This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa File: pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa (raw, json) Hash identifier: sxkJU3Q3LaQ8TF/6A6BbBQGeo7WMZ4PLTizqyUpaQgI= Subject key identifier: A5:D0:44:20:EB:48:5A:B2:74:4D:29:37:D8:99:A1:FD:0A:49:90:AF Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Certificate serial: 019AFA50C9CFA0D22DBA4D020F382DBFDEB7 Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa Signing time: Sun 07 Dec 2025 19:36:29 +0000 ASPA not before: Sun 07 Dec 2025 19:36:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 8873 Providers: AS: 8674 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:50:c9:cf:a0:d2:2d:ba:4d:02:0f:38:2d:bf:de:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Validity Not Before: Dec 7 19:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a5d04420eb485ab2744d2937d899a1fd0a4990af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:38:78:e8:6c:be:5f:52:df:de:25:cf:6e:9f: cc:98:3f:8a:14:47:02:07:fb:f7:f2:9a:b1:99:f2: a6:5a:3a:b7:dc:0c:2b:b7:2e:9f:9e:98:77:7f:9c: 5d:7e:10:7b:a2:f4:f1:f4:94:2a:38:e4:e2:38:2d: 7f:3e:8d:94:33:9c:67:cd:69:23:6e:a9:04:58:69: 56:7c:5d:f5:08:76:56:f0:a2:cf:f9:66:aa:02:59: a8:c2:e3:f9:d3:28:50:28:3d:61:6a:78:a0:13:b4: c2:fe:65:13:70:eb:e9:c1:e1:27:fa:55:fd:ca:5b: b0:a8:cf:da:78:d5:07:5f:57:2e:c3:46:b5:5c:b1: f1:58:e8:49:18:38:78:e3:10:d1:08:f6:3c:1d:2a: cc:bb:f6:98:c6:5e:db:a9:5e:a2:bc:fe:db:2d:37: 2f:00:fe:53:ba:f1:ee:a8:cc:e4:2f:96:3a:2d:79: 90:be:5e:22:54:91:c2:99:d2:89:da:f2:f9:aa:84: e2:66:4f:ed:ae:45:bc:21:b7:14:83:d3:ef:1c:63: 2e:05:8e:47:d0:17:a0:6c:c3:92:87:a7:b6:ef:ac: d8:0a:a0:e9:93:82:cb:e3:f4:30:60:54:90:87:89: dd:ef:d3:91:ce:22:0a:b4:b7:24:9b:f2:ba:41:3e: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:44:20:EB:48:5A:B2:74:4D:29:37:D8:99:A1:FD:0A:49:90:AF X509v3 Authority Key Identifier: keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 8873 Signature Algorithm: sha256WithRSAEncryption b0:c6:db:1f:18:b9:ea:0f:7e:66:19:49:18:fc:77:64:c5:f0: 6c:8f:ec:0f:e0:33:0d:ee:1d:ad:56:fc:a7:e2:db:88:f0:21: 86:cc:88:06:7d:fe:d6:c6:84:d1:cf:f0:3c:cb:17:f0:29:60: 01:62:a2:1b:71:fe:e5:c1:79:6d:58:28:6c:10:88:39:a5:58: dd:ca:33:2d:ad:5a:d6:0b:c7:fb:8e:84:d7:f9:8e:88:9a:32: a5:d4:9b:80:54:55:d8:41:39:73:c9:85:d8:9a:43:43:11:71: 6b:84:68:85:48:c8:17:9f:fa:48:51:d2:a6:25:55:19:e0:f7: b3:80:1e:f7:cc:ea:0c:ad:62:08:24:4c:aa:d4:55:2b:ad:bf: 50:c0:81:b5:48:8e:3c:f5:bc:aa:ec:77:de:a9:57:5b:37:0a: 2d:bc:89:79:c7:90:13:13:04:61:05:5d:f5:0b:06:71:2d:0e: 06:e3:b9:df:a7:bd:7a:ac:7c:e2:f5:4e:94:24:eb:91:19:63: c6:bf:66:1f:a8:b2:c6:26:a2:0a:4c:93:1a:e1:aa:72:10:8f: 0a:42:32:05:1f:0e:fd:40:5c:06:0a:25:0d:ba:a3:91:0a:9e: 8d:66:d8:d8:e0:62:be:f2:61:03:54:63:4e:b4:42:66:50:c1: 47:6b:78:f6 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZr6UMnPoNItuk0CDzgtv963MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmI2NmZiZGVhYWZmZjQzYjk2NTBiMWY2Y2JlNGYyOWVk YWY1OGMwHhcNMjUxMjA3MTkzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQwNDQyMGViNDg1YWIyNzQ0ZDI5MzdkODk5YTFmZDBhNDk5MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjh46Gy+X1Lf3iXPbp/MmD+KFEcC B/v38pqxmfKmWjq33Awrty6fnph3f5xdfhB7ovTx9JQqOOTiOC1/Po2UM5xnzWkj bqkEWGlWfF31CHZW8KLP+WaqAlmowuP50yhQKD1hanigE7TC/mUTcOvpweEn+lX9 yluwqM/aeNUHX1cuw0a1XLHxWOhJGDh44xDRCPY8HSrMu/aYxl7bqV6ivP7bLTcv AP5TuvHuqMzkL5Y6LXmQvl4iVJHCmdKJ2vL5qoTiZk/trkW8IbcUg9PvHGMuBY5H 0BegbMOSh6e276zYCqDpk4LL4/QwYFSQh4nd79ORziIKtLckm/K6QT5nmQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFKXQRCDrSFqydE0pN9iZof0KSZCvMB8GA1UdIwQY MBaAFNK7Zvveqv/0O5ZQsfbL5PKe2vWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMt Y2IwZjI0NTVjYmQ2LzEvcGRCRUlPdElXckowVFNrMzJKbWhfUXBKa0s4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMtY2IwZjI0NTVjYmQ2 LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiKpMA0GCSqGSIb3 DQEBCwUAA4IBAQCwxtsfGLnqD35mGUkY/HdkxfBsj+wP4DMN7h2tVvyn4tuI8CGG zIgGff7WxoTRz/A8yxfwKWABYqIbcf7lwXltWChsEIg5pVjdyjMtrVrWC8f7joTX +Y6ImjKl1JuAVFXYQTlzyYXYmkNDEXFrhGiFSMgXn/pIUdKmJVUZ4PezgB73zOoM rWIIJEyq1FUrrb9QwIG1SI489byq7HfeqVdbNwotvIl5x5ATEwRhBV31CwZxLQ4G 47nfp716rHzi9U6UJOuRGWPGv2YfqLLGJqIKTJMa4apyEI8KQjIFHw79QFwGCiUN uqORCp6NZtjY4GK+8mEDVGNOtEJmUMFHa3j2 -----END CERTIFICATE-----Generated at Wed Dec 10 17:15:18 2025 by rpki-client