This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/xtHXPk4W92n0LCAl91mK293p0b0.asa File: xtHXPk4W92n0LCAl91mK293p0b0.asa (raw, json) Hash identifier: kh969yxtGkOu/TJNHd1FmXb6qdM0IeUvqQnojIlQfB4= Subject key identifier: C6:D1:D7:3E:4E:16:F7:69:F4:2C:20:25:F7:59:8A:DB:DD:E9:D1:BD Certificate issuer: /CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa Certificate serial: 019BF552EAF0F7236223DB4D1DDBC91AE0CB Authority key identifier: 95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/xtHXPk4W92n0LCAl91mK293p0b0.asa Signing time: Sun 25 Jan 2026 13:23:30 +0000 ASPA not before: Sun 25 Jan 2026 13:23:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 210457 Providers: AS: 1 AS: 174 AS: 1299 AS: 2914 AS: 3257 AS: 3320 AS: 3356 AS: 3491 AS: 5405 AS: 5511 AS: 6453 AS: 6762 AS: 6939 AS: 9002 AS: 52041 AS: 58212 AS: 199524 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.mft rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:52:ea:f0:f7:23:62:23:db:4d:1d:db:c9:1a:e0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954fc4d8da5765f06d7c24ee27dac0af3431edfa Validity Not Before: Jan 25 13:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6d1d73e4e16f769f42c2025f7598adbdde9d1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:71:cd:5a:47:72:ed:5d:f5:74:09:ea:0b: c1:d9:2c:25:7f:dc:90:a7:33:0a:bd:0a:50:dd:24: 75:1e:5b:5e:b0:fa:f8:24:7e:c2:6d:d1:03:90:e7: 51:83:4c:ce:fa:70:cb:cd:2c:31:3a:5e:a8:dc:4b: ed:4b:fe:ea:66:08:85:54:15:29:1a:62:db:01:40: 4f:dd:90:80:cc:7e:46:23:10:1e:5d:3c:0e:13:87: fb:e2:94:e6:55:09:6a:a4:cf:0b:54:80:97:90:99: cc:42:da:60:43:a9:16:63:73:03:ec:d2:59:63:a2: a0:93:a4:3d:ae:87:fe:69:c2:8a:94:61:c9:78:f2: 2a:8f:b9:07:d3:fa:90:65:ac:4e:23:b0:10:c2:85: 0b:97:70:84:5e:58:e1:0c:2e:d3:0c:21:0a:2e:46: 32:76:60:75:4f:98:da:ee:3d:0d:e9:37:21:c8:e9: 86:6d:03:b2:df:3b:2d:56:a4:69:bd:08:a1:d6:0f: b0:15:4d:2b:bb:9a:79:db:75:8e:5f:e1:41:b1:11: dd:a2:cc:59:e3:b1:22:82:d3:cc:b8:74:1b:5b:fe: 1c:b5:ed:26:e8:33:75:fa:53:3c:49:2f:c3:7b:ed: 83:b1:f3:e4:aa:f4:85:5c:ee:b0:53:5a:e9:c1:43: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D1:D7:3E:4E:16:F7:69:F4:2C:20:25:F7:59:8A:DB:DD:E9:D1:BD X509v3 Authority Key Identifier: keyid:95:4F:C4:D8:DA:57:65:F0:6D:7C:24:EE:27:DA:C0:AF:34:31:ED:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lU_E2NpXZfBtfCTuJ9rArzQx7fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/xtHXPk4W92n0LCAl91mK293p0b0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/21ce05-9cc2-4451-bd19-040844fa4238/1/lU_E2NpXZfBtfCTuJ9rArzQx7fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210457 Signature Algorithm: sha256WithRSAEncryption 34:d9:64:70:42:ea:7c:73:6d:f2:14:75:4c:bb:19:1b:f9:d0: b8:ec:6c:53:e5:8b:81:7c:49:50:c5:49:8d:39:90:26:0a:06: 22:59:29:f5:2f:dc:03:e6:da:8d:2a:3d:72:79:c3:ae:45:48: c0:f6:a3:d8:da:fd:fc:2f:d8:7b:18:0f:71:a1:7f:57:e0:78: b1:a0:be:56:57:78:e4:67:d3:86:5f:97:73:bb:23:e9:70:7e: 5e:65:76:85:80:54:11:e8:7c:48:0e:56:a6:fd:a7:42:9f:3c: 4b:b5:40:90:c7:ef:d7:ee:e1:c7:11:e4:fa:16:c4:e4:5d:e4: df:46:c0:75:4d:94:e1:36:ed:94:b5:f3:a0:5b:09:8c:8d:41: 44:6e:74:11:cc:05:b1:c8:33:68:1c:d6:0d:79:8d:40:63:f8: b1:b8:a7:51:4e:41:0d:95:ea:db:ec:28:8d:be:5f:bf:3c:07: ea:de:3a:e5:ea:49:27:ae:a3:68:b1:63:0d:ca:60:7b:9e:bb: ce:d1:09:7d:ae:9d:f8:64:0d:bb:a7:23:9a:8d:99:44:a9:ae: 52:bd:be:e6:4d:97:f1:af:5a:19:90:de:65:5f:e6:2f:46:c4: 83:d7:bb:64:88:53:39:ea:2c:cb:c2:e7:b5:e8:51:51:3b:9a: 8b:f1:f9:00 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZv1Uurw9yNiI9tNHdvJGuDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGZjNGQ4ZGE1NzY1ZjA2ZDdjMjRlZTI3ZGFjMGFmMzQz MWVkZmEwHhcNMjYwMTI1MTMyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmQxZDczZTRlMTZmNzY5ZjQyYzIwMjVmNzU5OGFkYmRkZTlkMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArndxzVpHcu1d9XQJ6gvB2Swlf9yQ pzMKvQpQ3SR1HltesPr4JH7CbdEDkOdRg0zO+nDLzSwxOl6o3EvtS/7qZgiFVBUp GmLbAUBP3ZCAzH5GIxAeXTwOE4f74pTmVQlqpM8LVICXkJnMQtpgQ6kWY3MD7NJZ Y6Kgk6Q9rof+acKKlGHJePIqj7kH0/qQZaxOI7AQwoULl3CEXljhDC7TDCEKLkYy dmB1T5ja7j0N6TchyOmGbQOy3zstVqRpvQih1g+wFU0ru5p523WOX+FBsRHdosxZ 47EigtPMuHQbW/4cte0m6DN1+lM8SS/De+2DsfPkqvSFXO6wU1rpwUMLGwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMbR1z5OFvdp9CwgJfdZitvd6dG9MB8GA1UdIwQY MBaAFJVPxNjaV2XwbXwk7ifawK80Me36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTkt MDQwODQ0ZmE0MjM4LzEveHRIWFBrNFc5Mm4wTENBbDkxbUsyOTNwMGIwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yMWNlMDUtOWNjMi00NDUxLWJkMTktMDQwODQ0ZmE0MjM4 LzEvbFVfRTJOcFhaZkJ0ZkNUdUo5ckFyelF4N2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2GTANBgkqhkiG 9w0BAQsFAAOCAQEANNlkcELqfHNt8hR1TLsZG/nQuOxsU+WLgXxJUMVJjTmQJgoG Ilkp9S/cA+bajSo9cnnDrkVIwPaj2Nr9/C/YexgPcaF/V+B4saC+Vld45GfThl+X c7sj6XB+XmV2hYBUEeh8SA5Wpv2nQp88S7VAkMfv1+7hxxHk+hbE5F3k30bAdU2U 4TbtlLXzoFsJjI1BRG50EcwFscgzaBzWDXmNQGP4sbinUU5BDZXq2+wojb5fvzwH 6t465epJJ66jaLFjDcpge567ztEJfa6d+GQNu6cjmo2ZRKmuUr2+5k2X8a9aGZDe ZV/mL0bEg9e7ZIhTOeosy8LntehRUTuai/H5AA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:48 2026 by rpki-client