This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/MAZcp8zMa1lDf2zvUKI1J7t014U.asa File: MAZcp8zMa1lDf2zvUKI1J7t014U.asa (raw, json) Hash identifier: jICbr8hIKG1YCnyn+VxSRdfMj4CzBFuYkBHTze7swiA= Subject key identifier: 30:06:5C:A7:CC:CC:6B:59:43:7F:6C:EF:50:A2:35:27:BB:74:D7:85 Certificate issuer: /CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Certificate serial: 019B1770D6A4060AA8CE4AF481030609659B Authority key identifier: E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/MAZcp8zMa1lDf2zvUKI1J7t014U.asa Signing time: Sat 13 Dec 2025 11:20:29 +0000 ASPA not before: Sat 13 Dec 2025 11:20:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 202981 Providers: AS: 53667 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.mft rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:70:d6:a4:06:0a:a8:ce:4a:f4:81:03:06:09:65:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bbc1e537e2f3d1e4dab2832ae624b5d6379eed Validity Not Before: Dec 13 11:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=30065ca7cccc6b59437f6cef50a23527bb74d785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:b7:c7:02:4a:a2:64:b6:46:1d:e5:d2:cc: da:bd:42:e2:70:2a:e1:7c:a3:ee:d0:52:f9:03:33: 8d:94:b8:19:15:f9:c1:a4:c2:aa:1c:cb:9a:7a:85: b5:d3:c3:9d:21:f5:db:74:08:b2:e7:ba:60:47:75: 57:28:34:b9:5c:05:62:9a:64:0c:35:47:a4:5d:18: 0c:f4:5d:51:e6:4c:5c:48:4b:36:1c:21:e3:69:35: de:ba:79:6d:77:34:10:ed:ca:7f:fe:19:0e:7c:74: f5:33:21:6d:98:8a:7b:89:cd:5e:20:52:c5:60:7d: 63:b1:91:f7:d6:2f:1a:90:f1:e5:d2:22:0d:da:01: 61:d9:6d:59:1d:31:76:00:b9:94:d2:67:f5:af:eb: 60:62:9f:3c:61:f2:17:ee:b5:5d:c3:cb:de:40:76: 24:df:8f:20:8b:e6:0d:45:23:89:03:a3:dc:d7:e5: 09:5a:fe:d9:b5:5a:01:10:e5:6f:b6:6d:49:fe:5a: 93:8d:fa:2c:a0:00:75:8b:e9:b0:54:f9:9c:38:cb: 9a:6f:a7:04:0d:28:87:77:f2:83:3c:43:58:65:e9: c2:40:63:ea:16:93:d7:c2:dc:92:d8:81:61:ea:4e: b0:b4:3e:00:44:d5:d0:96:77:3a:f4:a4:53:ae:a4: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:5C:A7:CC:CC:6B:59:43:7F:6C:EF:50:A2:35:27:BB:74:D7:85 X509v3 Authority Key Identifier: keyid:E8:BB:C1:E5:37:E2:F3:D1:E4:DA:B2:83:2A:E6:24:B5:D6:37:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LvB5Tfi89Hk2rKDKuYktdY3nu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/MAZcp8zMa1lDf2zvUKI1J7t014U.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9d09bf-d56a-44f7-8cd9-9636e2330d7e/1/6LvB5Tfi89Hk2rKDKuYktdY3nu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202981 Signature Algorithm: sha256WithRSAEncryption 5c:71:83:b3:84:0d:b5:37:3a:6b:38:5f:5a:9a:6b:71:b4:ea: 88:7e:18:e2:7e:f6:6e:d6:eb:b0:17:55:b8:f3:1d:a8:ae:56: b1:24:98:41:f3:21:15:fb:21:e7:10:00:b3:b8:d7:f0:f9:4a: cd:61:f8:43:e1:c9:8a:9e:49:f9:55:2a:f2:6e:96:0e:c7:6b: ba:c3:bd:ab:ee:d0:a1:ad:2e:d3:b4:63:1f:15:06:af:27:be: 4c:e4:ce:bd:a1:42:ab:41:fe:98:92:cf:52:df:3b:d1:32:c8: e7:77:75:68:d7:89:87:7b:04:75:88:ec:81:5d:ef:80:ed:aa: 24:c7:1c:0e:7a:07:b5:80:11:23:ba:5c:4d:9a:50:a9:b6:30: d2:fb:f3:6e:a0:bb:38:e4:85:ca:a3:56:7f:c0:16:10:74:26: f1:a8:87:fa:c3:d2:a2:13:9f:83:8e:60:f5:c7:78:98:e2:04: 75:f3:fb:c4:ff:a0:b2:34:60:08:22:23:03:9b:98:b7:60:44: 1a:33:44:12:09:35:fa:e9:89:5a:9e:60:e6:f9:ec:a7:ba:60: 14:88:1c:1d:cf:8e:03:12:b9:31:c0:35:24:43:44:68:20:fb: 09:fa:3d:34:67:9f:cc:6b:b5:74:6f:b9:25:19:0a:e5:d4:bf: e3:e9:64:11 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsXcNakBgqozkr0gQMGCWWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmJjMWU1MzdlMmYzZDFlNGRhYjI4MzJhZTYyNGI1ZDYz NzllZWQwHhcNMjUxMjEzMTEyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDA2NWNhN2NjY2M2YjU5NDM3ZjZjZWY1MGEyMzUyN2JiNzRkNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDm3xwJKomS2Rh3l0szavULicCrh fKPu0FL5AzONlLgZFfnBpMKqHMuaeoW108OdIfXbdAiy57pgR3VXKDS5XAVimmQM NUekXRgM9F1R5kxcSEs2HCHjaTXeunltdzQQ7cp//hkOfHT1MyFtmIp7ic1eIFLF YH1jsZH31i8akPHl0iIN2gFh2W1ZHTF2ALmU0mf1r+tgYp88YfIX7rVdw8veQHYk 348gi+YNRSOJA6Pc1+UJWv7ZtVoBEOVvtm1J/lqTjfosoAB1i+mwVPmcOMuab6cE DSiHd/KDPENYZenCQGPqFpPXwtyS2IFh6k6wtD4ARNXQlnc69KRTrqSVIwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDAGXKfMzGtZQ39s71CiNSe7dNeFMB8GA1UdIwQY MBaAFOi7weU34vPR5NqygyrmJLXWN57tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDkt OTYzNmUyMzMwZDdlLzEvTUFaY3A4ek1hMWxEZjJ6dlVLSTFKN3QwMTRVLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85ZDA5YmYtZDU2YS00NGY3LThjZDktOTYzNmUyMzMwZDdl LzEvNkx2QjVUZmk4OUhrMnJLREt1WWt0ZFkzbnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMY5TANBgkqhkiG 9w0BAQsFAAOCAQEAXHGDs4QNtTc6azhfWpprcbTqiH4Y4n72btbrsBdVuPMdqK5W sSSYQfMhFfsh5xAAs7jX8PlKzWH4Q+HJip5J+VUq8m6WDsdrusO9q+7Qoa0u07Rj HxUGrye+TOTOvaFCq0H+mJLPUt870TLI53d1aNeJh3sEdYjsgV3vgO2qJMccDnoH tYARI7pcTZpQqbYw0vvzbqC7OOSFyqNWf8AWEHQm8aiH+sPSohOfg45g9cd4mOIE dfP7xP+gsjRgCCIjA5uYt2BEGjNEEgk1+umJWp5g5vnsp7pgFIgcHc+OAxK5McA1 JENEaCD7Cfo9NGefzGu1dG+5JRkK5dS/4+lkEQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:51 2025 by rpki-client