This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/oR0gnNQtbyEYAy7mwLQOgUnAVks.asa File: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (raw, json) Hash identifier: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY= Subject key identifier: A1:1D:20:9C:D4:2D:6F:21:18:03:2E:E6:C0:B4:0E:81:49:C0:56:4B Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Certificate serial: 019B2130911165C3E6495DF02FC485989899 Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/oR0gnNQtbyEYAy7mwLQOgUnAVks.asa Signing time: Mon 15 Dec 2025 08:46:29 +0000 ASPA not before: Mon 15 Dec 2025 08:46:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 206362 Providers: AS: 8194 AS: 12578 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:30:91:11:65:c3:e6:49:5d:f0:2f:c4:85:98:98:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Validity Not Before: Dec 15 08:46:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a11d209cd42d6f2118032ee6c0b40e8149c0564b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:62:cb:74:bf:7e:95:62:52:3d:3a:7b:77: 58:c8:a7:07:48:cf:fe:73:07:c2:7c:fb:61:6a:a9: 0d:99:c8:f9:d8:a5:ed:91:ce:bb:f0:47:77:10:56: 9c:f7:74:1e:f6:7f:fe:16:32:3d:77:23:70:12:85: 0c:64:1e:4b:59:3e:7e:bd:3c:26:b6:d4:af:b0:f8: 1c:b5:ec:cc:90:5f:d6:8f:8a:68:59:65:bb:5e:d0: 13:82:f4:9f:18:f7:cf:6f:4a:85:8b:f0:64:53:ac: f7:77:c0:72:c7:3e:97:72:93:07:c0:d4:8e:ba:1e: 61:5d:5b:6d:7e:c4:d1:0f:35:ab:44:3a:2d:9c:0a: 84:ca:34:51:0f:a7:50:3c:7d:1c:cf:a6:d5:2c:b9: c3:48:ef:1c:dc:3f:32:f0:62:3e:be:66:f3:7f:e5: b7:d6:ca:43:3d:47:01:16:cd:be:3f:17:e4:f2:ec: 06:26:d7:f5:54:a3:43:14:4a:e2:6f:35:bd:f1:dc: c1:fc:c7:14:91:a4:99:12:e9:62:3a:68:af:44:cd: e9:37:77:75:91:51:f9:b2:4a:10:0a:a6:76:93:c4: 9a:9d:ee:b5:fd:e3:01:e7:bd:fe:f6:58:4c:26:64: 4a:a4:55:85:fb:1d:82:bd:47:91:e1:d7:05:dd:5c: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:20:9C:D4:2D:6F:21:18:03:2E:E6:C0:B4:0E:81:49:C0:56:4B X509v3 Authority Key Identifier: keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/oR0gnNQtbyEYAy7mwLQOgUnAVks.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206362 Signature Algorithm: sha256WithRSAEncryption 1b:f2:d8:02:b0:49:0b:f6:da:0e:23:c7:a5:3a:ed:8f:ea:7a: 83:90:cc:58:b6:49:88:60:40:0d:42:46:05:f0:3a:7b:65:f5: 5c:c4:04:a5:91:48:29:7d:e3:d6:be:c2:a6:dd:11:40:87:94: 26:9d:56:a6:ed:f7:23:e9:84:cf:fd:d8:eb:f1:38:ad:7c:56: e4:09:66:10:c7:75:b6:88:15:de:1d:2a:40:68:b2:d8:69:ba: d9:f1:26:05:05:1c:4e:e2:c1:bb:b1:ef:5b:c2:39:45:67:96: cd:03:86:90:12:06:09:c7:76:d6:8c:84:87:76:25:7c:63:b2: 08:0e:a9:28:e4:6e:0e:c2:f6:8a:c8:d8:10:5f:21:41:4e:2a: b2:3a:9f:a3:fd:c6:62:9a:22:76:27:57:a9:0c:6b:a0:0a:bd: 79:51:75:03:ed:eb:09:e4:4a:63:2d:f4:22:ac:e7:d8:1b:be: 21:05:ae:db:5d:c9:eb:19:7a:66:d7:5c:5e:06:55:07:d7:2b: e1:09:2c:30:1a:af:3b:79:28:2b:ea:57:99:10:ff:23:76:b6: a1:85:42:ff:0b:9d:1b:af:0b:70:7e:e0:74:d3:fc:72:33:43: 72:6b:1d:ca:66:7b:59:b9:24:77:ff:d7:bc:e4:f2:95:36:e7: d2:e1:10:f9 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZshMJERZcPmSV3wL8SFmJiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4 ZjYyYzgwHhcNMjUxMjE1MDg0NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTFkMjA5Y2Q0MmQ2ZjIxMTgwMzJlZTZjMGI0MGU4MTQ5YzA1NjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUViy3S/fpViUj06e3dYyKcHSM/+ cwfCfPthaqkNmcj52KXtkc678Ed3EFac93Qe9n/+FjI9dyNwEoUMZB5LWT5+vTwm ttSvsPgctezMkF/Wj4poWWW7XtATgvSfGPfPb0qFi/BkU6z3d8Byxz6XcpMHwNSO uh5hXVttfsTRDzWrRDotnAqEyjRRD6dQPH0cz6bVLLnDSO8c3D8y8GI+vmbzf+W3 1spDPUcBFs2+Pxfk8uwGJtf1VKNDFEribzW98dzB/McUkaSZEuliOmivRM3pN3d1 kVH5skoQCqZ2k8Sane61/eMB573+9lhMJmRKpFWF+x2CvUeR4dcF3Vz2VQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKEdIJzULW8hGAMu5sC0DoFJwFZLMB8GA1UdIwQY MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt OTE3YzgwYjE0ODYyLzEvb1IwZ25OUXRieUVZQXk3bXdMUU9nVW5BVmtzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMmGjANBgkqhkiG 9w0BAQsFAAOCAQEAG/LYArBJC/baDiPHpTrtj+p6g5DMWLZJiGBADUJGBfA6e2X1 XMQEpZFIKX3j1r7Cpt0RQIeUJp1Wpu33I+mEz/3Y6/E4rXxW5AlmEMd1togV3h0q QGiy2Gm62fEmBQUcTuLBu7HvW8I5RWeWzQOGkBIGCcd21oyEh3YlfGOyCA6pKORu DsL2isjYEF8hQU4qsjqfo/3GYpoididXqQxroAq9eVF1A+3rCeRKYy30Iqzn2Bu+ IQWu213J6xl6ZtdcXgZVB9cr4QksMBqvO3koK+pXmRD/I3a2oYVC/wudG68LcH7g dNP8cjNDcmsdymZ7Wbkkd//XvOTylTbn0uEQ+Q== -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:25 2025 by rpki-client