a9:8b:30:24:70:5e:55:79:29:00:bd:5b: 0e:47:1e:a0:5a:18:15:b2:bf:9a:79:75:ea:da:33: 17:b9:2a:8f:c5:89:12:c0:41:73:0e:7f:20:5a:a8: 1b:85:df:59:34:79:1e:4b:5d:6d:99:13:e3:36:8a: 55:f9:65:41:77:9f:7e:96:88:6b:9c:d9:fb:34:12: 13:ba:e9:9e:3b:d4:c2:97:c1:d2:fd:ee:26:18:6f: e1:64:88:73:1e:22:8c:2e:8b:38:21:7a:49:00:ca: 3e:3c:b9:ef:f7:a9:c2:18:bd:80:d8:98:2f:2b:1c: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:46:67:2C:FF:01:E4:44:14:AC:8B:A4:A3:9F:F2:43:18:77:81:20 X509v3 Authority Key Identifier: keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/v0ZnLP8B5EQUrIuko5_yQxh3gSA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 25145 Signature Algorithm: sha256WithRSAEncryption 55:f6:0f:f8:97:22:c6:e6:ee:7c:13:f8:fa:8c:f1:98:1d:2f: 67:1f:ba:ba:29:07:08:9a:b7:d8:e2:a5:56:f3:46:5f:9f:15: 41:7c:2f:a7:7b:75:51:3c:e4:fe:0d:33:d9:58:a1:4b:45:e2: aa:7f:47:be:d9:0c:f7:35:a4:17:74:25:e9:05:f6:20:4a:f5: 04:e1:08:07:18:38:22:07:15:dc:f6:56:65:de:3c:80:19:98: 31:2c:35:60:10:27:a1:94:0e:ad:c9:fb:f3:e3:52:ad:d3:90: b2:01:87:b5:ee:fe:c1:8f:39:82:ba:b6:e0:3c:c3:3a:fd:b6: 81:17:7d:e8:7a:75:98:df:24:59:29:db:94:f2:45:c3:a5:cd: 24:5e:84:d7:e2:74:6d:74:b1:a4:87:39:86:c8:20:e8:b6:a8: 87:38:7b:87:89:6a:18:c8:5c:75:ba:75:ae:f1:d3:03:fa:0c: aa:1a:44:1e:12:59:3c:9c:97:8d:23:89:6e:56:06:00:c7:8b: 81:e9:dd:8c:23:d8:65:b6:1a:98:5f:d1:17:8a:80:af:c5:de: 46:f0:99:70:58:1c:54:a0:bf:b5:9c:ac:c7:1d:a1:02:37:4e: 41:18:46:94:49:59:aa:dd:2e:7e:b1:c5:6d:31:8e:25:ed:4f: 40:41:8b:0d -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZtvo4GHFtq6d07riI1mOEGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz Yzg4NWMwHhcNMjUxMjMwMTQyMjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQ2NjcyY2ZmMDFlNDQ0MTRhYzhiYTRhMzlmZjI0MzE4Nzc4MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBJRnmtp2a7TwBXpl0vuDCDcY0VO KiVwHbE8YhLSW706CAydvhVVzWfCXAlzEu1mD0BoP7YOn00tsFc5Wq+5jHQkpkA/ KgeEXnwyNEVxaK2Pu7C9HXIxlYVgoAj32XWr+TsX5/iCdKYfDq+4fYaqFoB07Tv+ WqsRRDQsdPdOjoYN3rLzhSekwmGpizAkcF5VeSkAvVsORx6gWhgVsr+aeXXq2jMX uSqPxYkSwEFzDn8gWqgbhd9ZNHkeS11tmRPjNopV+WVBd59+lohrnNn7NBITuume O9TCl8HS/e4mGG/hZIhzHiKMLos4IXpJAMo+PLnv96nCGL2A2JgvKxzTyQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFL9GZyz/AeREFKyLpKOf8kMYd4EgMB8GA1UdIwQY MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt ZDcxMmQ0NzM4MDQ2LzEvdjBabkxQOEI1RVFVckl1a281X3lReGgzZ1NBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2 LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmI5MA0GCSqGSIb3 DQEBCwUAA4IBAQBV9g/4lyLG5u58E/j6jPGYHS9nH7q6KQcImrfY4qVW80ZfnxVB fC+ne3VRPOT+DTPZWKFLReKqf0e+2Qz3NaQXdCXpBfYgSvUE4QgHGDgiBxXc9lZl 3jyAGZgxLDVgECehlA6tyfvz41Kt05CyAYe17v7BjzmCurbgPMM6/baBF33oenWY 3yRZKduU8kXDpc0kXoTX4nRtdLGkhzmGyCDotqiHOHuHiWoYyFx1unWu8dMD+gyq GkQeElk8nJeNI4luVgYAx4uB6d2MI9hlthqYX9EXioCvxd5G8JlwWBxUoL+1nKzH HaECN05BGEaUSVmq3S5+scVtMY4l7U9AQYsN -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:01 2026 by rpki-client