This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa File: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (raw, json) Hash identifier: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g= Subject key identifier: DF:10:84:54:A2:96:9B:64:2C:39:2C:E8:3C:D0:67:5F:CE:81:76:2E Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da Certificate serial: 019BDB4E9FD690B5E6CF1865875FC7C519E0 Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa Signing time: Tue 20 Jan 2026 12:08:41 +0000 ASPA not before: Tue 20 Jan 2026 12:08:41 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 214948 Providers: AS: 196945 AS: 207767 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:4e:9f:d6:90:b5:e6:cf:18:65:87:5f:c7:c5:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da Validity Not Before: Jan 20 12:08:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df108454a2969b642c392ce83cd0675fce81762e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:11:96:08:e7:f6:53:32:14:80:50:c9:b3: 56:c1:3f:56:d3:c0:e4:88:53:37:b0:d6:d3:37:2a: 5f:66:ec:81:98:39:f5:dc:48:a5:9e:d8:4e:73:96: 38:08:0c:c1:7f:40:b2:29:a7:16:6b:43:d4:ed:3f: 91:91:78:39:60:af:a9:81:0f:43:74:f1:c2:6b:b0: a3:26:95:8a:69:64:d9:19:22:a1:61:d3:fb:1d:7f: 44:6f:60:98:63:5b:19:d2:c2:ec:94:3b:2a:72:26: a6:30:75:fc:4e:df:b5:d9:eb:03:3d:76:2b:cc:51: c7:1b:3a:3a:b5:c6:a6:e1:da:5c:58:9b:f7:06:0b: d6:8f:6b:1b:70:a4:33:43:68:6d:b7:13:42:3a:ea: 07:c3:70:1a:61:af:6c:ed:e3:27:f2:1f:6a:cc:a8: 07:bd:a3:00:52:86:f7:e9:ae:20:8d:07:11:d4:32: 0c:6c:66:0c:d8:e6:9e:9d:a2:49:94:46:3b:27:3d: 8b:ed:cd:32:15:ea:9c:cd:43:d2:24:65:97:c3:09: 21:8a:00:e6:e2:94:a6:79:60:f8:3f:60:31:d7:0e: c2:e7:a7:53:49:dd:70:8a:91:ca:38:e2:c7:a3:60: 02:ab:0d:da:d1:24:09:a4:5f:eb:2d:6d:f3:a6:e7: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:10:84:54:A2:96:9B:64:2C:39:2C:E8:3C:D0:67:5F:CE:81:76:2E X509v3 Authority Key Identifier: keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214948 Signature Algorithm: sha256WithRSAEncryption 34:c5:cd:8b:8f:7c:24:cb:ff:47:50:0b:cd:f8:10:d9:d6:45: f9:7f:6b:6a:fa:df:71:55:bb:54:66:a6:73:c3:4c:67:76:fd: d6:a1:cf:2b:51:01:0c:81:f0:84:33:4d:2e:e2:8f:7d:c2:dc: f8:39:25:55:ed:86:af:a4:8f:6e:a8:44:51:71:59:68:02:01: 3c:c3:90:3c:63:74:23:45:89:f1:63:67:10:a2:be:0b:f0:06: 40:26:64:6e:39:a4:92:c0:3d:fc:85:13:bd:5f:ff:2d:a4:71: ee:86:ed:af:48:05:30:73:d9:73:66:94:27:d8:da:bf:8f:72: a2:3a:05:c4:06:51:6a:6e:d3:5a:8b:3e:81:1c:e5:5a:d2:2b: 48:8f:0e:ba:04:62:26:b6:b3:a8:e8:c0:28:3f:fb:0a:c3:0f: 8e:fc:1f:3d:17:c3:4a:b7:9b:3f:61:e0:92:8d:c1:96:c8:78: 0b:4f:9b:0c:e8:85:6b:f5:cb:c1:bc:c4:ba:8e:e4:41:a6:ee: 31:a3:25:99:da:da:a1:10:de:74:fb:58:a6:3d:82:56:75:06: 7b:12:98:f6:1d:11:3c:ce:02:48:ca:41:82:c1:9c:65:d0:87: e6:ae:2e:6f:d9:44:5b:f9:49:6f:27:31:7f:08:fd:1e:c8:04: a9:33:01:23 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvbTp/WkLXmzxhlh1/HxRngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWY2MGQ5ZmE2YWEwYWMwM2JhMTY3ZGIwMWZjMTgyYjU4 NTYzZGEwHhcNMjYwMTIwMTIwODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjEwODQ1NGEyOTY5YjY0MmMzOTJjZTgzY2QwNjc1ZmNlODE3NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSIRlgjn9lMyFIBQybNWwT9W08Dk iFM3sNbTNypfZuyBmDn13EilnthOc5Y4CAzBf0CyKacWa0PU7T+RkXg5YK+pgQ9D dPHCa7CjJpWKaWTZGSKhYdP7HX9Eb2CYY1sZ0sLslDsqciamMHX8Tt+12esDPXYr zFHHGzo6tcam4dpcWJv3BgvWj2sbcKQzQ2httxNCOuoHw3AaYa9s7eMn8h9qzKgH vaMAUob36a4gjQcR1DIMbGYM2OaenaJJlEY7Jz2L7c0yFeqczUPSJGWXwwkhigDm 4pSmeWD4P2Ax1w7C56dTSd1wipHKOOLHo2ACqw3a0SQJpF/rLW3zpuda1QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFN8QhFSilptkLDks6DzQZ1/OgXYuMB8GA1UdIwQY MBaAFPzvYNn6aqCsA7oWfbAfwYK1hWPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEt MGY0NzViZjE0NjAzLzEvM3hDRVZLS1dtMlFzT1N6b1BOQm5YODZCZGk0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEtMGY0NzViZjE0NjAz LzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHpDANBgkqhkiG 9w0BAQsFAAOCAQEANMXNi498JMv/R1ALzfgQ2dZF+X9ravrfcVW7VGamc8NMZ3b9 1qHPK1EBDIHwhDNNLuKPfcLc+DklVe2Gr6SPbqhEUXFZaAIBPMOQPGN0I0WJ8WNn EKK+C/AGQCZkbjmkksA9/IUTvV//LaRx7obtr0gFMHPZc2aUJ9jav49yojoFxAZR am7TWos+gRzlWtIrSI8OugRiJrazqOjAKD/7CsMPjvwfPRfDSrebP2Hgko3Blsh4 C0+bDOiFa/XLwbzEuo7kQabuMaMlmdraoRDedPtYpj2CVnUGexKY9h0RPM4CSMpB gsGcZdCH5q4ub9lEW/lJbycxfwj9HsgEqTMBIw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:58 2026 by rpki-client