This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/P0CumdZQgDSrrWlI0D1aYJJUcd0.asa
File: P0CumdZQgDSrrWlI0D1aYJJUcd0.asa (raw, json)
Hash identifier: BA2NFYuYvPxMigDBuhbLG4trF8mSaN77z6KytfnkVdg=
Subject key identifier: 3F:40:AE:99:D6:50:80:34:AB:AD:69:48:D0:3D:5A:60:92:54:71:DD
Certificate issuer: /CN=8d7b242cc7406235382324058c91dafc63990026
Certificate serial: 019B04D29A758E7DBEDF4E66E2AB286D36E4
Authority key identifier: 8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/P0CumdZQgDSrrWlI0D1aYJJUcd0.asa
Signing time: Tue 09 Dec 2025 20:34:29 +0000
ASPA not before: Tue 09 Dec 2025 20:34:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 213422
Providers: AS: 34872
AS: 41051
AS: 209533
AS: 212895
AS: 214915
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:04:d2:9a:75:8e:7d:be:df:4e:66:e2:ab:28:6d:36:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7b242cc7406235382324058c91dafc63990026
Validity
Not Before: Dec 9 20:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f40ae99d6508034abad6948d03d5a60925471dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:f1:08:56:85:53:c5:b6:1b:d9:fe:8a:a9:
87:59:09:c2:18:a6:4c:5e:9b:36:5c:9a:aa:f2:42:
41:de:eb:a8:01:8a:e1:d7:e9:71:77:f8:21:f4:4f:
0f:05:ae:ba:df:4b:d4:37:7b:6e:0e:5a:6d:cf:97:
71:1a:34:0b:62:2b:4f:82:70:a5:e9:6b:9b:9d:76:
2b:bb:b4:e8:39:46:09:a7:d7:17:bb:4a:3e:f5:ba:
ff:06:77:5f:64:2a:ce:b5:82:15:04:21:94:c0:19:
b4:01:2b:b2:4d:c2:88:2d:f4:ef:ce:17:a5:f7:bb:
de:9d:90:ce:77:26:4b:12:33:4d:be:cb:94:ca:95:
a4:fc:6a:4c:d2:36:d2:94:40:06:da:e2:da:ad:16:
93:8f:ac:2c:d0:a6:09:04:df:6a:ab:46:3c:cb:a2:
1e:f7:22:4e:8f:0f:09:f2:d2:df:2a:93:19:47:5a:
23:10:32:fb:b2:3e:23:b2:18:b2:df:ca:b1:4a:fd:
9f:48:1e:af:14:8d:16:86:d3:e8:be:bb:4b:b0:35:
ba:01:ed:60:e1:f5:a4:ff:25:c4:1e:63:39:c9:bb:
0f:2b:2b:98:f2:40:5f:70:1b:e6:39:d2:dd:9e:0d:
34:fc:96:60:01:1b:93:9a:2a:82:23:f1:d9:46:98:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:40:AE:99:D6:50:80:34:AB:AD:69:48:D0:3D:5A:60:92:54:71:DD
X509v3 Authority Key Identifier:
keyid:8D:7B:24:2C:C7:40:62:35:38:23:24:05:8C:91:DA:FC:63:99:00:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXskLMdAYjU4IyQFjJHa_GOZACY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/P0CumdZQgDSrrWlI0D1aYJJUcd0.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/174b49-50cb-478f-8a5c-4c22035b92f0/1/jXskLMdAYjU4IyQFjJHa_GOZACY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213422
Signature Algorithm: sha256WithRSAEncryption
90:3e:f5:cc:39:1e:c2:6b:b1:51:9a:b3:21:03:8c:4e:81:12:
18:ee:7c:48:87:3b:4d:0f:16:44:38:51:44:97:2c:19:3c:58:
e7:a9:8a:45:b4:e9:5f:56:e2:da:95:4e:ed:4a:b5:3b:cb:65:
28:8f:23:46:08:bc:67:14:c3:16:10:2c:43:71:c0:e1:50:a2:
fc:b4:0e:96:9a:67:38:0e:94:c7:50:bc:a7:2b:4e:90:22:87:
9e:8a:0a:4b:77:9a:f6:c8:d6:d7:9f:de:40:60:a6:da:50:7c:
e1:1d:b3:4c:b0:c2:50:2a:38:c3:18:56:27:1e:8a:3e:db:6d:
0d:d5:7b:bc:44:bb:91:ea:a3:5f:51:7b:f0:e3:a7:4c:34:b8:
92:41:98:63:1d:e1:cd:2d:a7:fe:13:e4:24:a0:c9:b4:82:73:
17:b0:d8:50:1d:f8:ac:6d:59:7c:75:bc:11:ab:7e:12:b5:0e:
1f:a5:34:9e:8f:8b:e0:45:dc:cd:58:93:0c:fe:85:5f:16:03:
d9:14:41:19:2e:69:af:a3:be:bf:88:a1:86:d0:7c:8c:d9:59:
04:31:1b:e8:79:b9:79:df:55:d5:a8:26:ec:d1:19:78:9a:b4:
39:4c:93:fc:d1:3c:85:bc:08:8e:60:5f:4b:fd:b6:99:77:e1:
07:f6:d3:75
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZsE0pp1jn2+305m4qsobTbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2IyNDJjYzc0MDYyMzUzODIzMjQwNThjOTFkYWZjNjM5
OTAwMjYwHhcNMjUxMjA5MjAzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjQwYWU5OWQ2NTA4MDM0YWJhZDY5NDhkMDNkNWE2MDkyNTQ3MWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDrxCFaFU8W2G9n+iqmHWQnCGKZM
Xps2XJqq8kJB3uuoAYrh1+lxd/gh9E8PBa6630vUN3tuDlptz5dxGjQLYitPgnCl
6WubnXYru7ToOUYJp9cXu0o+9br/BndfZCrOtYIVBCGUwBm0ASuyTcKILfTvzhel
97venZDOdyZLEjNNvsuUypWk/GpM0jbSlEAG2uLarRaTj6ws0KYJBN9qq0Y8y6Ie
9yJOjw8J8tLfKpMZR1ojEDL7sj4jshiy38qxSv2fSB6vFI0WhtPovrtLsDW6Ae1g
4fWk/yXEHmM5ybsPKyuY8kBfcBvmOdLdng00/JZgARuTmiqCI/HZRph6UwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFD9ArpnWUIA0q61pSNA9WmCSVHHdMB8GA1UdIwQY
MBaAFI17JCzHQGI1OCMkBYyR2vxjmQAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMt
NGMyMjAzNWI5MmYwLzEvUDBDdW1kWlFnRFNycldsSTBEMWFZSkpVY2QwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xNzRiNDktNTBjYi00NzhmLThhNWMtNGMyMjAzNWI5MmYw
LzEvalhza0xNZEFZalU0SXlRRmpKSGFfR09aQUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBrjANBgkqhkiG
9w0BAQsFAAOCAQEAkD71zDkewmuxUZqzIQOMToESGO58SIc7TQ8WRDhRRJcsGTxY
56mKRbTpX1bi2pVO7Uq1O8tlKI8jRgi8ZxTDFhAsQ3HA4VCi/LQOlppnOA6Ux1C8
pytOkCKHnooKS3ea9sjW15/eQGCm2lB84R2zTLDCUCo4wxhWJx6KPtttDdV7vES7
keqjX1F78OOnTDS4kkGYYx3hzS2n/hPkJKDJtIJzF7DYUB34rG1ZfHW8Eat+ErUO
H6U0no+L4EXczViTDP6FXxYD2RRBGS5pr6O+v4ihhtB8jNlZBDEb6Hm5ed9V1agm
7NEZeJq0OUyT/NE8hbwIjmBfS/22mXfhB/bTdQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:41 2025 by rpki-client