This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/xelSWXpfJDe6boWv98tvaG7k9Pk.asa File: xelSWXpfJDe6boWv98tvaG7k9Pk.asa (raw, json) Hash identifier: ONJj17M0jiWjVPo0TwV78223Q3WkimmKmsX8ilFZxDE= Subject key identifier: C5:E9:52:59:7A:5F:24:37:BA:6E:85:AF:F7:CB:6F:68:6E:E4:F4:F9 Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7 Certificate serial: 019BCC473B81D53E727B3281B1BF0280B18F Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/xelSWXpfJDe6boWv98tvaG7k9Pk.asa Signing time: Sat 17 Jan 2026 14:06:18 +0000 ASPA not before: Sat 17 Jan 2026 14:06:18 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 202322 Providers: AS: 34927 AS: 41051 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cc:47:3b:81:d5:3e:72:7b:32:81:b1:bf:02:80:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7 Validity Not Before: Jan 17 14:06:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5e952597a5f2437ba6e85aff7cb6f686ee4f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:c6:30:e8:61:cf:06:9d:95:84:07:1e:38: 7d:3a:03:10:37:15:bc:8b:ae:fe:fd:22:16:2d:74: 48:7c:92:ba:df:33:8c:44:e1:3d:c2:e2:6a:2c:07: 4d:e3:15:d7:8d:0a:88:be:85:d2:8c:e4:57:40:f8: 9e:07:46:5a:7e:25:13:40:f0:26:f4:a5:df:ca:ce: 4d:1a:2f:a0:e1:44:91:88:fe:9f:e7:b6:1f:6c:35: 6c:f6:f8:5a:ec:c5:af:8f:2a:3f:c3:a5:95:8d:aa: 72:99:5c:bd:a6:29:48:9d:4d:da:96:b0:c0:8d:53: a2:4f:d3:eb:ef:7e:09:0f:9b:3e:1c:1d:4a:5c:ce: 17:ce:a2:db:99:bb:eb:56:9c:53:95:49:dd:06:d9: 3d:a5:f1:e8:30:cf:a6:22:63:c2:e3:58:84:ca:12: 8e:6e:11:b0:ec:5d:04:b9:9f:c9:5d:b9:96:4b:9b: f6:15:22:2a:b2:97:d4:82:a6:c1:e9:fd:be:0b:37: 71:4a:bf:6b:01:44:b4:e7:f5:2f:31:9c:43:1f:8e: 67:d8:7d:51:9a:3a:0b:06:2b:01:db:26:3c:68:55: af:6e:50:72:f1:c0:88:c6:d8:42:86:76:25:4b:8e: 2f:66:d3:a2:99:50:9f:4d:05:0c:c7:65:cf:92:18: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:52:59:7A:5F:24:37:BA:6E:85:AF:F7:CB:6F:68:6E:E4:F4:F9 X509v3 Authority Key Identifier: keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/xelSWXpfJDe6boWv98tvaG7k9Pk.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202322 Signature Algorithm: sha256WithRSAEncryption 59:cf:7a:6e:61:37:56:63:e6:ee:c8:5a:97:43:16:07:09:a5: 48:c6:eb:98:bb:2d:f5:be:bb:73:96:34:68:16:d9:8d:7d:16: a1:24:4d:4c:86:fa:f0:03:f3:d1:3e:87:83:74:3f:9d:69:00: 92:29:99:7d:a9:d9:9d:64:72:f9:86:85:d0:af:e2:2f:2d:bd: 82:bf:9d:cf:95:ec:48:5a:cb:f7:5a:08:33:9e:3c:e1:55:23: 50:e4:8d:77:01:7f:37:c2:92:31:4d:b8:c7:b5:9f:2d:64:4e: 25:d2:19:c4:40:ed:05:40:1c:18:10:de:a7:04:60:c7:2b:27: 99:01:ad:15:89:31:45:7b:f7:2e:01:93:d7:51:a1:56:f7:d8: ce:5a:0d:8f:d0:1f:c4:36:f0:0a:d3:d2:c3:83:91:2d:39:cd: ce:64:e0:1e:2e:ec:3b:30:08:7e:40:63:4f:5d:11:19:f1:0c: 37:b6:25:e4:e7:53:66:9e:4e:d2:0e:5f:bc:b7:8e:b6:de:c1: 53:00:63:ab:ac:59:16:e4:eb:91:35:7c:c6:c8:96:b1:c9:e0: 9e:5d:fa:75:f7:00:07:57:88:65:45:6f:16:b3:3c:81:5a:b5: bf:d3:69:33:f4:3f:cb:4e:4f:d4:5e:68:c2:7d:db:77:2a:3c: f4:b3:f5:61 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvMRzuB1T5yezKBsb8CgLGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj MGY5ZDcwHhcNMjYwMTE3MTQwNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWU5NTI1OTdhNWYyNDM3YmE2ZTg1YWZmN2NiNmY2ODZlZTRmNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHfGMOhhzwadlYQHHjh9OgMQNxW8 i67+/SIWLXRIfJK63zOMROE9wuJqLAdN4xXXjQqIvoXSjORXQPieB0ZafiUTQPAm 9KXfys5NGi+g4USRiP6f57YfbDVs9vha7MWvjyo/w6WVjapymVy9pilInU3alrDA jVOiT9Pr734JD5s+HB1KXM4XzqLbmbvrVpxTlUndBtk9pfHoMM+mImPC41iEyhKO bhGw7F0EuZ/JXbmWS5v2FSIqspfUgqbB6f2+CzdxSr9rAUS05/UvMZxDH45n2H1R mjoLBisB2yY8aFWvblBy8cCIxthChnYlS44vZtOimVCfTQUMx2XPkhhujQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMXpUll6XyQ3um6Fr/fLb2hu5PT5MB8GA1UdIwQY MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt NDI4YTUzMmFjZWYwLzEveGVsU1dYcGZKRGU2Ym9Xdjk4dHZhRzdrOVBrLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWUjANBgkqhkiG 9w0BAQsFAAOCAQEAWc96bmE3VmPm7shal0MWBwmlSMbrmLst9b67c5Y0aBbZjX0W oSRNTIb68APz0T6Hg3Q/nWkAkimZfanZnWRy+YaF0K/iLy29gr+dz5XsSFrL91oI M5484VUjUOSNdwF/N8KSMU24x7WfLWROJdIZxEDtBUAcGBDepwRgxysnmQGtFYkx RXv3LgGT11GhVvfYzloNj9AfxDbwCtPSw4ORLTnNzmTgHi7sOzAIfkBjT10RGfEM N7Yl5OdTZp5O0g5fvLeOtt7BUwBjq6xZFuTrkTV8xsiWscngnl36dfcAB1eIZUVv FrM8gVq1v9NpM/Q/y05P1F5own3bdyo89LP1YQ== -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:56 2026 by rpki-client