This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/_zz2TE-rlOQsVBCJCSLaPozBLmc.asa File: _zz2TE-rlOQsVBCJCSLaPozBLmc.asa (raw, json) Hash identifier: z2iZ5+1Ub/NzAMRUDRpqA5UHRmLefFa08ji+87mhARs= Subject key identifier: FF:3C:F6:4C:4F:AB:94:E4:2C:54:10:89:09:22:DA:3E:8C:C1:2E:67 Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f Certificate serial: 019B98CE595311E00A0C9739405CF3BC78C9 Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/_zz2TE-rlOQsVBCJCSLaPozBLmc.asa Signing time: Wed 07 Jan 2026 14:13:38 +0000 ASPA not before: Wed 07 Jan 2026 14:13:38 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 43171 Providers: AS: 8075 AS: 9141 AS: 15169 AS: 21132 AS: 21395 AS: 24115 AS: 29535 AS: 32934 AS: 48850 AS: 50841 AS: 62047 AS: 62081 AS: 63293 AS: 201054 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:ce:59:53:11:e0:0a:0c:97:39:40:5c:f3:bc:78:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f Validity Not Before: Jan 7 14:13:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff3cf64c4fab94e42c5410890922da3e8cc12e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:2f:bd:6b:84:f1:bc:15:61:d0:40:3a:84: 92:28:70:f5:12:76:1f:4a:42:80:aa:f3:a3:e1:25: 98:ee:80:a5:34:49:08:ad:e6:a3:f6:4a:de:e9:f1: 4a:03:b5:c8:d5:8e:d6:0a:d0:ed:f8:0a:37:48:ed: a5:a2:91:f6:e3:58:be:ac:bd:e0:b1:66:e9:9f:86: 6c:eb:18:0d:b7:5b:0b:0c:8f:1c:10:f7:1b:e0:af: b7:5f:4a:88:9d:75:db:a7:c4:21:f8:1d:c4:79:72: c4:27:e7:f9:c1:d9:da:40:13:f0:d2:2d:c4:11:97: d9:5f:93:98:6d:ba:71:d2:a5:dd:61:a1:08:c9:b2: 76:f9:b3:67:92:4b:8b:99:5d:75:e5:d9:ba:a7:1c: c3:f6:77:db:ce:3e:da:93:64:3b:dd:11:5d:59:e1: 74:78:7b:0a:ea:89:00:bf:4d:e5:a2:3a:00:f1:d3: 5f:06:c7:c2:58:87:91:74:16:31:ca:6c:b8:a7:fe: 51:8c:f5:6a:1f:45:52:11:b7:8d:5b:cc:7c:df:60: bf:39:d3:67:da:97:50:4f:46:5b:62:ba:0d:75:3c: 96:03:d8:08:f2:d8:cf:09:60:2b:92:d8:86:02:1c: bf:81:38:06:47:6f:a6:0e:26:a8:67:9d:27:4f:f8: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3C:F6:4C:4F:AB:94:E4:2C:54:10:89:09:22:DA:3E:8C:C1:2E:67 X509v3 Authority Key Identifier: keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/_zz2TE-rlOQsVBCJCSLaPozBLmc.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 43171 Signature Algorithm: sha256WithRSAEncryption 03:89:fc:37:69:a9:f0:ae:62:9e:da:17:c5:25:71:a3:8c:b1: 9c:55:84:19:99:01:67:f0:d0:55:4b:80:d4:7e:8a:ae:25:79: bd:09:20:4d:a6:11:9e:46:02:09:8b:6e:88:b6:c6:b9:07:ad: ce:f5:4f:56:1c:c9:9d:e0:87:61:04:8c:ae:0c:86:75:b2:6e: 42:14:60:34:6c:6d:9a:5b:33:4a:a3:0b:4e:f3:f1:a6:20:f3: 42:82:6b:ef:24:5c:09:00:2f:b4:51:57:24:5a:b2:af:f8:db: b4:0e:6b:41:93:8e:cb:f3:84:09:bb:aa:a3:8c:7a:22:2f:d9: c0:ac:db:ad:fc:1e:e3:5d:20:9d:74:de:78:28:e1:d8:7b:06: 15:d9:ad:af:b5:84:22:b3:65:41:73:1d:71:30:cd:e2:64:1a: 99:71:4b:41:f3:ab:bc:94:81:61:8e:ea:d3:84:06:02:4f:0d: eb:38:44:e6:09:4f:cd:38:01:77:51:e6:58:8e:73:14:56:11: 71:51:5a:dd:cf:f0:4f:37:8c:f8:5d:2a:bf:e5:6b:9d:86:97: 08:6d:ac:38:94:7c:27:b1:6d:91:bb:43:d6:9c:9e:7a:f0:fd: bf:87:73:64:49:4d:4d:f7:b6:71:ec:20:7b:d9:5e:9c:df:6e: 46:d7:cc:04 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZuYzllTEeAKDJc5QFzzvHjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1 NTc0NGYwHhcNMjYwMTA3MTQxMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjNjZjY0YzRmYWI5NGU0MmM1NDEwODkwOTIyZGEzZThjYzEyZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7UvvWuE8bwVYdBAOoSSKHD1EnYf SkKAqvOj4SWY7oClNEkIreaj9kre6fFKA7XI1Y7WCtDt+Ao3SO2lopH241i+rL3g sWbpn4Zs6xgNt1sLDI8cEPcb4K+3X0qInXXbp8Qh+B3EeXLEJ+f5wdnaQBPw0i3E EZfZX5OYbbpx0qXdYaEIybJ2+bNnkkuLmV115dm6pxzD9nfbzj7ak2Q73RFdWeF0 eHsK6okAv03lojoA8dNfBsfCWIeRdBYxymy4p/5RjPVqH0VSEbeNW8x832C/OdNn 2pdQT0ZbYroNdTyWA9gI8tjPCWArktiGAhy/gTgGR2+mDiaoZ50nT/ge3wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFP889kxPq5TkLFQQiQki2j6MwS5nMB8GA1UdIwQY MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt MTk0MmUwODlmMGIwLzEvX3p6MlRFLXJsT1FzVkJDSkNTTGFQb3pCTG1jLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoozANBgkqhkiG 9w0BAQsFAAOCAQEAA4n8N2mp8K5intoXxSVxo4yxnFWEGZkBZ/DQVUuA1H6KriV5 vQkgTaYRnkYCCYtuiLbGuQetzvVPVhzJneCHYQSMrgyGdbJuQhRgNGxtmlszSqML TvPxpiDzQoJr7yRcCQAvtFFXJFqyr/jbtA5rQZOOy/OECbuqo4x6Ii/ZwKzbrfwe 410gnXTeeCjh2HsGFdmtr7WEIrNlQXMdcTDN4mQamXFLQfOrvJSBYY7q04QGAk8N 6zhE5glPzTgBd1HmWI5zFFYRcVFa3c/wTzeM+F0qv+VrnYaXCG2sOJR8J7FtkbtD 1pyeevD9v4dzZElNTfe2cewge9lenN9uRtfMBA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:17 2026 by rpki-client