This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa File: uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa (raw, json) Hash identifier: V59RDlnWRRn+EdVBUc5GRnaFwy5JZDP/rY0LRZhUhmM= Subject key identifier: B9:93:A6:D6:D8:35:A8:DA:83:F0:89:58:D9:4D:68:27:5A:A7:96:28 Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Certificate serial: 019AF963A9FD531021047F40832C5DC5C7B6 Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa Signing time: Sun 07 Dec 2025 15:17:29 +0000 ASPA not before: Sun 07 Dec 2025 15:17:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 43617 Providers: AS: 29551 AS: 58145 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:63:a9:fd:53:10:21:04:7f:40:83:2c:5d:c5:c7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48 Validity Not Before: Dec 7 15:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b993a6d6d835a8da83f08958d94d68275aa79628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:4b:17:e3:cb:c7:ae:fb:ac:01:a1:f1:1d: 20:76:0e:f4:09:58:ef:9a:f8:a7:ae:82:3b:3d:c1: a0:45:67:c7:ff:32:b4:b6:3e:ad:cd:cf:08:d7:d6: 4e:81:18:95:52:6b:77:72:42:a6:43:5c:54:46:1c: 1f:11:03:ba:77:14:f2:8b:f9:57:42:1c:5f:12:53: 23:b2:6f:0e:d0:60:c4:5d:6a:6c:84:0a:87:58:95: a9:6d:c5:83:a7:66:3c:f3:5c:d7:b7:ac:44:f5:a9: f5:65:9a:cf:17:fc:88:2d:b5:0c:62:a9:c6:6d:1c: 75:49:6d:1e:fb:9d:cd:0f:86:54:22:d3:69:ed:51: 1c:7e:7a:4c:1c:c0:6c:fb:4c:37:bd:44:c4:0c:d8: de:62:3d:43:d5:17:63:5d:9b:69:b2:7a:ff:90:76: 79:6a:f3:f1:b9:78:d1:fc:41:96:e4:ca:3b:d6:6a: 44:e0:16:3b:1b:5a:b8:c8:2d:e8:7a:1f:12:0b:c4: dd:39:97:62:c1:c4:3b:86:bc:70:1e:b2:52:2a:3a: 22:c2:5f:24:dd:d5:d2:94:a1:da:19:a5:55:b9:67: ab:50:be:f2:46:29:21:b5:6d:29:1d:5c:65:92:b6: b3:8b:b1:8c:18:52:69:f4:09:0a:3c:3d:0c:14:92: 5d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:93:A6:D6:D8:35:A8:DA:83:F0:89:58:D9:4D:68:27:5A:A7:96:28 X509v3 Authority Key Identifier: keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/uZOm1tg1qNqD8IlY2U1oJ1qnlig.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 43617 Signature Algorithm: sha256WithRSAEncryption a7:7f:e6:99:6d:4e:2b:58:f3:0f:c9:ac:ad:04:04:d5:8a:31: bb:3d:53:71:59:5d:b4:f8:d8:f9:c9:4a:a4:ac:e1:9d:09:ee: 89:a2:5e:80:9a:6e:c8:ce:18:ba:76:a0:41:27:c7:5b:0e:ad: 81:65:35:62:8e:5b:91:62:53:f2:0d:c9:06:09:af:b3:5d:a0: a5:5f:2c:76:37:35:35:6a:72:d4:49:21:49:8c:07:00:ac:c2: 1a:86:be:0d:26:ec:a6:89:24:b1:14:e7:86:3d:bb:2a:3d:d3: 78:4b:4e:59:b8:29:dd:bb:61:d9:6a:a7:06:66:8e:30:41:a7: 7e:72:2c:ef:33:78:b1:28:15:27:8c:7e:fd:42:6f:7d:21:c3: 37:16:53:9e:3d:d0:c0:71:a8:5f:ff:eb:8a:a5:cd:dd:6d:2e: 48:ba:7f:7e:e8:ae:16:b8:ec:cd:cc:ae:11:fb:c0:e3:af:f4: f1:fa:e3:b9:40:74:cf:18:a3:18:b3:ca:7c:24:6f:fc:bb:07: b7:97:39:c2:c0:36:8b:63:c9:d3:07:c0:e2:57:d9:ba:bc:aa: 51:79:9e:ab:aa:a9:e4:b7:bd:d1:11:2b:b9:04:e4:3d:0e:95: 6b:5f:a7:06:5e:fb:94:b2:8e:12:9b:da:99:86:20:f8:47:ed: b7:29:ea:89 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr5Y6n9UxAhBH9Agyxdxce2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzNkODljMDZhOGExY2M5ZGJjMzYyMjAxZjdlYzU1OWQ3 ZmRkNDgwHhcNMjUxMjA3MTUxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTkzYTZkNmQ4MzVhOGRhODNmMDg5NThkOTRkNjgyNzVhYTc5NjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI5LF+PLx677rAGh8R0gdg70CVjv mvinroI7PcGgRWfH/zK0tj6tzc8I19ZOgRiVUmt3ckKmQ1xURhwfEQO6dxTyi/lX QhxfElMjsm8O0GDEXWpshAqHWJWpbcWDp2Y881zXt6xE9an1ZZrPF/yILbUMYqnG bRx1SW0e+53ND4ZUItNp7VEcfnpMHMBs+0w3vUTEDNjeYj1D1RdjXZtpsnr/kHZ5 avPxuXjR/EGW5Mo71mpE4BY7G1q4yC3oeh8SC8TdOZdiwcQ7hrxwHrJSKjoiwl8k 3dXSlKHaGaVVuWerUL7yRikhtW0pHVxlkrazi7GMGFJp9AkKPD0MFJJdrwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFLmTptbYNajag/CJWNlNaCdap5YoMB8GA1UdIwQY MBaAFIEz2JwGqKHMnbw2IgH37FWdf91IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEt YzVmZWJlNDg3YzQwLzEvdVpPbTF0ZzFxTnFEOElsWTJVMW9KMXFubGlnLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lOTBmZjItNmM5MS00ZWI4LWE0YjEtYzVmZWJlNDg3YzQw LzEvZ1RQWW5BYW9vY3lkdkRZaUFmZnNWWjFfM1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCqYTANBgkqhkiG 9w0BAQsFAAOCAQEAp3/mmW1OK1jzD8msrQQE1Yoxuz1TcVldtPjY+clKpKzhnQnu iaJegJpuyM4YunagQSfHWw6tgWU1Yo5bkWJT8g3JBgmvs12gpV8sdjc1NWpy1Ekh SYwHAKzCGoa+DSbspokksRTnhj27Kj3TeEtOWbgp3bth2WqnBmaOMEGnfnIs7zN4 sSgVJ4x+/UJvfSHDNxZTnj3QwHGoX//riqXN3W0uSLp/fuiuFrjszcyuEfvA46/0 8frjuUB0zxijGLPKfCRv/LsHt5c5wsA2i2PJ0wfA4lfZuryqUXmeq6qp5Le90REr uQTkPQ6Va1+nBl77lLKOEpvamYYg+EfttynqiQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:37 2025 by rpki-client