This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/A38BrfcsQgxWnrcUUfwlwPOLep8.asa File: A38BrfcsQgxWnrcUUfwlwPOLep8.asa (raw, json) Hash identifier: 5CbKlO4vRl7LeM/QrN8IBsyyDEAgnjsF1SDgA3maq64= Subject key identifier: 03:7F:01:AD:F7:2C:42:0C:56:9E:B7:14:51:FC:25:C0:F3:8B:7A:9F Certificate issuer: /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Certificate serial: 019BE6A1ED61E690E4A7E452ED5BC654C7DA Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/A38BrfcsQgxWnrcUUfwlwPOLep8.asa Signing time: Thu 22 Jan 2026 16:55:30 +0000 ASPA not before: Thu 22 Jan 2026 16:55:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 207907 Providers: AS: 6939 AS: 34927 AS: 207841 AS: 209735 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:a1:ed:61:e6:90:e4:a7:e4:52:ed:5b:c6:54:c7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Validity Not Before: Jan 22 16:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037f01adf72c420c569eb71451fc25c0f38b7a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:88:c6:09:50:1f:d3:5c:14:f7:54:26:7b:c9: d1:d4:c4:31:f7:5e:7d:92:06:5a:81:3d:47:36:44: 11:52:dc:3a:90:99:95:2c:05:41:e5:f2:73:17:f4: 46:8a:fc:7d:b4:1a:d3:bf:cb:fd:f4:03:94:05:58: 9a:86:dc:fb:79:4b:7e:4a:23:bf:8a:b4:f0:54:79: 21:15:f7:61:fd:b4:19:55:b4:1f:fb:83:d8:60:5c: 08:fb:a9:68:b7:f2:a7:ed:46:c4:85:5f:60:01:48: 98:a2:58:17:a6:ab:15:aa:c0:2e:28:38:40:e1:ac: 3e:78:b2:01:7b:f3:4b:49:75:15:a2:03:fd:66:91: de:6c:03:f4:1b:df:f2:fe:39:bb:69:09:c4:d3:f8: 5d:a5:a8:24:ff:3b:ae:cf:26:d0:bc:e1:15:b3:e6: 1b:3a:2b:a5:71:a9:89:8c:03:f4:bc:8f:30:b6:36: 9d:07:b0:7e:6d:ae:97:12:a3:a4:cb:47:d1:7d:fa: 0c:69:7c:30:2c:e0:de:af:5b:b2:d3:09:7a:19:e3: 6a:04:60:88:fa:0f:37:b0:2e:54:45:07:05:68:d8: ab:62:f1:a4:62:9e:e5:59:d2:2a:d8:b8:54:fb:c6: 92:5a:4b:29:72:6c:55:21:a6:af:95:4f:e7:29:2d: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:01:AD:F7:2C:42:0C:56:9E:B7:14:51:FC:25:C0:F3:8B:7A:9F X509v3 Authority Key Identifier: keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/A38BrfcsQgxWnrcUUfwlwPOLep8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207907 Signature Algorithm: sha256WithRSAEncryption 41:46:9c:53:83:ba:8d:eb:1e:f8:c6:eb:d7:64:d7:d8:0d:ec: 1f:90:06:78:da:e6:c4:2d:ac:66:f5:8b:77:f3:1a:79:0e:66: 3f:e4:9f:c5:5c:92:42:f5:d9:93:13:d7:e2:21:a1:59:92:7c: fd:6c:da:95:95:09:c6:7f:70:7d:06:15:cf:82:88:97:84:50: f7:80:b0:41:21:24:9b:9b:39:d2:db:a4:8a:d3:ab:c9:48:82: cb:7e:2c:c7:c2:25:48:dd:b3:eb:37:73:53:bd:e1:18:d9:a8: 38:da:f1:e4:8e:5a:4d:b9:68:88:fb:3c:28:5a:1f:30:a8:5d: 3a:32:c0:60:2c:9d:7c:56:95:5e:d7:c8:06:fc:39:26:23:ab: 57:cd:cb:88:5c:27:89:6f:4b:48:8c:3b:42:6e:6e:e6:db:f6: 44:f2:97:7e:80:6a:fa:76:4e:1e:8e:d1:8d:46:47:1a:2c:57: 2f:10:3a:5c:45:4a:9b:c7:48:52:4a:4f:14:dc:b6:74:0a:88: 57:d6:33:a6:b5:db:c4:35:7c:0e:c4:91:db:da:ec:99:f1:e9: 96:45:66:43:c4:60:19:16:be:a0:be:7e:5e:fe:fd:da:d7:3b: 9d:04:c7:63:e7:ec:ac:79:ad:50:ce:58:7f:ca:d8:79:2b:53: 0c:90:f4:9b -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvmoe1h5pDkp+RS7VvGVMfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzEzMWFmN2ZhMDI5NzljNmVhMWRkZTA5ZDhjNzYyZDhh ZWE0MWQwHhcNMjYwMTIyMTY1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdmMDFhZGY3MmM0MjBjNTY5ZWI3MTQ1MWZjMjVjMGYzOGI3YTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YjGCVAf01wU91Qme8nR1MQx9159 kgZagT1HNkQRUtw6kJmVLAVB5fJzF/RGivx9tBrTv8v99AOUBViahtz7eUt+SiO/ irTwVHkhFfdh/bQZVbQf+4PYYFwI+6lot/Kn7UbEhV9gAUiYolgXpqsVqsAuKDhA 4aw+eLIBe/NLSXUVogP9ZpHebAP0G9/y/jm7aQnE0/hdpagk/zuuzybQvOEVs+Yb OiulcamJjAP0vI8wtjadB7B+ba6XEqOky0fRffoMaXwwLODer1uy0wl6GeNqBGCI +g83sC5URQcFaNirYvGkYp7lWdIq2LhU+8aSWkspcmxVIaavlU/nKS1CFwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAN/Aa33LEIMVp63FFH8JcDzi3qfMB8GA1UdIwQY MBaAFMMxMa9/oCl5xuod3gnYx2LYrqQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0Yjct NDliNjY1MWQ5MmRiLzEvQTM4QnJmY3NRZ3hXbnJjVVVmd2x3UE9MZXA4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0YjctNDliNjY1MWQ5MmRi LzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsIzANBgkqhkiG 9w0BAQsFAAOCAQEAQUacU4O6jese+Mbr12TX2A3sH5AGeNrmxC2sZvWLd/MaeQ5m P+SfxVySQvXZkxPX4iGhWZJ8/WzalZUJxn9wfQYVz4KIl4RQ94CwQSEkm5s50tuk itOryUiCy34sx8IlSN2z6zdzU73hGNmoONrx5I5aTbloiPs8KFofMKhdOjLAYCyd fFaVXtfIBvw5JiOrV83LiFwniW9LSIw7Qm5u5tv2RPKXfoBq+nZOHo7RjUZHGixX LxA6XEVKm8dIUkpPFNy2dAqIV9YzprXbxDV8DsSR29rsmfHplkVmQ8RgGRa+oL5+ Xv792tc7nQTHY+fsrHmtUM5Yf8rYeStTDJD0mw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:56 2026 by rpki-client