This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/_MJrKzAh7G2UHZAchpBgp1L7QDI.asa File: _MJrKzAh7G2UHZAchpBgp1L7QDI.asa (raw, json) Hash identifier: NxUcjZE3fyS6HKeTtb+sgrnCFDPsmJ+Qnbm9it3kRzo= Subject key identifier: FC:C2:6B:2B:30:21:EC:6D:94:1D:90:1C:86:90:60:A7:52:FB:40:32 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B4548115435FB855063269A04F4994BFA Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/_MJrKzAh7G2UHZAchpBgp1L7QDI.asa Signing time: Mon 22 Dec 2025 08:58:29 +0000 ASPA not before: Mon 22 Dec 2025 08:58:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 5408 Providers: AS: 3491 AS: 20965 AS: 21320 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:48:11:54:35:fb:85:50:63:26:9a:04:f4:99:4b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Dec 22 08:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcc26b2b3021ec6d941d901c869060a752fb4032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:cc:6e:5f:e1:1f:23:6d:1c:b8:1f:ee:08: 80:80:5e:b0:27:ed:22:21:e3:2d:68:d7:70:03:46: fd:d0:c6:0c:06:cc:6d:0f:bc:ff:1c:2c:14:b7:0c: 47:54:66:bf:72:57:a7:3c:f4:cf:58:53:d2:d3:5f: 1e:78:93:90:1c:d9:c5:5f:15:80:ed:33:78:eb:5a: 33:c0:c6:35:bc:28:55:62:a2:45:d8:e7:77:af:e6: 6a:d3:85:35:88:97:4b:5e:ba:2e:a4:dd:f0:6b:d5: 2e:3c:3f:17:47:53:12:b8:37:14:09:aa:6b:30:39: 66:3a:77:74:73:8d:00:6c:c4:f7:53:41:8e:57:cd: 0f:40:80:0f:f5:a3:53:90:c1:42:9c:9c:d3:54:ef: bb:85:93:c3:47:dc:6f:9b:f5:e0:c8:37:81:3a:35: d1:93:8e:a1:ad:83:6a:fa:c5:6c:27:00:66:97:b1: eb:db:3c:53:99:4e:12:d2:27:6e:e2:58:52:41:db: a0:ee:e1:fc:81:91:b9:69:12:7c:8c:34:5b:6b:2f: 09:f4:d1:0c:ef:3a:18:c4:43:99:0c:17:ea:4d:73: ab:27:c2:d1:b7:d0:23:9a:6f:9f:89:ee:34:42:93: 58:68:79:ff:4b:64:8c:6e:c7:95:25:87:b4:8b:e9: fe:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:6B:2B:30:21:EC:6D:94:1D:90:1C:86:90:60:A7:52:FB:40:32 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/_MJrKzAh7G2UHZAchpBgp1L7QDI.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 5408 Signature Algorithm: sha256WithRSAEncryption 9a:6d:b9:05:47:a2:7c:70:50:66:09:ec:c2:8b:8a:ab:84:02: 32:99:99:58:4d:bb:64:fb:2b:93:2d:f6:f8:b4:7a:95:21:ac: e6:16:3f:c7:f5:d9:32:b8:ba:0b:8f:4d:69:6c:d0:93:d2:c7: d3:8f:02:1f:b5:d0:73:82:17:06:40:49:e9:c9:ac:b4:88:91: dd:0a:36:93:a5:97:10:13:67:23:a2:cd:53:ac:3a:0c:21:aa: 9c:c8:52:0f:30:78:c5:21:37:b8:12:ba:97:17:4b:75:71:31: 21:69:6d:dc:9f:b0:44:e6:37:76:e9:52:4d:50:b7:38:b2:d9: 33:8b:a1:fe:4d:ae:5f:69:c9:d2:2c:ac:f0:23:59:8e:b1:41: a7:28:7c:46:a7:93:20:a3:71:3c:f3:a6:36:20:32:9f:ac:ef: 75:ae:64:d2:81:45:13:45:22:a2:1c:9d:7f:05:a8:55:5d:49: f1:2e:18:e5:90:cd:4d:f1:cb:5c:76:b6:71:58:ec:55:55:30: 56:26:c4:68:9d:e2:5a:3f:4a:09:01:ef:14:82:35:12:13:01: 1d:ea:07:9d:3c:9e:c5:62:d5:b7:60:2b:2c:38:32:0d:34:6f: d8:9f:9a:43:d9:92:a9:7b:2d:1e:26:e0:ed:0e:da:58:13:90: ca:c2:a4:e9 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZtFSBFUNfuFUGMmmgT0mUv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjUxMjIyMDg1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2MyNmIyYjMwMjFlYzZkOTQxZDkwMWM4NjkwNjBhNzUyZmI0MDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkDMbl/hHyNtHLgf7giAgF6wJ+0i IeMtaNdwA0b90MYMBsxtD7z/HCwUtwxHVGa/clenPPTPWFPS018eeJOQHNnFXxWA 7TN461ozwMY1vChVYqJF2Od3r+Zq04U1iJdLXroupN3wa9UuPD8XR1MSuDcUCapr MDlmOnd0c40AbMT3U0GOV80PQIAP9aNTkMFCnJzTVO+7hZPDR9xvm/XgyDeBOjXR k46hrYNq+sVsJwBml7Hr2zxTmU4S0idu4lhSQdug7uH8gZG5aRJ8jDRbay8J9NEM 7zoYxEOZDBfqTXOrJ8LRt9Ajmm+fie40QpNYaHn/S2SMbseVJYe0i+n+jQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFPzCayswIextlB2QHIaQYKdS+0AyMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvX01Kckt6QWg3RzJVSFpBY2hwQmdwMUw3UURJLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhUgMA0GCSqGSIb3 DQEBCwUAA4IBAQCabbkFR6J8cFBmCezCi4qrhAIymZlYTbtk+yuTLfb4tHqVIazm Fj/H9dkyuLoLj01pbNCT0sfTjwIftdBzghcGQEnpyay0iJHdCjaTpZcQE2cjos1T rDoMIaqcyFIPMHjFITe4ErqXF0t1cTEhaW3cn7BE5jd26VJNULc4stkzi6H+Ta5f acnSLKzwI1mOsUGnKHxGp5Mgo3E886Y2IDKfrO91rmTSgUUTRSKiHJ1/BahVXUnx LhjlkM1N8ctcdrZxWOxVVTBWJsRoneJaP0oJAe8UgjUSEwEd6gedPJ7FYtW3YCss ODINNG/Yn5pD2ZKpey0eJuDtDtpYE5DKwqTp -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:24 2026 by rpki-client