This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/ZyRogeaonWCDX6YHI-BEV3oTgbo.asa File: ZyRogeaonWCDX6YHI-BEV3oTgbo.asa (raw, json) Hash identifier: UhcSgiJzCKNgPVuyaZNIhdxTbMyFoRx3xZ1V9omPKtY= Subject key identifier: 67:24:68:81:E6:A8:9D:60:83:5F:A6:07:23:E0:44:57:7A:13:81:BA Certificate issuer: /CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8 Certificate serial: 019B0940077335461F5AC1A404CC2B3B0FA0 Authority key identifier: 3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/ZyRogeaonWCDX6YHI-BEV3oTgbo.asa Signing time: Wed 10 Dec 2025 17:12:29 +0000 ASPA not before: Wed 10 Dec 2025 17:12:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 200462 Providers: AS: 174 AS: 1299 AS: 2914 AS: 3257 AS: 5405 AS: 5511 AS: 6453 AS: 6762 AS: 6830 AS: 9002 AS: 34549 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.mft rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:40:07:73:35:46:1f:5a:c1:a4:04:cc:2b:3b:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d72a5f4bf7466a61462acb88808c7f036d4d6d8 Validity Not Before: Dec 10 17:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67246881e6a89d60835fa60723e044577a1381ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:06:0b:0b:34:88:44:7c:45:24:6c:4d:b9:68: d9:36:cc:d3:28:17:85:99:54:21:cb:3e:0a:3a:eb: 4a:fe:35:3a:92:97:5f:7e:27:82:33:3e:d8:12:e0: 91:26:24:bb:1b:21:e8:14:b3:9f:59:53:39:dc:04: 81:73:7e:e9:94:e8:9f:61:3c:f4:9b:ea:44:88:10: 96:e3:24:d2:17:48:6a:86:4d:a2:bb:0c:a0:2a:59: 2e:f7:09:a0:ba:cd:be:f7:aa:17:f5:48:1e:8a:48: 1f:3e:32:72:a6:e8:8b:4b:18:4b:6c:ba:95:2d:92: ef:00:3b:40:39:df:46:a7:e6:18:25:0b:15:5a:ba: 4d:c9:bc:aa:f3:36:9e:c6:bc:a2:7c:96:cc:52:c6: ff:fa:7b:67:51:d1:ac:30:c1:1b:e7:15:d4:36:13: d1:13:8a:4e:d2:da:26:0c:74:86:e5:63:e4:aa:87: 2e:54:8d:7a:ab:97:c1:da:cd:f4:39:87:76:d2:43: d7:3c:d7:a4:d3:2a:31:c5:5a:6d:62:75:0c:4b:94: d3:b8:df:4b:e1:ac:d2:6a:56:20:4a:26:ec:60:9a: 91:41:15:2f:c9:74:04:a5:d3:22:63:bb:1a:61:46: cf:be:90:27:0d:e7:f4:d1:61:6d:06:2e:76:13:9b: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:24:68:81:E6:A8:9D:60:83:5F:A6:07:23:E0:44:57:7A:13:81:BA X509v3 Authority Key Identifier: keyid:3D:72:A5:F4:BF:74:66:A6:14:62:AC:B8:88:08:C7:F0:36:D4:D6:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXKl9L90ZqYUYqy4iAjH8DbU1tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/ZyRogeaonWCDX6YHI-BEV3oTgbo.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e89aa9-a3cb-4f75-a442-80c0f14edae1/1/PXKl9L90ZqYUYqy4iAjH8DbU1tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200462 Signature Algorithm: sha256WithRSAEncryption 61:c9:d3:7a:4a:70:39:10:17:a1:5a:62:f7:ad:1a:ad:df:09: 52:33:46:de:d3:ae:6c:c5:c8:c8:67:de:f9:be:82:ef:51:8e: e8:ac:32:ab:96:0d:a3:63:0d:06:70:82:a8:57:c8:35:ea:c3: a2:50:9d:55:f4:ad:1c:90:4b:11:7c:18:b6:fd:bf:6c:53:77: dc:b9:ae:63:ff:7a:1c:33:4d:e0:13:87:6a:fb:c2:8e:91:17: a4:b6:f8:08:00:e6:5f:5c:a4:3e:d9:05:f4:f3:76:b2:8f:cf: 8b:76:ce:9c:a1:49:07:14:76:55:41:f6:31:14:da:0a:14:3a: 36:69:2d:be:fb:1c:a3:c3:19:74:ae:3b:22:fb:45:c8:30:5d: 3d:28:7f:57:4b:8d:2b:42:f0:2d:a7:f9:45:ba:62:a5:fe:b6: a1:59:e3:09:33:43:a5:b2:cb:e1:d1:84:ab:b1:e9:b1:25:11: 1b:d8:3d:c9:e7:a6:0e:39:48:07:d0:a4:a4:e6:63:0b:42:3e: 5b:41:43:a4:0a:d9:3a:e7:4c:2a:8b:3e:fa:a4:6f:35:fc:f6: 69:a0:74:90:7c:a6:12:f4:da:18:a2:92:d1:c6:39:39:c5:94: 63:1f:2c:a9:b4:3f:df:88:ab:2f:f7:3c:71:91:a9:e6:99:2a: 97:81:46:7a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsJQAdzNUYfWsGkBMwrOw+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNzJhNWY0YmY3NDY2YTYxNDYyYWNiODg4MDhjN2YwMzZk NGQ2ZDgwHhcNMjUxMjEwMTcxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NzI0Njg4MWU2YTg5ZDYwODM1ZmE2MDcyM2UwNDQ1NzdhMTM4MWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QYLCzSIRHxFJGxNuWjZNszTKBeF mVQhyz4KOutK/jU6kpdffieCMz7YEuCRJiS7GyHoFLOfWVM53ASBc37plOifYTz0 m+pEiBCW4yTSF0hqhk2iuwygKlku9wmgus2+96oX9UgeikgfPjJypuiLSxhLbLqV LZLvADtAOd9Gp+YYJQsVWrpNybyq8zaexryifJbMUsb/+ntnUdGsMMEb5xXUNhPR E4pO0tomDHSG5WPkqocuVI16q5fB2s30OYd20kPXPNek0yoxxVptYnUMS5TTuN9L 4azSalYgSibsYJqRQRUvyXQEpdMiY7saYUbPvpAnDef00WFtBi52E5sZvQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFGckaIHmqJ1gg1+mByPgRFd6E4G6MB8GA1UdIwQY MBaAFD1ypfS/dGamFGKsuIgIx/A21NbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFhLbDlMOTBacVlVWXF5NGlBakg4RGJVMXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lODlhYTktYTNjYi00Zjc1LWE0NDIt ODBjMGYxNGVkYWUxLzEvWnlSb2dlYW9uV0NEWDZZSEktQkVWM29UZ2JvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lODlhYTktYTNjYi00Zjc1LWE0NDItODBjMGYxNGVkYWUx LzEvUFhLbDlMOTBacVlVWXF5NGlBakg4RGJVMXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPDjANBgkqhkiG 9w0BAQsFAAOCAQEAYcnTekpwORAXoVpi960ard8JUjNG3tOubMXIyGfe+b6C71GO 6Kwyq5YNo2MNBnCCqFfINerDolCdVfStHJBLEXwYtv2/bFN33LmuY/96HDNN4BOH avvCjpEXpLb4CADmX1ykPtkF9PN2so/Pi3bOnKFJBxR2VUH2MRTaChQ6Nmktvvsc o8MZdK47IvtFyDBdPSh/V0uNK0LwLaf5Rbpipf62oVnjCTNDpbLL4dGEq7HpsSUR G9g9yeemDjlIB9CkpOZjC0I+W0FDpArZOudMKos++qRvNfz2aaB0kHymEvTaGKKS 0cY5OcWUYx8sqbQ/34irL/c8cZGp5pkql4FGeg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:43 2025 by rpki-client