This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/X8CdiaOL7r7wRRKcQ_i-HAtSpEE.asa File: X8CdiaOL7r7wRRKcQ_i-HAtSpEE.asa (raw, json) Hash identifier: m6XO9M8YuBRJpjyMisvjiR1NdmA64mOYhDzGvgACZo8= Subject key identifier: 5F:C0:9D:89:A3:8B:EE:BE:F0:45:12:9C:43:F8:BE:1C:0B:52:A4:41 Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4 Certificate serial: 019BF2183134801F8F3D09CA1D8EC5864DE7 Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/X8CdiaOL7r7wRRKcQ_i-HAtSpEE.asa Signing time: Sat 24 Jan 2026 22:20:30 +0000 ASPA not before: Sat 24 Jan 2026 22:20:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 213449 Providers: AS: 6204 AS: 6939 AS: 11967 AS: 34927 AS: 47536 AS: 49600 AS: 58087 AS: 142064 AS: 203446 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:18:31:34:80:1f:8f:3d:09:ca:1d:8e:c5:86:4d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4 Validity Not Before: Jan 24 22:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fc09d89a38beebef045129c43f8be1c0b52a441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:75:6c:69:60:27:5b:b5:21:cf:4a:bd:4f: 07:5b:55:43:b6:4c:d6:e2:26:20:36:0e:85:b5:c6: 3b:c3:2c:57:11:21:00:42:fc:75:fd:3e:b6:85:38: df:97:68:a9:f6:d7:16:90:8b:89:59:b7:97:65:10: 0d:bf:5d:15:1a:b8:a9:32:f8:00:b1:50:18:f3:2a: c6:2d:24:af:7b:eb:e1:4c:4d:dd:66:a9:e4:f7:cb: c7:19:b1:a1:cf:4b:e5:82:aa:16:9e:c4:c3:04:d5: 8b:36:ed:bf:77:2a:20:ef:44:38:e4:ac:31:6d:0a: f0:2a:b1:0f:5d:45:8f:65:70:03:cc:fb:3f:1d:5c: a6:5c:05:26:99:3e:5f:9c:bf:40:5d:2d:f6:1e:b1: f4:b3:bd:26:a2:0d:2e:7b:53:57:28:f0:8f:c1:69: 66:a4:c3:0c:70:fd:6b:c4:3a:16:73:3f:55:0d:6b: 11:c4:ca:59:58:e6:88:38:50:80:5a:0d:4f:04:c8: 11:12:29:f2:f1:3b:8c:d2:76:0e:7c:1c:36:64:11: ad:13:f6:1e:f6:e3:9e:7e:dd:ed:0a:e8:9c:c8:2e: b7:b7:af:b1:cd:9b:22:a1:39:85:4c:a8:d1:dc:f9: c4:8f:3f:68:1e:ab:aa:90:e5:84:f9:80:93:2e:fc: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C0:9D:89:A3:8B:EE:BE:F0:45:12:9C:43:F8:BE:1C:0B:52:A4:41 X509v3 Authority Key Identifier: keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/X8CdiaOL7r7wRRKcQ_i-HAtSpEE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213449 Signature Algorithm: sha256WithRSAEncryption 0e:20:9f:5e:ef:b3:f9:07:a8:19:79:a5:92:0a:d5:e4:cc:d2: ae:51:78:f6:55:3e:23:2e:ee:68:c5:06:bc:e0:3b:56:0a:39: 96:20:71:33:da:47:14:5c:3c:70:5f:0d:ca:e5:ea:4e:f6:46: c2:cc:c0:bd:fa:3c:53:55:76:e8:82:1e:c1:9f:c3:c6:f8:db: 6c:2c:df:36:80:35:26:ba:65:62:ce:07:75:99:49:c2:60:dd: 02:0f:97:e7:65:f8:82:5e:3f:f2:37:0b:85:88:cd:b1:48:a4: de:ff:42:82:ee:25:75:ef:60:16:ab:42:e0:17:5c:e8:18:5a: 18:45:86:91:fa:64:cf:b9:cf:8a:7a:b5:07:d6:5b:32:3b:20: 56:05:b9:cc:c8:60:9f:c0:a2:6c:b3:2d:12:e8:fa:f3:8f:d6: 62:17:73:8e:ce:27:a7:5f:7f:d9:8f:f5:cb:d0:f1:96:06:f5: a4:2d:f0:1c:e3:d6:4a:c5:b8:88:38:8a:09:98:f1:8d:b3:5f: c7:62:e7:e5:be:a4:26:18:f7:80:0c:2e:cd:ff:0b:e3:db:13: 32:32:e4:63:df:7d:5e:c4:8d:bc:b2:bc:f8:b0:fe:f8:33:36: 15:6c:4c:9b:b6:2e:49:77:17:de:af:ad:62:cf:77:65:11:b9: bb:97:2f:72 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvyGDE0gB+PPQnKHY7Fhk3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh NzVjZDQwHhcNMjYwMTI0MjIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmMwOWQ4OWEzOGJlZWJlZjA0NTEyOWM0M2Y4YmUxYzBiNTJhNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw11bGlgJ1u1Ic9KvU8HW1VDtkzW 4iYgNg6FtcY7wyxXESEAQvx1/T62hTjfl2ip9tcWkIuJWbeXZRANv10VGripMvgA sVAY8yrGLSSve+vhTE3dZqnk98vHGbGhz0vlgqoWnsTDBNWLNu2/dyog70Q45Kwx bQrwKrEPXUWPZXADzPs/HVymXAUmmT5fnL9AXS32HrH0s70mog0ue1NXKPCPwWlm pMMMcP1rxDoWcz9VDWsRxMpZWOaIOFCAWg1PBMgREiny8TuM0nYOfBw2ZBGtE/Ye 9uOeft3tCuicyC63t6+xzZsioTmFTKjR3PnEjz9oHquqkOWE+YCTLvxe+QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFF/AnYmji+6+8EUSnEP4vhwLUqRBMB8GA1UdIwQY MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt ZTI5MWE1MmE5ZDE1LzEvWDhDZGlhT0w3cjd3UlJLY1FfaS1IQXRTcEVFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1 LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNByTANBgkqhkiG 9w0BAQsFAAOCAQEADiCfXu+z+QeoGXmlkgrV5MzSrlF49lU+Iy7uaMUGvOA7Vgo5 liBxM9pHFFw8cF8NyuXqTvZGwszAvfo8U1V26IIewZ/DxvjbbCzfNoA1JrplYs4H dZlJwmDdAg+X52X4gl4/8jcLhYjNsUik3v9Cgu4lde9gFqtC4Bdc6BhaGEWGkfpk z7nPinq1B9ZbMjsgVgW5zMhgn8CibLMtEuj684/WYhdzjs4np19/2Y/1y9Dxlgb1 pC3wHOPWSsW4iDiKCZjxjbNfx2Ln5b6kJhj3gAwuzf8L49sTMjLkY999XsSNvLK8 +LD++DM2FWxMm7YuSXcX3q+tYs93ZRG5u5cvcg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:45 2026 by rpki-client