This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/DQ01J-Cq4hUemzI_hsxFb8NofP8.asa File: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (raw, json) Hash identifier: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw= Subject key identifier: 0D:0D:35:27:E0:AA:E2:15:1E:9B:32:3F:86:CC:45:6F:C3:68:7C:FF Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Certificate serial: 019ACB219A6E47F51E1B2A172B715C9C4CDA Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/DQ01J-Cq4hUemzI_hsxFb8NofP8.asa Signing time: Fri 28 Nov 2025 15:42:48 +0000 ASPA not before: Fri 28 Nov 2025 15:42:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 48444 Providers: AS: 3170 AS: 20712 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:21:9a:6e:47:f5:1e:1b:2a:17:2b:71:5c:9c:4c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Validity Not Before: Nov 28 15:42:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0d0d3527e0aae2151e9b323f86cc456fc3687cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:43:c5:37:73:8b:63:e1:f7:45:b9:a7:e8: d0:0f:fe:8c:f4:ec:68:4c:95:5e:29:61:87:06:4c: a5:93:41:05:3f:6b:99:65:a1:7d:68:a9:59:bd:b1: 5d:3f:87:50:62:dc:91:48:cd:d1:ec:65:24:92:29: 7f:59:e7:6c:91:83:c8:4a:aa:14:65:e7:bc:58:e3: 6d:c8:5b:38:62:bd:48:7b:6c:33:16:32:5e:9d:30: 49:92:4b:c3:a5:7e:14:a6:90:bd:fe:6a:52:da:44: 86:18:1a:6e:1b:d9:41:ca:cc:37:8e:11:88:22:84: 20:95:91:0d:60:7c:46:36:8d:76:56:73:a9:d7:32: b4:60:4a:d4:f6:dd:ad:ef:ae:79:84:d8:bd:e6:25: 04:9c:c6:26:6b:77:8f:87:e3:1f:af:b7:85:49:3f: fa:4d:14:2f:51:1d:06:06:5a:92:cb:8a:57:3c:c7: 02:08:0b:76:03:c2:bd:d5:fb:b6:2a:e2:52:de:2c: 20:2f:15:e6:9e:b3:cd:12:0b:98:31:e3:90:7d:0a: b3:90:19:a0:45:ef:ab:28:48:fa:97:fb:61:28:51: cf:4f:ad:be:6b:9f:53:3e:31:fe:16:8d:ad:70:82: 1b:7c:be:84:b4:78:ef:75:ed:cd:78:57:0e:41:5e: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0D:35:27:E0:AA:E2:15:1E:9B:32:3F:86:CC:45:6F:C3:68:7C:FF X509v3 Authority Key Identifier: keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/DQ01J-Cq4hUemzI_hsxFb8NofP8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 48444 Signature Algorithm: sha256WithRSAEncryption 74:b6:6d:50:c5:68:7b:06:c3:0f:91:72:db:37:73:20:97:44: 2b:74:b3:95:41:ea:bf:f0:3a:c9:38:a9:33:31:f1:ea:fa:06: 25:53:a9:9c:18:40:85:87:be:fd:ef:b7:f1:66:42:39:48:05: d2:c9:ce:32:e0:bb:f5:59:91:0d:6a:32:c6:58:78:45:f5:d3: 8b:9f:4e:03:58:73:e3:f0:e6:d2:69:1f:08:80:d2:b5:d7:bc: cf:17:e7:b3:8a:bd:34:ef:60:11:d5:10:52:d6:bb:31:c5:14: bf:3f:bb:0e:84:bb:62:73:a5:df:3f:42:78:6a:07:a0:ad:e4: 18:dc:58:f9:52:55:39:e2:8b:f8:ea:07:33:f2:ce:27:8b:61: 70:1a:d3:af:9f:e3:12:e8:77:fe:91:30:f2:b4:b5:9d:c6:9f: b6:df:58:a8:b5:74:70:f6:51:ee:4d:57:b2:05:49:50:df:74: 85:bb:3b:81:5c:18:e0:a4:54:f2:94:ff:f1:a9:b8:29:9a:75: 28:cb:19:1a:0e:cf:20:01:06:88:74:45:92:e9:d6:0d:2b:40: 69:1d:07:7a:a4:08:df:c6:bd:d8:44:d3:af:64:7f:73:f5:cb: 4f:24:df:75:91:d5:24:75:2c:12:ed:97:69:7d:22:d6:cf:ef: 28:86:84:86 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrLIZpuR/UeGyoXK3FcnEzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk ZTE4YzAwHhcNMjUxMTI4MTU0MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDBkMzUyN2UwYWFlMjE1MWU5YjMyM2Y4NmNjNDU2ZmMzNjg3Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW9DxTdzi2Ph90W5p+jQD/6M9Oxo TJVeKWGHBkylk0EFP2uZZaF9aKlZvbFdP4dQYtyRSM3R7GUkkil/WedskYPISqoU Zee8WONtyFs4Yr1Ie2wzFjJenTBJkkvDpX4UppC9/mpS2kSGGBpuG9lBysw3jhGI IoQglZENYHxGNo12VnOp1zK0YErU9t2t7655hNi95iUEnMYma3ePh+Mfr7eFST/6 TRQvUR0GBlqSy4pXPMcCCAt2A8K91fu2KuJS3iwgLxXmnrPNEguYMeOQfQqzkBmg Re+rKEj6l/thKFHPT62+a59TPjH+Fo2tcIIbfL6EtHjvde3NeFcOQV5dywIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFA0NNSfgquIVHpsyP4bMRW/DaHz/MB8GA1UdIwQY MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt NTljMTA4N2U0ODU2LzEvRFEwMUotQ3E0aFVlbXpJX2hzeEZiOE5vZlA4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2 LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9PDANBgkqhkiG 9w0BAQsFAAOCAQEAdLZtUMVoewbDD5Fy2zdzIJdEK3SzlUHqv/A6yTipMzHx6voG JVOpnBhAhYe+/e+38WZCOUgF0snOMuC79VmRDWoyxlh4RfXTi59OA1hz4/Dm0mkf CIDStde8zxfns4q9NO9gEdUQUta7McUUvz+7DoS7YnOl3z9CeGoHoK3kGNxY+VJV OeKL+OoHM/LOJ4thcBrTr5/jEuh3/pEw8rS1ncaftt9YqLV0cPZR7k1XsgVJUN90 hbs7gVwY4KRU8pT/8am4KZp1KMsZGg7PIAEGiHRFkunWDStAaR0HeqQI38a92ETT r2R/c/XLTyTfdZHVJHUsEu2XaX0i1s/vKIaEhg== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:22 2025 by rpki-client