This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/6RGkspdxkAWpYvFpm-8ta5s8IEs.asa File: 6RGkspdxkAWpYvFpm-8ta5s8IEs.asa (raw, json) Hash identifier: SMkfixcVMM4K7Z6BHPlzlnNfBWBe+ZvLZ06HB1RuIn0= Subject key identifier: E9:11:A4:B2:97:71:90:05:A9:62:F1:69:9B:EF:2D:6B:9B:3C:20:4B Certificate issuer: /CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4 Certificate serial: 019BDB96F39FE969EFF1477B041D0170D96D Authority key identifier: DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/6RGkspdxkAWpYvFpm-8ta5s8IEs.asa Signing time: Tue 20 Jan 2026 13:27:41 +0000 ASPA not before: Tue 20 Jan 2026 13:27:41 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 203196 Providers: AS: 3320 AS: 9145 AS: 13335 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:96:f3:9f:e9:69:ef:f1:47:7b:04:1d:01:70:d9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db2ec22a66b5b24986395feed7fb5b90e28c9be4 Validity Not Before: Jan 20 13:27:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e911a4b297719005a962f1699bef2d6b9b3c204b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:ca:fd:c3:6b:b4:ee:71:9b:c6:63:da:80: a6:fa:67:f1:c3:74:79:1d:84:3e:52:a5:b2:79:ac: 97:d2:91:d1:24:47:64:d9:2e:47:f9:32:e9:2f:a9: b8:5f:cb:fb:c1:04:65:97:36:f2:75:cf:ec:af:59: 1e:21:35:43:af:c6:de:f0:33:f6:23:17:a7:7b:e2: 29:a4:03:2a:41:99:c8:82:11:81:da:7e:ab:3d:85: a5:78:16:c2:47:4a:29:75:59:2e:65:bb:66:c5:ab: 2b:e7:c7:a1:42:9b:48:31:85:17:84:d9:19:fc:6d: 77:6e:08:a0:3c:bd:f9:cb:d1:b1:1e:8b:e7:30:fb: fe:09:a5:8f:a3:04:3c:27:ef:92:46:e2:67:bb:d5: bc:1e:57:1d:ce:c1:36:12:77:fd:e5:63:48:8a:60: 26:27:7a:90:d9:21:6c:08:fd:5b:52:56:2d:cd:9a: 66:37:f2:30:87:be:03:0f:7b:e7:8a:7e:f9:71:89: c1:29:e7:8e:38:eb:64:95:1e:b5:03:85:cf:cf:ad: 50:85:7b:b5:5b:3c:57:a7:d2:03:ce:73:cc:47:01: 24:6a:ab:bc:09:92:54:e3:10:df:1a:ce:b8:2a:a8: 0d:b5:c7:1e:90:46:a9:0d:cc:9f:d7:b1:b3:d6:02: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:11:A4:B2:97:71:90:05:A9:62:F1:69:9B:EF:2D:6B:9B:3C:20:4B X509v3 Authority Key Identifier: keyid:DB:2E:C2:2A:66:B5:B2:49:86:39:5F:EE:D7:FB:5B:90:E2:8C:9B:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y7CKma1skmGOV_u1_tbkOKMm-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/6RGkspdxkAWpYvFpm-8ta5s8IEs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2fbcbf-358e-4928-9a84-ce78d4c0642f/1/2y7CKma1skmGOV_u1_tbkOKMm-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203196 Signature Algorithm: sha256WithRSAEncryption 41:31:0c:1f:5b:b8:56:ed:ed:f4:73:b0:c5:30:44:ac:2d:41: 7d:3b:40:dd:e0:a4:a1:f3:f0:f9:ab:90:3e:19:92:e3:1b:83: 3c:a3:6f:2b:63:cb:78:f4:07:ed:96:63:26:98:2a:43:68:d8: c9:3d:f8:ac:87:ee:f0:7a:fa:07:91:be:93:92:fb:22:ca:d9: 2f:89:d6:2a:69:ee:b3:f0:ae:42:e4:cd:71:74:53:8b:92:7c: 97:7c:b8:f8:a6:3a:21:10:d2:cd:c9:46:3d:99:2a:36:e7:2f: 8f:12:90:4b:b0:2b:cd:44:ab:23:97:c5:fa:84:f0:4c:74:8a: e7:7e:f0:8b:a8:db:13:39:c5:7b:fd:13:3a:92:de:2e:14:e7: 53:7d:f5:65:18:24:e2:e7:c4:07:9b:9b:77:f4:d1:bb:4a:06: 1d:ed:53:6a:23:df:50:40:d6:7b:21:0e:91:13:c4:e9:90:ee: 59:81:80:b2:71:84:b7:5b:a1:b1:b0:7c:91:8f:7a:af:fa:9e: 22:72:dc:22:75:6b:88:b3:22:07:a3:bd:c9:d8:5f:da:8c:cc: e6:4b:34:14:32:74:a5:11:6f:73:2b:0e:bb:b4:cb:f6:1f:af: 9f:04:5f:56:3a:17:4e:d8:58:04:d1:0d:3b:11:f6:f9:d3:a8: 42:a4:ad:70 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvblvOf6Wnv8Ud7BB0BcNltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMmVjMjJhNjZiNWIyNDk4NjM5NWZlZWQ3ZmI1YjkwZTI4 YzliZTQwHhcNMjYwMTIwMTMyNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTExYTRiMjk3NzE5MDA1YTk2MmYxNjk5YmVmMmQ2YjliM2MyMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyynK/cNrtO5xm8Zj2oCm+mfxw3R5 HYQ+UqWyeayX0pHRJEdk2S5H+TLpL6m4X8v7wQRllzbydc/sr1keITVDr8be8DP2 Ixene+IppAMqQZnIghGB2n6rPYWleBbCR0opdVkuZbtmxasr58ehQptIMYUXhNkZ /G13bgigPL35y9GxHovnMPv+CaWPowQ8J++SRuJnu9W8HlcdzsE2Enf95WNIimAm J3qQ2SFsCP1bUlYtzZpmN/Iwh74DD3vnin75cYnBKeeOOOtklR61A4XPz61QhXu1 WzxXp9IDznPMRwEkaqu8CZJU4xDfGs64KqgNtccekEapDcyf17Gz1gLAUwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFOkRpLKXcZAFqWLxaZvvLWubPCBLMB8GA1UdIwQY MBaAFNsuwipmtbJJhjlf7tf7W5DijJvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQt Y2U3OGQ0YzA2NDJmLzEvNlJHa3NwZHhrQVdwWXZGcG0tOHRhNXM4SUVzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZmJjYmYtMzU4ZS00OTI4LTlhODQtY2U3OGQ0YzA2NDJm LzEvMnk3Q0ttYTFza21HT1ZfdTFfdGJrT0tNbS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZvDANBgkqhkiG 9w0BAQsFAAOCAQEAQTEMH1u4Vu3t9HOwxTBErC1BfTtA3eCkofPw+auQPhmS4xuD PKNvK2PLePQH7ZZjJpgqQ2jYyT34rIfu8Hr6B5G+k5L7IsrZL4nWKmnus/CuQuTN cXRTi5J8l3y4+KY6IRDSzclGPZkqNucvjxKQS7ArzUSrI5fF+oTwTHSK537wi6jb EznFe/0TOpLeLhTnU331ZRgk4ufEB5ubd/TRu0oGHe1TaiPfUEDWeyEOkRPE6ZDu WYGAsnGEt1uhsbB8kY96r/qeInLcInVriLMiB6O9ydhf2ozM5ks0FDJ0pRFvcysO u7TL9h+vnwRfVjoXTthYBNENOxH2+dOoQqStcA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:10 2026 by rpki-client