This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa File: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (raw, json) Hash identifier: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI= Subject key identifier: B0:CD:ED:9E:C8:99:42:7D:81:F5:86:39:99:C6:D9:F1:03:0A:85:AB Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152 Certificate serial: 019ADF8B9D1D66168B5C4687D93D4E916A0D Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa Signing time: Tue 02 Dec 2025 14:51:00 +0000 ASPA not before: Tue 02 Dec 2025 14:51:00 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 201281 Providers: AS: 34019 AS: 204092 AS: 208627 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:8b:9d:1d:66:16:8b:5c:46:87:d9:3d:4e:91:6a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152 Validity Not Before: Dec 2 14:51:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b0cded9ec899427d81f5863999c6d9f1030a85ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:97:9a:f7:cf:98:b9:9b:7a:e0:b8:2e:3e: b4:9e:7a:38:0b:ea:2d:ef:45:7a:97:03:26:4e:cb: 89:54:a7:62:93:f5:0b:7b:41:e3:d4:88:9c:9f:54: 92:d4:ba:61:0e:11:16:83:79:9d:5f:6e:a3:33:d8: a0:0a:52:5e:1c:a6:7a:bf:d6:7c:07:0f:83:32:20: 19:5d:f5:fb:ba:87:e2:7c:02:ff:30:d6:15:89:8e: 89:dd:87:ae:11:60:55:61:59:c5:89:e3:ca:5a:11: e6:ca:e8:f6:99:de:12:ce:e1:8a:0c:cc:c4:86:46: 2f:c9:9e:28:dd:11:d6:87:a7:b4:c0:4f:4e:1e:7a: 74:6b:d7:6e:a8:30:85:da:cb:8f:42:8b:f5:99:82: 7a:f7:db:c8:cf:be:ce:c8:83:cb:4d:b3:bc:33:9a: cc:19:a5:0d:f8:84:4c:29:a3:56:8f:0c:17:bd:6c: 1e:2b:92:e0:c9:67:1e:a2:30:80:2e:fc:e2:78:d4: 76:16:62:e6:2d:a0:60:fd:f4:6e:4f:86:a5:27:41: c1:8a:b4:2f:e9:43:40:38:c4:f4:19:f4:da:5a:30: c3:81:34:f8:29:a6:1e:e7:26:99:f1:c1:29:56:ed: 65:8e:0c:6d:74:10:f0:c1:73:3c:88:a9:45:6a:f8: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CD:ED:9E:C8:99:42:7D:81:F5:86:39:99:C6:D9:F1:03:0A:85:AB X509v3 Authority Key Identifier: keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201281 Signature Algorithm: sha256WithRSAEncryption 2f:9c:2c:54:52:0e:9d:04:69:35:0e:24:87:62:e4:67:38:81: 04:8d:21:2c:c1:8f:bb:ef:7c:b4:39:9e:2b:ad:97:23:8b:9b: a6:79:b9:19:ff:19:e5:61:00:1a:40:2b:3b:a0:99:a5:d9:d7: d3:c8:21:00:1a:91:fa:ef:84:47:c2:09:ef:1f:c7:bb:26:8e: 21:6b:5b:65:38:a6:8f:31:d1:bc:31:83:a6:6a:6f:f2:5d:21: 37:93:44:7c:b1:09:04:72:30:af:db:f2:40:d4:94:b1:c2:c1: 85:13:3d:7c:39:26:4c:32:29:ad:be:84:41:5b:76:1c:b4:ac: a8:8c:8c:4b:5a:bc:9a:6f:7e:e6:f8:6a:ee:8e:c9:21:7d:f0: 7d:de:3d:2b:b6:e9:e8:97:7a:cc:42:e4:84:79:0c:c7:f9:d0: 20:b8:58:32:c7:ba:de:52:65:83:50:2a:a1:1a:e7:59:a3:49: d2:dd:50:78:02:88:15:32:6f:cb:ad:dc:9b:87:27:c4:87:df: 5c:c6:8d:44:49:16:99:d1:cc:0f:8c:9e:cf:86:a6:1e:3f:7c: 6d:e4:aa:ba:d8:cf:90:1e:20:a1:6f:ed:3b:f1:8b:8e:90:a2: 36:24:e9:58:e5:cb:e1:34:77:b3:2e:7d:d5:84:35:c6:05:31: 34:b4:8f:0d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrfi50dZhaLXEaH2T1OkWoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzM1ZDRmMmYyZDI0N2VhMDhjNGEwMTE3ZDMyOGU0ZThl ZGYxNTIwHhcNMjUxMjAyMTQ1MTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGNkZWQ5ZWM4OTk0MjdkODFmNTg2Mzk5OWM2ZDlmMTAzMGE4NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08SXmvfPmLmbeuC4Lj60nno4C+ot 70V6lwMmTsuJVKdik/ULe0Hj1Iicn1SS1LphDhEWg3mdX26jM9igClJeHKZ6v9Z8 Bw+DMiAZXfX7uofifAL/MNYViY6J3YeuEWBVYVnFiePKWhHmyuj2md4SzuGKDMzE hkYvyZ4o3RHWh6e0wE9OHnp0a9duqDCF2suPQov1mYJ699vIz77OyIPLTbO8M5rM GaUN+IRMKaNWjwwXvWweK5LgyWceojCALvzieNR2FmLmLaBg/fRuT4alJ0HBirQv 6UNAOMT0GfTaWjDDgTT4KaYe5yaZ8cEpVu1ljgxtdBDwwXM8iKlFavhM3wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFLDN7Z7ImUJ9gfWGOZnG2fEDCoWrMB8GA1UdIwQY MBaAFP7DXU8vLSR+oIxKARfTKOTo7fFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgt ZjhiMTJmOTgyZmUyLzEvc00zdG5zaVpRbjJCOVlZNW1jYlo4UU1LaGFzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgtZjhiMTJmOTgyZmUy LzEvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMSQTANBgkqhkiG 9w0BAQsFAAOCAQEAL5wsVFIOnQRpNQ4kh2LkZziBBI0hLMGPu+98tDmeK62XI4ub pnm5Gf8Z5WEAGkArO6CZpdnX08ghABqR+u+ER8IJ7x/HuyaOIWtbZTimjzHRvDGD pmpv8l0hN5NEfLEJBHIwr9vyQNSUscLBhRM9fDkmTDIprb6EQVt2HLSsqIyMS1q8 mm9+5vhq7o7JIX3wfd49K7bp6Jd6zELkhHkMx/nQILhYMse63lJlg1AqoRrnWaNJ 0t1QeAKIFTJvy63cm4cnxIffXMaNREkWmdHMD4yez4amHj98beSqutjPkB4goW/t O/GLjpCiNiTpWOXL4TR3sy591YQ1xgUxNLSPDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:24 2025 by rpki-client