This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa File: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (raw, json) Hash identifier: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw= Subject key identifier: 2E:98:91:CD:42:09:51:30:EA:7B:88:12:8F:C6:41:2F:5A:63:23:99 Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950 Certificate serial: 019BEFA5F84FA81FA10D81EF0B273F9B6557 Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa Signing time: Sat 24 Jan 2026 10:56:30 +0000 ASPA not before: Sat 24 Jan 2026 10:56:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 211868 Providers: AS: 34019 AS: 44097 AS: 44103 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:a5:f8:4f:a8:1f:a1:0d:81:ef:0b:27:3f:9b:65:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950 Validity Not Before: Jan 24 10:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e9891cd42095130ea7b88128fc6412f5a632399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:3b:2b:ae:f5:e3:34:5a:0e:a6:d7:7e:68: cb:e2:0a:3f:55:ac:81:06:08:53:45:ad:08:b0:4d: d4:42:41:05:3c:1f:c5:ae:90:a7:05:db:d1:b7:6e: 9a:db:c0:78:3c:9a:65:ea:54:22:1b:4e:58:68:f1: aa:d0:f3:80:7f:39:62:78:2e:d3:ec:3d:61:6a:47: 10:e0:dc:76:07:49:59:8f:87:47:5b:89:51:d5:50: e0:5e:5c:14:df:58:3c:ee:ae:d6:84:eb:d2:ef:22: 25:f8:7d:a9:ad:67:ff:23:e6:12:b7:4e:7f:71:a0: 8f:9f:08:dd:88:16:a9:b9:87:36:b5:00:c8:55:6b: dd:9f:89:53:74:aa:11:ff:97:6f:3b:2e:e5:40:49: e5:a3:6a:9f:ea:40:53:04:57:b5:20:c0:32:40:0e: 86:78:6f:3b:3b:a9:e8:8e:d2:9a:a6:e4:38:ca:9a: d3:78:76:08:24:e4:40:84:72:6f:69:42:8b:b8:46: 71:39:31:34:7f:44:c2:14:f3:58:df:d1:25:8f:28: a7:c0:89:70:8c:af:8c:47:38:9e:c8:6e:dc:e3:2d: 15:9e:e7:dd:83:4e:69:b8:41:16:e3:0e:8f:3a:75: 89:1f:1e:07:f7:9d:ba:00:ce:f9:ff:11:99:0e:fb: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:91:CD:42:09:51:30:EA:7B:88:12:8F:C6:41:2F:5A:63:23:99 X509v3 Authority Key Identifier: keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211868 Signature Algorithm: sha256WithRSAEncryption 1d:12:da:61:9a:51:85:28:67:84:1b:f0:68:dc:00:46:da:a3: 36:3f:fb:e4:14:c1:c1:ad:93:38:cd:f6:aa:e7:e7:79:d7:45: 9e:b4:67:2b:34:4a:eb:b4:93:63:e4:81:98:63:b3:97:5b:b0: c1:97:15:f3:a3:b0:ab:0c:2b:08:6e:52:b4:66:74:d6:98:89: 9d:f8:6f:0d:f5:bc:4c:4d:f8:c8:ff:e8:89:37:bb:10:06:0b: ef:05:87:da:21:eb:4f:ab:d7:59:4c:03:3a:13:5c:4f:c2:aa: 5c:1d:15:51:0b:83:1d:86:54:8c:4c:d2:dd:5c:ad:52:17:32: 37:04:9a:cb:f1:71:88:ef:67:17:d9:58:4a:62:29:3f:1c:9c: 1c:78:f8:dd:b3:06:27:27:ca:3c:0c:4c:7a:4d:9b:3f:9e:d7: 22:5e:28:71:49:a5:e3:9c:7c:8a:c9:25:10:97:4d:93:bf:64: d1:70:c5:81:7d:f9:6a:c5:9f:6a:96:43:c0:0f:9a:02:a7:e4: a6:8c:41:17:5e:3a:3f:5f:23:e9:98:b1:f3:0e:48:f8:d8:81: f7:15:e0:76:53:21:c4:0a:1b:14:05:e1:8c:f6:fd:87:77:da: ec:4d:56:b1:41:03:81:12:37:c4:37:b5:83:64:a0:52:ef:de: 37:4f:1a:f2 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvvpfhPqB+hDYHvCyc/m2VXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDgyNWVjN2JkMzNhMDIyMDRjZDFiYzE1MzVmYzFjYTIx NTA5NTAwHhcNMjYwMTI0MTA1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTk4OTFjZDQyMDk1MTMwZWE3Yjg4MTI4ZmM2NDEyZjVhNjMyMzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38Q7K6714zRaDqbXfmjL4go/VayB BghTRa0IsE3UQkEFPB/FrpCnBdvRt26a28B4PJpl6lQiG05YaPGq0POAfzlieC7T 7D1hakcQ4Nx2B0lZj4dHW4lR1VDgXlwU31g87q7WhOvS7yIl+H2prWf/I+YSt05/ caCPnwjdiBapuYc2tQDIVWvdn4lTdKoR/5dvOy7lQEnlo2qf6kBTBFe1IMAyQA6G eG87O6nojtKapuQ4yprTeHYIJORAhHJvaUKLuEZxOTE0f0TCFPNY39EljyinwIlw jK+MRzieyG7c4y0Vnufdg05puEEW4w6POnWJHx4H9526AM75/xGZDvuvrQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFC6Ykc1CCVEw6nuIEo/GQS9aYyOZMB8GA1UdIwQY MBaAFFQIJex70zoCIEzRvBU1/ByiFQlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYt NWYyZjE1YmUyN2M0LzEvTHBpUnpVSUpVVERxZTRnU2o4WkJMMXBqSTVrLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYtNWYyZjE1YmUyN2M0 LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM7nDANBgkqhkiG 9w0BAQsFAAOCAQEAHRLaYZpRhShnhBvwaNwARtqjNj/75BTBwa2TOM32qufneddF nrRnKzRK67STY+SBmGOzl1uwwZcV86OwqwwrCG5StGZ01piJnfhvDfW8TE34yP/o iTe7EAYL7wWH2iHrT6vXWUwDOhNcT8KqXB0VUQuDHYZUjEzS3VytUhcyNwSay/Fx iO9nF9lYSmIpPxycHHj43bMGJyfKPAxMek2bP57XIl4ocUml45x8isklEJdNk79k 0XDFgX35asWfapZDwA+aAqfkpoxBF146P18j6Zix8w5I+NiB9xXgdlMhxAobFAXh jPb9h3fa7E1WsUEDgRI3xDe1g2SgUu/eN08a8g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client