This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa File: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (raw, json) Hash identifier: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU= Subject key identifier: F9:51:75:1D:E2:DC:D1:35:48:B3:46:18:5B:A6:30:A1:76:5D:A3:C7 Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Certificate serial: 019AD0D4091145EAE586BD068984E80365B4 Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa Signing time: Sat 29 Nov 2025 18:15:48 +0000 ASPA not before: Sat 29 Nov 2025 18:15:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 205079 Providers: AS: 8283 AS: 34872 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:d4:09:11:45:ea:e5:86:bd:06:89:84:e8:03:65:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767 Validity Not Before: Nov 29 18:15:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f951751de2dcd13548b346185ba630a1765da3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:c7:e2:99:3f:30:e0:1a:de:e9:d9:13:75: 2d:03:c8:f1:5c:a8:76:9e:94:da:a5:72:0c:67:b6: d9:a3:78:d5:c2:2d:6d:64:43:43:36:b1:c2:04:00: e3:a7:9b:95:bd:a0:7f:89:a7:31:0e:2c:68:31:ab: bb:bd:57:c1:d2:5a:c6:25:f8:64:75:26:3e:95:30: 82:21:e3:39:90:6b:c7:19:31:aa:3f:35:04:15:26: b5:a2:87:e2:36:da:c5:41:ad:7a:af:4e:4d:1a:01: a5:b2:c6:39:8b:1f:8b:da:b8:d0:01:b0:1a:ad:71: d8:29:67:f7:2d:a4:e7:87:13:be:62:0e:0c:16:78: ed:2a:2d:39:7d:84:98:e8:09:d8:67:ea:9f:0e:3e: 88:33:03:cf:f3:3e:3f:08:46:ff:a2:7d:8e:01:0d: 45:f7:61:ba:1b:66:5c:30:24:58:95:f5:b3:c1:fb: 39:cd:29:cc:f4:c6:0c:e1:94:ba:60:e2:5e:f8:53: 2a:65:9f:e7:25:1f:47:f9:a3:ab:d9:64:77:91:51: 5f:01:8f:ef:27:79:f3:c3:ed:ab:ae:16:7c:b9:32: 42:ba:c4:45:0c:2d:07:88:d6:72:1c:eb:6c:2e:c9: 5c:63:3c:b9:e0:96:d4:ea:8c:75:c8:33:5b:3b:1d: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:75:1D:E2:DC:D1:35:48:B3:46:18:5B:A6:30:A1:76:5D:A3:C7 X509v3 Authority Key Identifier: keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205079 Signature Algorithm: sha256WithRSAEncryption 23:5e:fc:e2:7b:70:4e:a0:2e:01:25:a6:18:ac:ec:c3:a7:c8: 80:80:19:99:e8:ce:b6:1c:9b:04:11:dd:43:7e:cc:55:39:e9: cb:e6:18:8f:8f:ec:45:3b:a4:56:59:4f:fa:16:25:04:6e:31: 20:62:75:4f:53:b0:c1:19:9e:c5:9e:60:98:8b:38:9e:36:ce: 30:3f:ef:1f:11:05:61:c4:48:ff:38:8f:2f:65:08:65:c6:52: 4e:a7:8c:c2:99:8a:51:03:2e:4e:41:03:09:19:05:c8:1c:2b: f8:a5:55:ff:50:89:cb:a2:b8:1a:94:e1:cf:3c:ae:6b:24:25: 4b:56:fb:2c:68:30:92:4a:0e:b2:2d:e2:bb:83:5c:85:b5:08: 40:cd:25:1a:b8:4a:0d:a9:e3:65:48:f4:8c:5f:3e:55:8b:6b: 0d:8f:56:c6:14:ea:2c:c2:fd:57:f9:88:1d:71:4b:98:d3:08: d8:0f:ab:17:08:ae:84:f5:8e:ff:1b:5b:fb:fc:d5:ef:42:77: c9:01:f9:e1:96:17:91:19:97:97:56:41:cd:44:ac:02:ab:d3: cd:1e:6e:3e:66:a0:a6:76:0c:cf:7a:a4:da:9b:fe:d9:60:5e: fe:ee:f0:ee:3b:7f:16:05:64:48:3a:99:48:f6:cf:e6:e6:bf: e2:4d:0e:6f -----BEGIN CERTIFICATE----- MIIE+TCCA+GgAwIBAgISAZrQ1AkRRerlhr0GiYToA2W0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm OWY3NjcwHhcNMjUxMTI5MTgxNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTUxNzUxZGUyZGNkMTM1NDhiMzQ2MTg1YmE2MzBhMTc2NWRhM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxfH4pk/MOAa3unZE3UtA8jxXKh2 npTapXIMZ7bZo3jVwi1tZENDNrHCBADjp5uVvaB/iacxDixoMau7vVfB0lrGJfhk dSY+lTCCIeM5kGvHGTGqPzUEFSa1oofiNtrFQa16r05NGgGlssY5ix+L2rjQAbAa rXHYKWf3LaTnhxO+Yg4MFnjtKi05fYSY6AnYZ+qfDj6IMwPP8z4/CEb/on2OAQ1F 92G6G2ZcMCRYlfWzwfs5zSnM9MYM4ZS6YOJe+FMqZZ/nJR9H+aOr2WR3kVFfAY/v J3nzw+2rrhZ8uTJCusRFDC0HiNZyHOtsLslcYzy54JbU6ox1yDNbOx2gGwIDAQAB o4ICBTCCAgEwHQYDVR0OBBYEFPlRdR3i3NE1SLNGGFumMKF2XaPHMB8GA1UdIwQY MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt ZDIxMDgzOGE0NmU2LzEvMS1WRjFIZUxjMFRWSXMwWVlXNll3b1haZG84Yy5hc2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmEvOTYyODJmLTVhMjktNGZkZC1hZGY5LWQyMTA4MzhhNDZl Ni8xL0RTWFAxU2FxMXlwTWowY3otc29QVGJmNTkyYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDIRcwDQYJKoZI hvcNAQELBQADggEBACNe/OJ7cE6gLgElphis7MOnyICAGZnozrYcmwQR3UN+zFU5 6cvmGI+P7EU7pFZZT/oWJQRuMSBidU9TsMEZnsWeYJiLOJ42zjA/7x8RBWHESP84 jy9lCGXGUk6njMKZilEDLk5BAwkZBcgcK/ilVf9QicuiuBqU4c88rmskJUtW+yxo MJJKDrIt4ruDXIW1CEDNJRq4Sg2p42VI9IxfPlWLaw2PVsYU6izC/Vf5iB1xS5jT CNgPqxcIroT1jv8bW/v81e9Cd8kB+eGWF5EZl5dWQc1ErAKr080ebj5moKZ2DM96 pNqb/tlgXv7u8O47fxYFZEg6mUj2z+bmv+JNDm8= -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:41 2025 by rpki-client