This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/Hr8okjlDTXsaje7Sx72N3GRcbxM.asa File: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (raw, json) Hash identifier: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg= Subject key identifier: 1E:BF:28:92:39:43:4D:7B:1A:8D:EE:D2:C7:BD:8D:DC:64:5C:6F:13 Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Certificate serial: 019BBD63E443C7C2FDBCF3B089D4F12A243B Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/Hr8okjlDTXsaje7Sx72N3GRcbxM.asa Signing time: Wed 14 Jan 2026 16:43:18 +0000 ASPA not before: Wed 14 Jan 2026 16:43:18 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 205280 Providers: AS: 205235 AS: 209533 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bd:63:e4:43:c7:c2:fd:bc:f3:b0:89:d4:f1:2a:24:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Validity Not Before: Jan 14 16:43:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ebf289239434d7b1a8deed2c7bd8ddc645c6f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:34:14:e8:bf:39:1e:6f:16:7a:90:31:a4: be:88:87:30:c6:bc:1a:d0:34:33:30:f1:92:ce:f2: a1:23:05:c6:b0:67:74:0b:45:fb:2c:dc:45:2b:91: f2:aa:2d:9a:00:75:df:2e:19:2c:6b:e9:2f:26:5c: 93:77:88:9e:6a:12:50:a7:5e:37:49:4a:da:25:af: 99:f3:00:ee:ce:42:97:3b:84:44:fd:57:17:69:8f: 70:d7:1c:6b:a5:2d:5e:99:5d:29:80:fd:06:57:d9: 0e:af:81:57:91:50:b8:c0:55:69:c6:79:e3:ae:39: 40:d8:a5:50:26:d8:8b:ec:20:81:8f:fd:24:b8:d5: 40:4d:79:62:80:2a:39:c7:3f:48:ac:f8:11:15:ea: 6e:79:62:6d:03:45:25:0f:60:27:26:4e:f1:24:ca: ac:ba:d1:a0:11:c0:3c:57:53:24:75:5e:88:35:cf: 31:7a:98:9e:8f:fa:14:06:c4:0d:d2:04:cb:d0:d5: 77:e6:4a:83:ec:5c:29:e6:e8:48:07:21:e8:db:61: ec:b6:ff:3f:5b:d3:78:73:a3:ee:be:1c:58:17:b4: f0:5a:d8:e8:b6:a9:1f:94:49:e5:72:5c:6b:10:75: 69:9b:21:f4:a9:ff:b2:44:31:37:32:11:8b:4e:72: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BF:28:92:39:43:4D:7B:1A:8D:EE:D2:C7:BD:8D:DC:64:5C:6F:13 X509v3 Authority Key Identifier: keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/Hr8okjlDTXsaje7Sx72N3GRcbxM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205280 Signature Algorithm: sha256WithRSAEncryption 2b:4f:8d:0e:0f:c0:ea:09:78:23:64:8e:78:e7:ae:ba:3f:87: 9d:e5:f4:fc:6b:a5:f3:38:58:b6:ac:60:b1:7e:f9:82:d9:2d: 93:ae:96:b7:c0:86:17:e8:ea:68:4e:03:ea:94:d8:23:0e:57: 18:3e:d2:62:58:02:93:51:84:16:ca:7e:94:ed:ac:c5:18:a7: 2c:cb:d4:cb:da:f5:69:48:28:bf:bf:87:e5:18:12:a2:b5:23: 23:a1:4c:c4:77:ac:6c:3e:43:74:66:ed:23:86:9d:0e:c0:b7: 1b:47:fe:38:f3:fe:4b:ee:04:a9:d6:7a:11:b8:11:89:e9:01: e2:c3:03:51:90:b2:ea:a7:b5:af:e2:f5:a4:b4:77:aa:66:07: 91:6c:54:7e:33:d4:20:53:6b:d9:63:98:44:27:f0:12:1a:39: 6a:4f:de:8d:37:bd:71:52:24:7f:f1:a4:6b:b0:65:98:ad:c5: 54:4a:fd:1c:c7:55:0c:fe:d6:08:d1:84:4d:e9:9c:d8:6e:24: 48:cd:c9:af:f0:db:ce:ab:61:da:7d:33:4c:77:43:21:6a:12: d3:9f:b9:9d:12:25:88:20:5b:e4:61:72:a2:84:93:8a:12:72: a6:fd:77:ac:dd:26:d8:60:3a:37:69:f4:e2:06:f1:62:08:f2: d0:1c:7e:60 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZu9Y+RDx8L9vPOwidTxKiQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDZjZmJkYTkyM2ZhMDY2NjBkNzJjYmMwZjIzMjA1ZGMx ZTFiOTMwHhcNMjYwMTE0MTY0MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWJmMjg5MjM5NDM0ZDdiMWE4ZGVlZDJjN2JkOGRkYzY0NWM2ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgc0FOi/OR5vFnqQMaS+iIcwxrwa 0DQzMPGSzvKhIwXGsGd0C0X7LNxFK5Hyqi2aAHXfLhksa+kvJlyTd4ieahJQp143 SUraJa+Z8wDuzkKXO4RE/VcXaY9w1xxrpS1emV0pgP0GV9kOr4FXkVC4wFVpxnnj rjlA2KVQJtiL7CCBj/0kuNVATXligCo5xz9IrPgRFepueWJtA0UlD2AnJk7xJMqs utGgEcA8V1MkdV6INc8xepiej/oUBsQN0gTL0NV35kqD7Fwp5uhIByHo22Hstv8/ W9N4c6PuvhxYF7TwWtjotqkflEnlclxrEHVpmyH0qf+yRDE3MhGLTnKhRQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFB6/KJI5Q017Go3u0se9jdxkXG8TMB8GA1UdIwQY MBaAFLtGz72pI/oGZg1yy8DyMgXcHhuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTkt ODljNWQ2ZDhkY2MwLzEvSHI4b2tqbERUWHNhamU3U3g3Mk4zR1JjYnhNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTktODljNWQ2ZDhkY2Mw LzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMh4DANBgkqhkiG 9w0BAQsFAAOCAQEAK0+NDg/A6gl4I2SOeOeuuj+HneX0/Gul8zhYtqxgsX75gtkt k66Wt8CGF+jqaE4D6pTYIw5XGD7SYlgCk1GEFsp+lO2sxRinLMvUy9r1aUgov7+H 5RgSorUjI6FMxHesbD5DdGbtI4adDsC3G0f+OPP+S+4EqdZ6EbgRiekB4sMDUZCy 6qe1r+L1pLR3qmYHkWxUfjPUIFNr2WOYRCfwEho5ak/ejTe9cVIkf/Gka7BlmK3F VEr9HMdVDP7WCNGETemc2G4kSM3Jr/Dbzqth2n0zTHdDIWoS05+5nRIliCBb5GFy ooSTihJypv13rN0m2GA6N2n04gbxYgjy0Bx+YA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:30 2026 by rpki-client