This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Zb2DAyXYRscKIOYSi2eKTsyD5xU.asa File: Zb2DAyXYRscKIOYSi2eKTsyD5xU.asa (raw, json) Hash identifier: tviouJvbdXMUrru9amm3Vxe6wv7+/CfkkC7GatDUkkI= Subject key identifier: 65:BD:83:03:25:D8:46:C7:0A:20:E6:12:8B:67:8A:4E:CC:83:E7:15 Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Certificate serial: 019AC014212B7F9CEAC5C8386AD8CA236CCA Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Zb2DAyXYRscKIOYSi2eKTsyD5xU.asa Signing time: Wed 26 Nov 2025 12:12:15 +0000 ASPA not before: Wed 26 Nov 2025 12:12:15 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 2121 Providers: AS: 3333 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:14:21:2b:7f:9c:ea:c5:c8:38:6a:d8:ca:23:6c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Validity Not Before: Nov 26 12:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=65bd830325d846c70a20e6128b678a4ecc83e715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:e3:2f:e9:0d:19:57:58:39:68:57:20:51: 24:00:45:3e:f3:c9:ae:40:1e:e3:5b:b2:d6:74:af: a0:2f:3e:e5:65:58:af:7a:d5:4a:ad:68:b0:f2:95: 93:eb:64:65:36:58:82:24:a6:36:57:1a:29:3a:99: e6:7e:a3:b2:ee:88:fa:84:67:e7:de:8a:c4:77:ab: 71:5d:e8:b5:b4:28:03:73:64:bf:74:15:fd:09:90: 30:b9:ff:bc:03:8a:af:e6:69:7d:40:6c:ca:31:e0: 31:e1:91:76:bb:a7:10:bd:47:df:99:1f:d1:4d:88: fb:a8:85:40:5c:0c:2b:0b:1b:33:8e:dd:a0:96:d0: a9:28:9a:57:4a:80:17:ad:99:f1:e2:64:35:7c:43: 6f:ba:6a:b1:bb:fc:53:5a:5a:0d:12:d1:77:51:e1: 4f:92:ec:66:1f:05:43:e4:40:91:3c:20:b5:31:73: 15:6a:bf:99:12:72:78:7d:e1:1f:71:38:bc:b4:85: 6f:4a:6b:12:ae:a8:82:36:91:f2:4a:22:f9:07:52: 07:05:b5:ab:1e:e3:c5:a6:2e:76:30:71:3a:89:2e: 5c:ae:73:61:77:00:cb:f3:6e:63:49:59:5a:5f:72: e2:fc:76:83:cd:35:8d:d4:a1:69:cc:d6:99:98:f2: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BD:83:03:25:D8:46:C7:0A:20:E6:12:8B:67:8A:4E:CC:83:E7:15 X509v3 Authority Key Identifier: keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/Zb2DAyXYRscKIOYSi2eKTsyD5xU.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 2121 Signature Algorithm: sha256WithRSAEncryption 3f:ef:0f:a5:53:71:60:56:82:08:de:3f:d1:6a:f9:96:4d:f2: c7:9c:ff:8a:fc:a8:e5:82:1b:55:fb:ac:6f:2c:87:4e:66:78: b8:84:d5:fe:26:b6:e1:c0:f6:79:e8:6d:c1:20:53:c6:2c:c6: 34:50:31:6f:e1:09:53:9a:7b:c6:dc:dd:52:6e:60:00:0d:90: 26:14:f7:7d:d7:b7:b0:6c:63:78:ba:f9:a6:ed:5f:14:24:e9: f1:1e:32:3a:10:6e:a9:5a:21:69:41:98:ca:da:bb:0e:9f:f6: 90:0e:73:1f:f2:7c:b9:84:85:26:d6:72:ac:0b:00:3d:dd:ca: 0e:c2:8e:2a:c7:83:1c:97:58:e8:a5:c2:d5:52:68:78:f1:1d: 38:41:b1:c2:e2:bd:0d:5d:1d:2d:44:a9:b3:6a:98:aa:04:8f: 21:d9:77:c3:ef:9a:b3:75:a9:9f:30:cb:a5:2c:8a:db:37:26: 51:d4:47:bd:69:fd:07:ee:e2:08:42:0d:d5:67:a4:96:d7:4a: dd:9a:73:4a:c8:34:c0:8c:6e:ed:f6:96:5f:3b:1b:b9:0e:58: c0:e7:a0:04:f1:4d:46:2e:36:0b:ca:95:27:44:d8:0f:b2:4d: 75:44:81:88:48:20:ef:3c:f2:c4:0e:3a:a4:5a:f5:c0:11:2a: 3a:27:f7:23 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZrAFCErf5zqxcg4atjKI2zKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh MDQyOWMwHhcNMjUxMTI2MTIxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWJkODMwMzI1ZDg0NmM3MGEyMGU2MTI4YjY3OGE0ZWNjODNlNzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/TjL+kNGVdYOWhXIFEkAEU+88mu QB7jW7LWdK+gLz7lZVivetVKrWiw8pWT62RlNliCJKY2VxopOpnmfqOy7oj6hGfn 3orEd6txXei1tCgDc2S/dBX9CZAwuf+8A4qv5ml9QGzKMeAx4ZF2u6cQvUffmR/R TYj7qIVAXAwrCxszjt2gltCpKJpXSoAXrZnx4mQ1fENvumqxu/xTWloNEtF3UeFP kuxmHwVD5ECRPCC1MXMVar+ZEnJ4feEfcTi8tIVvSmsSrqiCNpHySiL5B1IHBbWr HuPFpi52MHE6iS5crnNhdwDL825jSVlaX3Li/HaDzTWN1KFpzNaZmPLJ3QIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFGW9gwMl2EbHCiDmEotnik7Mg+cVMB8GA1UdIwQY MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt NmFhNDQzNTI4Y2U1LzEvWmIyREF5WFlSc2NLSU9ZU2kyZUtUc3lENXhVLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1 LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAghJMA0GCSqGSIb3 DQEBCwUAA4IBAQA/7w+lU3FgVoII3j/RavmWTfLHnP+K/KjlghtV+6xvLIdOZni4 hNX+JrbhwPZ56G3BIFPGLMY0UDFv4QlTmnvG3N1SbmAADZAmFPd917ewbGN4uvmm 7V8UJOnxHjI6EG6pWiFpQZjK2rsOn/aQDnMf8ny5hIUm1nKsCwA93coOwo4qx4Mc l1jopcLVUmh48R04QbHC4r0NXR0tRKmzapiqBI8h2XfD75qzdamfMMulLIrbNyZR 1Ee9af0H7uIIQg3VZ6SW10rdmnNKyDTAjG7t9pZfOxu5DljA56AE8U1GLjYLypUn RNgPsk11RIGISCDvPPLEDjqkWvXAESo6J/cj -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:44 2025 by rpki-client