This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cFDNySQq-BoAAus-f6QDofmomPs.asa File: cFDNySQq-BoAAus-f6QDofmomPs.asa (raw, json) Hash identifier: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo= Subject key identifier: 70:50:CD:C9:24:2A:F8:1A:00:02:EB:3E:7F:A4:03:A1:F9:A8:98:FB Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019AE0320F15B62C4753B279474E1F987E4D Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cFDNySQq-BoAAus-f6QDofmomPs.asa Signing time: Tue 02 Dec 2025 17:52:48 +0000 ASPA not before: Tue 02 Dec 2025 17:52:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 49623 Providers: AS: 60983 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:32:0f:15:b6:2c:47:53:b2:79:47:4e:1f:98:7e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Dec 2 17:52:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7050cdc9242af81a0002eb3e7fa403a1f9a898fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:b7:bd:0d:79:62:51:8d:ac:72:65:48:b9: 5c:80:c2:7f:66:3f:89:d9:2b:ed:5c:79:9b:33:33: 69:d7:7b:fd:bd:e8:00:98:2a:45:f1:e0:69:f9:a2: 1c:19:73:4e:70:a5:aa:12:1b:03:96:45:c7:cf:0d: c9:ce:4e:28:e6:81:e1:f0:90:9b:b9:18:70:e3:d3: 12:05:4a:59:76:b7:d7:5c:1a:49:33:aa:a2:b6:3d: b0:b9:03:20:b3:4e:f7:51:74:86:fa:5b:8b:fa:f6: b3:8f:42:75:02:3a:ac:9c:0e:2a:5e:0b:0d:9c:df: 42:25:f9:b3:31:7e:54:3f:d2:cd:ba:67:5d:b2:8e: 2f:70:a2:1d:04:00:2f:bb:40:ae:ee:5a:fa:12:ab: 7c:b4:5b:40:ee:eb:67:b5:16:56:1c:d8:b5:64:c0: 85:ee:48:6c:c8:84:5d:b6:de:5a:ea:13:56:27:6f: 24:09:19:b5:9b:42:0e:fa:34:a0:cf:31:09:2e:c9: 81:13:ac:f8:37:6b:7c:17:0b:06:bf:0b:05:76:cb: 48:e7:17:f1:c0:41:62:34:a3:b8:9b:d1:6c:0a:8f: e9:3b:10:1d:65:a1:da:83:bb:9b:d2:32:45:2c:fb: 7e:37:a0:27:72:5e:8f:fc:2a:3e:22:c5:8e:ff:9d: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:CD:C9:24:2A:F8:1A:00:02:EB:3E:7F:A4:03:A1:F9:A8:98:FB X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cFDNySQq-BoAAus-f6QDofmomPs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49623 Signature Algorithm: sha256WithRSAEncryption 32:32:82:1a:7e:15:09:5d:68:31:e9:28:af:72:0f:e6:f9:48: f1:08:30:ea:4a:32:ca:7d:00:bd:d3:8b:e0:a9:c8:6e:03:dd: 7d:e1:fc:2d:3d:ab:30:31:53:8f:89:85:db:f1:dc:20:fc:45: e8:a7:34:97:4b:73:25:b1:6e:a9:43:50:ce:cd:f3:f8:37:00: 2d:4b:5f:7f:d2:a2:9d:de:21:78:81:31:9d:5f:7c:b7:cd:1f: 00:70:0e:b6:6e:c6:99:54:30:b5:00:71:19:94:da:99:0d:99: 56:4b:6c:ce:21:5c:36:42:0d:50:1e:f1:65:e5:d3:30:dc:7e: 16:79:5a:f8:9a:0b:a2:ea:ae:fc:1a:2d:b0:9e:71:a0:dd:45: 54:5f:5b:8c:5b:0e:7c:12:97:b4:c9:b6:dd:86:89:98:d8:c6: aa:97:a4:cc:58:b1:6d:cc:33:b6:53:e0:00:9d:c8:ab:80:27: 34:2e:98:5c:c3:ea:6c:2d:32:d3:1f:cd:25:3e:0c:60:73:c9: ca:2e:95:56:2e:ae:12:a5:d8:67:1c:97:3a:24:32:f0:b2:ee: f5:22:6b:67:75:04:18:ec:29:4c:dc:45:9b:40:13:b9:a9:58: 12:24:36:58:46:d2:c4:c3:df:ef:a2:c4:7b:63:21:a0:64:7e: f4:8f:2d:a1 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrgMg8VtixHU7J5R04fmH5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjUxMjAyMTc1MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDUwY2RjOTI0MmFmODFhMDAwMmViM2U3ZmE0MDNhMWY5YTg5OGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQu3vQ15YlGNrHJlSLlcgMJ/Zj+J 2SvtXHmbMzNp13v9vegAmCpF8eBp+aIcGXNOcKWqEhsDlkXHzw3Jzk4o5oHh8JCb uRhw49MSBUpZdrfXXBpJM6qitj2wuQMgs073UXSG+luL+vazj0J1AjqsnA4qXgsN nN9CJfmzMX5UP9LNumddso4vcKIdBAAvu0Cu7lr6Eqt8tFtA7utntRZWHNi1ZMCF 7khsyIRdtt5a6hNWJ28kCRm1m0IO+jSgzzEJLsmBE6z4N2t8FwsGvwsFdstI5xfx wEFiNKO4m9FsCo/pOxAdZaHag7ub0jJFLPt+N6Ancl6P/Co+IsWO/5247wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHBQzckkKvgaAALrPn+kA6H5qJj7MB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEvY0ZETnlTUXEtQm9BQXVzLWY2UURvZm1vbVBzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDB1zANBgkqhkiG 9w0BAQsFAAOCAQEAMjKCGn4VCV1oMekor3IP5vlI8Qgw6koyyn0AvdOL4KnIbgPd feH8LT2rMDFTj4mF2/HcIPxF6Kc0l0tzJbFuqUNQzs3z+DcALUtff9Kind4heIEx nV98t80fAHAOtm7GmVQwtQBxGZTamQ2ZVktsziFcNkINUB7xZeXTMNx+Fnla+JoL ouqu/BotsJ5xoN1FVF9bjFsOfBKXtMm23YaJmNjGqpekzFixbcwztlPgAJ3Iq4An NC6YXMPqbC0y0x/NJT4MYHPJyi6VVi6uEqXYZxyXOiQy8LLu9SJrZ3UEGOwpTNxF m0ATualYEiQ2WEbSxMPf76LEe2MhoGR+9I8toQ== -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:29 2025 by rpki-client