This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/2mT6EzlmvVa4TOeESSni4GP_NDc.asa File: 2mT6EzlmvVa4TOeESSni4GP_NDc.asa (raw, json) Hash identifier: //JAxE8pNOfcQRjCAnuL6VJwAC51J6gU+QSBFGohmnM= Subject key identifier: DA:64:FA:13:39:66:BD:56:B8:4C:E7:84:49:29:E2:E0:63:FF:34:37 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019AFF58060A1E347DDEA7CF9BB3EA0D3FBF Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/2mT6EzlmvVa4TOeESSni4GP_NDc.asa Signing time: Mon 08 Dec 2025 19:02:30 +0000 ASPA not before: Mon 08 Dec 2025 19:02:30 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 213068 Providers: AS: 553 AS: 9136 AS: 34878 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:58:06:0a:1e:34:7d:de:a7:cf:9b:b3:ea:0d:3f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Dec 8 19:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da64fa133966bd56b84ce7844929e2e063ff3437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:d1:7a:fa:c1:c7:4d:0b:22:7a:96:53:fd: a2:96:80:ca:78:42:02:11:28:bb:9e:bd:9b:38:f3: 89:cb:93:a3:78:83:51:a3:b4:cb:50:b7:cf:a3:6f: 09:76:2c:1b:a6:64:25:66:43:bb:28:b8:40:f5:a1: 3d:c2:a8:c6:45:4f:50:66:09:b3:9e:af:dd:00:43: 34:35:6d:38:2a:0a:77:8c:f3:3d:35:33:8e:8f:a4: 4a:ad:ed:24:c3:d6:1e:84:29:65:a7:07:81:89:f7: 60:dd:f0:e3:1b:5d:71:95:95:ee:cb:0f:40:92:cf: 93:48:a8:ab:5c:58:5b:ca:b6:de:93:e7:70:0f:88: 4c:7a:a7:ce:88:39:57:ab:ee:d9:87:0b:46:3f:5c: 70:54:ac:a0:d3:42:bf:15:8d:77:98:e5:3d:00:ac: 8e:d2:55:ab:89:3a:5a:5e:e6:6b:61:32:d3:dc:f1: ba:0c:66:56:9f:95:04:f0:a0:ba:8e:74:6c:1f:34: 41:03:eb:d6:07:9f:57:9f:ae:9f:bf:41:1a:77:28: 7e:91:ca:8c:5b:fc:97:00:35:d0:61:06:49:72:fc: b6:3d:f4:93:4e:f2:f1:f7:f5:3e:21:66:f0:35:9e: 2b:e4:f7:4e:a2:14:6d:0b:a5:96:0c:cf:46:ae:c2: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:64:FA:13:39:66:BD:56:B8:4C:E7:84:49:29:E2:E0:63:FF:34:37 X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/2mT6EzlmvVa4TOeESSni4GP_NDc.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213068 Signature Algorithm: sha256WithRSAEncryption 7b:e4:cb:90:2a:74:a2:3e:09:27:3e:a2:44:d5:5f:63:b4:7a: 79:0d:5d:d0:06:08:f8:29:48:09:87:6e:d6:28:93:6d:7a:b8: a0:4f:7e:74:a0:fb:75:aa:3e:50:75:3d:a7:60:02:0d:24:ac: 8e:32:a4:cf:11:43:33:b8:18:bf:1e:d0:8e:f1:c6:42:92:9b: 42:a9:ae:51:d8:b2:8d:6b:4e:a0:ca:9f:b0:27:49:50:63:3e: 68:6a:c6:c5:71:34:d0:a4:9b:cf:e3:52:55:f9:5a:6d:b7:f5: fb:63:d2:b7:53:99:d3:c0:c7:58:e1:4c:7d:0d:08:b3:5e:3d: 52:f4:dd:9b:fa:0e:9d:c0:d6:e5:c0:b3:0c:40:d6:13:08:a4: 0a:70:1b:a5:c2:3b:3d:4e:89:ee:26:9e:20:43:53:6c:dd:8b: 8e:20:65:b3:34:75:75:b4:29:e7:c4:f1:41:7b:22:3e:5e:4a: 41:f0:65:e1:dc:5b:ea:02:a2:ea:30:51:af:eb:69:5e:ed:54: 85:7f:1b:45:d0:dd:f5:60:bb:44:62:09:38:2e:5a:1a:ad:bd: a5:33:08:bd:ce:59:48:fb:d5:bd:8b:ef:e1:e5:57:a3:f7:a1: ed:2d:2d:2e:af:79:d2:9c:90:86:2e:6a:12:13:22:bc:30:8a: c6:ea:9e:24 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr/WAYKHjR93qfPm7PqDT+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjUxMjA4MTkwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTY0ZmExMzM5NjZiZDU2Yjg0Y2U3ODQ0OTI5ZTJlMDYzZmYzNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumPRevrBx00LInqWU/2iloDKeEIC ESi7nr2bOPOJy5OjeINRo7TLULfPo28JdiwbpmQlZkO7KLhA9aE9wqjGRU9QZgmz nq/dAEM0NW04Kgp3jPM9NTOOj6RKre0kw9YehCllpweBifdg3fDjG11xlZXuyw9A ks+TSKirXFhbyrbek+dwD4hMeqfOiDlXq+7ZhwtGP1xwVKyg00K/FY13mOU9AKyO 0lWriTpaXuZrYTLT3PG6DGZWn5UE8KC6jnRsHzRBA+vWB59Xn66fv0Eadyh+kcqM W/yXADXQYQZJcvy2PfSTTvLx9/U+IWbwNZ4r5PdOohRtC6WWDM9GrsICrwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNpk+hM5Zr1WuEznhEkp4uBj/zQ3MB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvMm1UNkV6bG12VmE0VE9lRVNTbmk0R1BfTkRjLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNATDANBgkqhkiG 9w0BAQsFAAOCAQEAe+TLkCp0oj4JJz6iRNVfY7R6eQ1d0AYI+ClICYdu1iiTbXq4 oE9+dKD7dao+UHU9p2ACDSSsjjKkzxFDM7gYvx7QjvHGQpKbQqmuUdiyjWtOoMqf sCdJUGM+aGrGxXE00KSbz+NSVflabbf1+2PSt1OZ08DHWOFMfQ0Is149UvTdm/oO ncDW5cCzDEDWEwikCnAbpcI7PU6J7iaeIENTbN2LjiBlszR1dbQp58TxQXsiPl5K QfBl4dxb6gKi6jBRr+tpXu1UhX8bRdDd9WC7RGIJOC5aGq29pTMIvc5ZSPvVvYvv 4eVXo/eh7S0tLq950pyQhi5qEhMivDCKxuqeJA== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:40 2025 by rpki-client