This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa File: pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa (raw, json) Hash identifier: 76UHeLcM+om1iT2qZCwO5q94A8qOQbIQ5FrClESA93w= Subject key identifier: A7:09:0E:7C:8D:0D:F9:3A:AC:E8:45:84:F9:92:F1:43:6A:43:DD:93 Certificate issuer: /CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Certificate serial: 019AE46B9C324A50217B05A416093F30F331 Authority key identifier: 3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa Signing time: Wed 03 Dec 2025 13:34:08 +0000 ASPA not before: Wed 03 Dec 2025 13:34:08 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214958 Providers: AS: 8283 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.mft rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:6b:9c:32:4a:50:21:7b:05:a4:16:09:3f:30:f3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f58ccd0b17922b58d5e8b2cf2e579ce69ab3863 Validity Not Before: Dec 3 13:34:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a7090e7c8d0df93aace84584f992f1436a43dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:66:e6:38:28:8d:28:79:42:81:37:b4:08: 5e:20:d4:c4:10:a9:1a:20:35:ea:ef:c8:2f:c1:ba: 82:6b:84:96:79:a5:ff:cd:29:89:ba:f4:a8:7c:e2: 8e:75:5f:51:f3:b7:ef:72:51:3e:e6:0e:a7:4a:29: 47:d5:a2:51:6e:33:4f:09:fb:94:f9:72:d3:7c:4b: 3d:57:39:1b:1e:65:ea:eb:41:00:a9:3b:c6:b0:dc: f2:0b:87:de:61:22:0d:09:9a:b1:0e:a3:f9:a3:d2: f4:bb:74:46:39:32:c2:84:e7:f8:ed:0c:05:c9:d9: 79:9a:3d:e3:bd:55:d4:52:ba:69:f6:c5:d9:40:e9: e4:5f:7d:1e:d7:ad:a9:20:2a:32:20:71:cb:05:2a: 67:7f:2f:d4:84:b9:dc:fe:b9:60:8b:76:83:1a:ac: 23:0b:d7:04:dc:02:35:50:55:f5:25:55:00:bb:62: ce:f5:68:9f:a8:0b:b7:b6:bf:14:5b:b7:6d:c5:00: ee:65:85:ed:10:f0:a8:2e:a8:76:59:bc:4f:75:b2: 72:77:40:0d:78:e1:87:b4:bb:14:e0:e9:60:58:d0: 3b:e1:17:5f:75:75:ae:08:65:37:8d:d9:07:b0:92: f4:d5:a1:1a:e0:04:3a:0b:19:35:f5:79:b8:5d:6d: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:09:0E:7C:8D:0D:F9:3A:AC:E8:45:84:F9:92:F1:43:6A:43:DD:93 X509v3 Authority Key Identifier: keyid:3F:58:CC:D0:B1:79:22:B5:8D:5E:8B:2C:F2:E5:79:CE:69:AB:38:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1jM0LF5IrWNXoss8uV5zmmrOGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/pwkOfI0N-Tqs6EWE-ZLxQ2pD3ZM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18dbe2-bc6e-4a92-b9ef-ed79a2f225c0/1/P1jM0LF5IrWNXoss8uV5zmmrOGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214958 Signature Algorithm: sha256WithRSAEncryption 31:7f:d4:a1:c9:48:e6:a4:cf:83:32:a6:c6:0c:2b:3f:8c:d7: 38:04:dc:8e:97:73:f6:f7:1e:d9:89:12:e4:a6:25:35:b6:26: ee:b7:c4:e7:38:a4:a2:24:51:a6:f5:1b:97:41:23:a9:04:cf: 78:db:d5:f3:dd:a4:86:e2:1b:c0:fb:ce:89:d9:1a:7c:06:cd: 87:cb:14:f7:f7:40:4a:16:ff:1b:cf:06:e9:35:91:45:ea:97: 2d:e3:35:d0:9d:9d:14:c4:b9:8c:d9:6b:dd:67:ef:83:54:7e: e0:fc:19:de:de:70:b3:a3:9f:92:62:f2:d2:d9:62:08:8a:40: 9b:07:91:28:7b:a1:ba:b8:e3:21:1c:5f:62:25:c9:a0:b2:bd: 56:e7:fa:a9:e0:73:9e:78:3b:00:39:6d:bd:c5:de:a6:11:b1: 4f:88:05:25:0f:51:6c:ec:fa:fc:38:09:6f:dc:50:dd:57:97: 64:02:99:bb:18:46:3e:dc:82:f4:42:b7:e0:2b:62:10:65:2c: 09:04:fa:40:94:53:7b:06:6c:fc:8a:2c:9e:07:e2:06:e9:7f: ab:c9:0f:71:d2:a5:1b:e0:92:c7:f0:f8:9e:ca:a4:3a:bd:68: 97:77:a7:ed:35:c2:31:bf:33:f9:ae:85:a4:53:85:e9:d7:ba: e8:e3:8b:87 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrka5wySlAhewWkFgk/MPMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmNThjY2QwYjE3OTIyYjU4ZDVlOGIyY2YyZTU3OWNlNjlh YjM4NjMwHhcNMjUxMjAzMTMzNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzA5MGU3YzhkMGRmOTNhYWNlODQ1ODRmOTkyZjE0MzZhNDNkZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgxm5jgojSh5QoE3tAheINTEEKka IDXq78gvwbqCa4SWeaX/zSmJuvSofOKOdV9R87fvclE+5g6nSilH1aJRbjNPCfuU +XLTfEs9VzkbHmXq60EAqTvGsNzyC4feYSINCZqxDqP5o9L0u3RGOTLChOf47QwF ydl5mj3jvVXUUrpp9sXZQOnkX30e162pICoyIHHLBSpnfy/UhLnc/rlgi3aDGqwj C9cE3AI1UFX1JVUAu2LO9WifqAu3tr8UW7dtxQDuZYXtEPCoLqh2WbxPdbJyd0AN eOGHtLsU4OlgWNA74RdfdXWuCGU3jdkHsJL01aEa4AQ6Cxk19Xm4XW1J7QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKcJDnyNDfk6rOhFhPmS8UNqQ92TMB8GA1UdIwQY MBaAFD9YzNCxeSK1jV6LLPLlec5pqzhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYt ZWQ3OWEyZjIyNWMwLzEvcHdrT2ZJME4tVHFzNkVXRS1aTHhRMnBEM1pNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGRiZTItYmM2ZS00YTkyLWI5ZWYtZWQ3OWEyZjIyNWMw LzEvUDFqTTBMRjVJcldOWG9zczh1VjV6bW1yT0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHrjANBgkqhkiG 9w0BAQsFAAOCAQEAMX/UoclI5qTPgzKmxgwrP4zXOATcjpdz9vce2YkS5KYlNbYm 7rfE5zikoiRRpvUbl0EjqQTPeNvV892khuIbwPvOidkafAbNh8sU9/dAShb/G88G 6TWRReqXLeM10J2dFMS5jNlr3Wfvg1R+4PwZ3t5ws6OfkmLy0tliCIpAmweRKHuh urjjIRxfYiXJoLK9Vuf6qeBznng7ADltvcXephGxT4gFJQ9RbOz6/DgJb9xQ3VeX ZAKZuxhGPtyC9EK34CtiEGUsCQT6QJRTewZs/IosngfiBul/q8kPcdKlG+CSx/D4 nsqkOr1ol3en7TXCMb8z+a6FpFOF6de66OOLhw== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:39 2025 by rpki-client