This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/DzilDttcXqE3Xvb3haJFRQwF9zk.asa File: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (raw, json) Hash identifier: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks= Subject key identifier: 0F:38:A5:0E:DB:5C:5E:A1:37:5E:F6:F7:85:A2:45:45:0C:05:F7:39 Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a Certificate serial: 019B0252A6893C220DA2F733743038370A2A Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/DzilDttcXqE3Xvb3haJFRQwF9zk.asa Signing time: Tue 09 Dec 2025 08:55:29 +0000 ASPA not before: Tue 09 Dec 2025 08:55:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 198249 Providers: AS: 6939 AS: 13030 AS: 34549 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:52:a6:89:3c:22:0d:a2:f7:33:74:30:38:37:0a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a Validity Not Before: Dec 9 08:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f38a50edb5c5ea1375ef6f785a245450c05f739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:03:f9:3e:29:87:f0:ab:8c:13:33:b6:6d: 96:92:86:eb:83:c6:e6:95:ac:88:b9:ec:ad:10:9e: 59:e3:5e:c4:a5:d9:d5:32:15:fc:7b:1d:6e:ca:9e: 40:a8:7d:82:68:eb:4a:d5:26:06:84:cd:62:52:72: e5:eb:50:68:61:f7:77:f2:a1:3e:e6:0d:1f:34:7c: 65:36:48:d5:49:4f:b4:b9:a1:1f:82:4e:89:e6:40: 88:a6:2f:0d:a8:54:eb:d5:36:f0:c0:1c:88:4e:83: 9e:12:8d:8a:90:3f:3f:61:43:72:28:95:4d:36:f7: c1:39:16:45:5e:b7:f1:72:05:d4:7b:fc:97:1f:ea: 51:8b:bd:e3:8c:fe:a7:db:87:9e:a1:76:5e:a2:d3: 8b:2d:15:b8:d8:be:9e:dd:f6:80:09:03:ca:0d:f9: 78:8a:f5:8e:05:f9:cf:34:7d:83:ea:d6:77:60:77: 69:0c:4d:94:cc:59:63:7e:92:15:b4:74:9e:d5:8a: 99:e5:f9:90:51:fe:5e:d5:57:bd:70:0c:64:cc:fa: d9:f3:d3:95:d4:93:02:fb:ff:cf:a3:50:23:89:c0: 3a:ef:b6:60:d3:5d:de:77:39:88:10:44:5f:28:20: 71:37:e5:d8:44:01:69:73:25:9e:d4:56:78:11:0e: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:A5:0E:DB:5C:5E:A1:37:5E:F6:F7:85:A2:45:45:0C:05:F7:39 X509v3 Authority Key Identifier: keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/DzilDttcXqE3Xvb3haJFRQwF9zk.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198249 Signature Algorithm: sha256WithRSAEncryption 7c:98:92:ba:0e:c7:57:2c:9e:2e:93:cc:0d:92:d6:c3:c6:49: e9:03:ad:d9:0a:0e:82:4a:bd:08:b4:76:be:64:3b:45:c4:42: 94:66:e2:7f:32:f3:3a:ff:d3:53:e4:ef:bd:8c:17:8d:e2:d3: a4:0b:5f:c1:0b:e9:f5:8c:9b:b0:a2:59:ea:f6:23:c3:27:5c: 0a:65:97:08:ec:fd:ae:4b:6a:e4:bf:fb:76:c1:e8:1d:35:1c: e8:c0:41:c3:93:10:e8:55:80:45:86:60:43:99:47:26:a2:e8: 48:a2:ef:db:01:3e:cd:d6:0e:0b:58:f9:b2:c8:9c:e1:2e:f4: 38:f2:d5:1d:bd:26:f1:af:18:a3:3c:21:3b:cd:fd:80:cc:17: c6:d9:c9:e0:ae:b5:90:b8:11:2c:d8:38:2e:da:6d:d5:8a:9b: 1b:d7:90:81:cd:16:68:fa:34:55:34:ff:00:da:85:60:1d:64: c2:b2:45:7c:07:c6:19:35:2f:1c:c5:01:be:56:ea:0c:7e:c7: e0:5d:d8:bd:e0:58:25:8a:64:6d:6a:dd:82:27:37:43:93:04: cd:77:a2:4b:46:d8:98:c7:24:a9:51:e4:58:df:91:23:fc:91: a3:26:83:2d:76:6e:3b:e6:b9:55:78:70:33:c3:9d:28:bf:f4: 61:3a:7d:aa -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsCUqaJPCINovczdDA4NwoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh ODhmN2EwHhcNMjUxMjA5MDg1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjM4YTUwZWRiNWM1ZWExMzc1ZWY2Zjc4NWEyNDU0NTBjMDVmNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweoD+T4ph/CrjBMztm2Wkobrg8bm layIueytEJ5Z417EpdnVMhX8ex1uyp5AqH2CaOtK1SYGhM1iUnLl61BoYfd38qE+ 5g0fNHxlNkjVSU+0uaEfgk6J5kCIpi8NqFTr1TbwwByIToOeEo2KkD8/YUNyKJVN NvfBORZFXrfxcgXUe/yXH+pRi73jjP6n24eeoXZeotOLLRW42L6e3faACQPKDfl4 ivWOBfnPNH2D6tZ3YHdpDE2UzFljfpIVtHSe1YqZ5fmQUf5e1Ve9cAxkzPrZ89OV 1JMC+//Po1AjicA677Zg013edzmIEERfKCBxN+XYRAFpcyWe1FZ4EQ458wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFA84pQ7bXF6hN17294WiRUUMBfc5MB8GA1UdIwQY MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt ZjZiNmMwNDkxNmExLzEvRHppbER0dGNYcUUzWHZiM2hhSkZSUXdGOXprLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGaTANBgkqhkiG 9w0BAQsFAAOCAQEAfJiSug7HVyyeLpPMDZLWw8ZJ6QOt2QoOgkq9CLR2vmQ7RcRC lGbifzLzOv/TU+TvvYwXjeLTpAtfwQvp9YybsKJZ6vYjwydcCmWXCOz9rktq5L/7 dsHoHTUc6MBBw5MQ6FWARYZgQ5lHJqLoSKLv2wE+zdYOC1j5ssic4S70OPLVHb0m 8a8YozwhO839gMwXxtnJ4K61kLgRLNg4Ltpt1YqbG9eQgc0WaPo0VTT/ANqFYB1k wrJFfAfGGTUvHMUBvlbqDH7H4F3YveBYJYpkbWrdgic3Q5MEzXeiS0bYmMckqVHk WN+RI/yRoyaDLXZuO+a5VXhwM8OdKL/0YTp9qg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:35 2025 by rpki-client