This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/ImmEYTPaa_M5i96yzwK3zOWsvic.asa File: ImmEYTPaa_M5i96yzwK3zOWsvic.asa (raw, json) Hash identifier: Dzp24YVMoPzVQCnwgDYknu5+WKzXSOuoQovIfdA2U2k= Subject key identifier: 22:69:84:61:33:DA:6B:F3:39:8B:DE:B2:CF:02:B7:CC:E5:AC:BE:27 Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac Certificate serial: 019B09248FC5C2DCB6319C79F247C4790DC3 Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/ImmEYTPaa_M5i96yzwK3zOWsvic.asa Signing time: Wed 10 Dec 2025 16:42:29 +0000 ASPA not before: Wed 10 Dec 2025 16:42:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 208015 Providers: AS: 3320 AS: 8220 AS: 8881 AS: 34549 AS: 208016 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:24:8f:c5:c2:dc:b6:31:9c:79:f2:47:c4:79:0d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac Validity Not Before: Dec 10 16:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2269846133da6bf3398bdeb2cf02b7cce5acbe27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:72:37:8e:67:54:3b:c6:17:bb:ef:72:59: b1:a8:0e:ec:22:a4:3f:6b:a7:05:23:be:0b:f2:35: 66:22:bc:b1:68:22:70:9c:d3:59:04:45:80:d5:f5: 0a:a4:10:58:4d:be:ba:1c:8c:b5:92:d8:e8:e8:15: 10:9a:86:1b:b0:e6:f8:e0:e2:c8:44:df:d6:e0:d8: d6:ee:fd:8d:41:9f:bf:6e:a8:8c:24:18:e1:12:9f: 65:66:37:ee:22:1e:6f:97:83:d1:19:34:9c:28:4e: d4:ce:74:91:b1:10:83:9b:1c:bf:93:dc:fb:c9:47: e9:9a:8e:49:49:dd:d8:98:33:fd:d8:c0:43:49:fa: 3a:28:96:3c:45:62:03:ff:2d:52:58:50:70:60:26: 86:b1:f8:5e:30:24:7a:21:78:38:02:07:41:bb:c4: 37:f7:a0:f1:23:6a:6d:7f:ac:ac:c7:ab:50:24:57: 65:19:12:f9:e4:94:a0:0b:39:8b:16:00:5f:a1:c2: 7d:d7:91:dd:16:7c:ad:0d:2b:23:d4:7a:26:1c:4a: 59:b6:b3:73:39:bc:ba:1c:73:e0:6a:53:6f:d4:d2: 19:26:95:cb:a2:fc:f4:1f:06:16:4b:5b:03:cb:94: bd:f4:01:b2:d1:5a:6c:e3:1b:08:4b:c5:9a:9e:09: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:84:61:33:DA:6B:F3:39:8B:DE:B2:CF:02:B7:CC:E5:AC:BE:27 X509v3 Authority Key Identifier: keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/ImmEYTPaa_M5i96yzwK3zOWsvic.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208015 Signature Algorithm: sha256WithRSAEncryption 57:4b:33:30:96:67:55:e8:0b:df:7f:a5:73:cf:87:f4:50:8e: 34:cf:a1:4e:83:80:bb:e1:f4:47:6b:a1:a8:ec:d8:2f:a5:cd: d6:2f:66:e3:ea:fd:40:04:94:09:e6:ef:ba:46:1f:ae:be:e0: 35:22:c8:b9:cd:45:80:2d:82:74:e6:4a:1f:23:45:ac:19:aa: c7:f9:c2:b4:ff:13:08:ae:1a:ca:d2:b7:7d:00:d6:e5:03:6c: 4e:f3:c4:25:11:75:65:32:ec:5c:a1:20:90:3c:e8:de:97:3d: 9f:21:67:77:83:f7:13:37:e0:7e:63:ea:84:12:27:a0:19:64: 82:27:1e:80:63:c2:2a:cc:3a:ca:3b:10:18:0f:c9:e6:26:e8: fd:53:46:de:1f:5b:4d:85:20:eb:1e:d9:9b:d8:8d:32:19:b8: 39:bf:15:d2:05:f0:e4:27:ee:12:c2:d0:79:67:6f:0e:a7:7b: f1:ed:ac:fc:7e:ca:7e:7c:b4:f2:48:0b:9d:95:10:26:be:9d: c1:75:c3:d1:fc:a6:9a:04:0c:72:6b:84:ef:c1:14:0d:1a:61: 54:d9:72:21:93:7c:e9:b0:1e:94:89:7e:c8:0b:f4:ac:ab:e8: 8d:1a:e8:cc:6b:70:ed:ca:bd:42:8d:27:c8:fe:b1:f2:92:1f: c5:e1:81:c9 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsJJI/Fwty2MZx58kfEeQ3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1 YzdkYWMwHhcNMjUxMjEwMTY0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjY5ODQ2MTMzZGE2YmYzMzk4YmRlYjJjZjAyYjdjY2U1YWNiZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtexyN45nVDvGF7vvclmxqA7sIqQ/ a6cFI74L8jVmIryxaCJwnNNZBEWA1fUKpBBYTb66HIy1ktjo6BUQmoYbsOb44OLI RN/W4NjW7v2NQZ+/bqiMJBjhEp9lZjfuIh5vl4PRGTScKE7UznSRsRCDmxy/k9z7 yUfpmo5JSd3YmDP92MBDSfo6KJY8RWID/y1SWFBwYCaGsfheMCR6IXg4AgdBu8Q3 96DxI2ptf6ysx6tQJFdlGRL55JSgCzmLFgBfocJ915HdFnytDSsj1HomHEpZtrNz Oby6HHPgalNv1NIZJpXLovz0HwYWS1sDy5S99AGy0Vps4xsIS8Wangl/fwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCJphGEz2mvzOYvess8Ct8zlrL4nMB8GA1UdIwQY MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt NmU2MzYxYmVhOTg5LzEvSW1tRVlUUGFhX001aTk2eXp3SzN6T1dzdmljLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5 LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsjzANBgkqhkiG 9w0BAQsFAAOCAQEAV0szMJZnVegL33+lc8+H9FCONM+hToOAu+H0R2uhqOzYL6XN 1i9m4+r9QASUCebvukYfrr7gNSLIuc1FgC2CdOZKHyNFrBmqx/nCtP8TCK4aytK3 fQDW5QNsTvPEJRF1ZTLsXKEgkDzo3pc9nyFnd4P3EzfgfmPqhBInoBlkgicegGPC Ksw6yjsQGA/J5ibo/VNG3h9bTYUg6x7Zm9iNMhm4Ob8V0gXw5CfuEsLQeWdvDqd7 8e2s/H7Kfny08kgLnZUQJr6dwXXD0fymmgQMcmuE78EUDRphVNlyIZN86bAelIl+ yAv0rKvojRrozGtw7cq9Qo0nyP6x8pIfxeGByQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:35 2025 by rpki-client