This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/7YKudBQqaU86zuBwTkjjChXm9G0.asa File: 7YKudBQqaU86zuBwTkjjChXm9G0.asa (raw, json) Hash identifier: eDBUQ1qq4EhZv8hhm9LsQRUdUzcOW1N16EN/4FMNBbA= Subject key identifier: ED:82:AE:74:14:2A:69:4F:3A:CE:E0:70:4E:48:E3:0A:15:E6:F4:6D Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21 Certificate serial: 019AFC9AB92F891ACC81768FB2426BEA8015 Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/7YKudBQqaU86zuBwTkjjChXm9G0.asa Signing time: Mon 08 Dec 2025 06:16:29 +0000 ASPA not before: Mon 08 Dec 2025 06:16:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 213052 Providers: AS: 8283 AS: 31477 AS: 200132 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:9a:b9:2f:89:1a:cc:81:76:8f:b2:42:6b:ea:80:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21 Validity Not Before: Dec 8 06:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed82ae74142a694f3acee0704e48e30a15e6f46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:d1:6b:2f:e3:ee:ca:3c:9e:0b:17:bb:6a: 39:7f:64:d2:6e:16:e5:9e:ef:3b:d6:e3:4f:2a:27: fc:60:9d:b2:fd:c9:d9:57:c6:71:4a:2c:39:b8:ff: 64:c6:b0:74:b5:cb:77:0e:b6:9f:cb:11:40:00:20: 7d:ce:4f:cb:82:f1:dd:c8:ba:72:76:c4:e6:94:d3: 53:19:6d:97:94:50:1c:3b:ee:d7:77:d1:ce:64:0b: 03:23:e5:d4:e3:cf:6f:28:47:50:d8:e3:82:4d:ed: 40:ae:88:a0:32:df:28:47:8c:36:4c:ae:ef:5d:ae: 8c:f7:f6:8e:16:d5:c3:75:7e:dc:1f:3b:3c:ce:2c: 88:b4:e2:a1:33:f3:4f:97:51:2d:ec:ad:70:e1:32: 7c:c7:d0:31:da:c1:db:f6:d1:c5:35:bd:f1:89:66: 58:cd:0d:ef:d2:03:13:fe:66:67:ec:0d:8a:65:0d: 42:d7:2c:b9:38:82:e2:ec:61:64:d0:8e:a6:9e:0f: 59:8b:d1:27:6e:c6:3a:e9:93:e9:69:d2:38:20:9d: d5:a8:09:93:a3:3a:75:7d:cf:da:1a:db:ef:b2:ba: 1f:cb:cf:d3:60:01:bd:11:e7:e6:3f:78:e9:ea:3e: 2c:fa:88:da:85:ed:4a:62:28:80:ce:01:7d:ff:14: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:82:AE:74:14:2A:69:4F:3A:CE:E0:70:4E:48:E3:0A:15:E6:F4:6D X509v3 Authority Key Identifier: keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/7YKudBQqaU86zuBwTkjjChXm9G0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213052 Signature Algorithm: sha256WithRSAEncryption 6b:16:fc:09:89:b3:bb:c9:ff:85:c8:72:12:15:d2:b9:10:a4: a4:2a:04:10:59:2a:40:a6:0c:3e:56:be:e4:21:be:21:d8:b0: 4b:32:8c:75:50:c2:42:11:48:26:ef:ee:3e:38:4c:8d:f8:ef: c1:f0:6e:10:6f:4d:c1:28:f3:b0:64:95:24:0c:d2:2e:c4:c4: ad:f5:a9:40:58:c8:10:0f:26:30:b1:a4:ab:b5:d3:6a:f9:d6: f5:3e:16:9b:a0:20:6b:29:0f:35:9b:a3:47:03:8e:5a:e5:af: 84:7a:02:27:12:5f:fe:df:8b:91:0a:4a:d3:0e:0e:56:f2:20: 4e:af:f3:5b:4f:70:b1:91:8f:0d:4b:d9:bf:d9:77:29:be:db: 66:13:56:93:e9:de:23:20:3e:2a:78:1d:7b:7f:ae:ea:37:2b: 2c:40:f8:1f:42:53:68:7d:89:59:83:aa:44:8a:42:6a:c5:6a: 89:99:af:1a:8b:5e:0a:8c:63:f3:15:84:d0:b0:27:4d:55:ac: 0a:0d:6d:ac:05:c5:f0:64:57:19:0f:12:53:33:1c:df:d0:e3: bf:ab:dd:0b:fc:56:45:f3:18:9e:5f:80:bc:0b:60:da:44:69: 1d:ca:d2:2f:d2:89:23:3a:96:4a:9c:b6:f2:a2:30:2c:bc:7f: 09:e8:5f:63 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr8mrkviRrMgXaPskJr6oAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYTVjZGU1MjRmNzgxMGQ1ODY4YmM0OWFiMGJmNjYyMWY0 NGRjMjEwHhcNMjUxMjA4MDYxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDgyYWU3NDE0MmE2OTRmM2FjZWUwNzA0ZTQ4ZTMwYTE1ZTZmNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vLRay/j7so8ngsXu2o5f2TSbhbl nu871uNPKif8YJ2y/cnZV8ZxSiw5uP9kxrB0tct3DrafyxFAACB9zk/LgvHdyLpy dsTmlNNTGW2XlFAcO+7Xd9HOZAsDI+XU489vKEdQ2OOCTe1AroigMt8oR4w2TK7v Xa6M9/aOFtXDdX7cHzs8ziyItOKhM/NPl1Et7K1w4TJ8x9Ax2sHb9tHFNb3xiWZY zQ3v0gMT/mZn7A2KZQ1C1yy5OILi7GFk0I6mng9Zi9EnbsY66ZPpadI4IJ3VqAmT ozp1fc/aGtvvsrofy8/TYAG9EefmP3jp6j4s+ojahe1KYiiAzgF9/xQjiwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFO2CrnQUKmlPOs7gcE5I4woV5vRtMB8GA1UdIwQY MBaAFE+lzeUk94ENWGi8SasL9mIfRNwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYt MzJkNGFkOGY1NmRlLzEvN1lLdWRCUXFhVTg2enVCd1RrampDaFhtOUcwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYtMzJkNGFkOGY1NmRl LzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAPDANBgkqhkiG 9w0BAQsFAAOCAQEAaxb8CYmzu8n/hchyEhXSuRCkpCoEEFkqQKYMPla+5CG+Idiw SzKMdVDCQhFIJu/uPjhMjfjvwfBuEG9NwSjzsGSVJAzSLsTErfWpQFjIEA8mMLGk q7XTavnW9T4Wm6AgaykPNZujRwOOWuWvhHoCJxJf/t+LkQpK0w4OVvIgTq/zW09w sZGPDUvZv9l3Kb7bZhNWk+neIyA+Kngde3+u6jcrLED4H0JTaH2JWYOqRIpCasVq iZmvGoteCoxj8xWE0LAnTVWsCg1trAXF8GRXGQ8SUzMc39Djv6vdC/xWRfMYnl+A vAtg2kRpHcrSL9KJIzqWSpy28qIwLLx/CehfYw== -----END CERTIFICATE-----Generated at Wed Dec 10 17:18:28 2025 by rpki-client