This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/_nH7hM1KTPyN_CFuoWjWlbdKEgg.asa File: _nH7hM1KTPyN_CFuoWjWlbdKEgg.asa (raw, json) Hash identifier: V+mrWirhSThm/e8z9O+6qvesdQrDHFfreRsF/QU00dk= Subject key identifier: FE:71:FB:84:CD:4A:4C:FC:8D:FC:21:6E:A1:68:D6:95:B7:4A:12:08 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019BC66705507284E0B3E79536BF476D4E6B Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/_nH7hM1KTPyN_CFuoWjWlbdKEgg.asa Signing time: Fri 16 Jan 2026 10:43:18 +0000 ASPA not before: Fri 16 Jan 2026 10:43:18 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 202032 Providers: AS: 174 AS: 3356 AS: 5398 AS: 6730 AS: 6939 AS: 8220 AS: 9002 AS: 13335 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:67:05:50:72:84:e0:b3:e7:95:36:bf:47:6d:4e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Jan 16 10:43:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe71fb84cd4a4cfc8dfc216ea168d695b74a1208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0a:8a:b9:40:c2:ea:60:4b:db:5b:47:9a:6f: cb:9c:d9:75:7b:80:db:6d:2d:e4:aa:a1:f7:13:43: 62:a1:1b:5d:fb:ec:8b:19:4d:fc:8d:b6:32:74:42: 4d:26:9f:2a:de:02:84:74:1f:23:94:96:ba:45:56: 43:b6:97:ad:24:10:4a:d2:7d:1b:90:ff:91:d6:bc: 78:e5:b5:6e:fc:33:11:be:a9:6f:b1:ef:2d:c2:0c: 9d:08:36:8e:06:fe:9c:ff:e1:b3:fa:a5:23:3b:e8: be:35:71:c2:3d:fe:cc:26:12:e0:74:90:ca:56:c1: 4b:94:8d:65:bf:90:f8:5a:4e:0a:2d:4a:05:78:45: f4:51:f2:8f:a9:be:5a:d9:92:e2:c5:30:b4:25:9e: 6f:57:7f:96:7c:63:62:d9:67:47:c3:f2:5f:be:54: 52:b9:9d:6e:a6:21:13:7f:b1:11:8b:1e:da:11:d1: d1:2e:9e:69:03:46:78:3f:fa:29:c3:97:78:c3:f4: 14:c2:d4:6f:f0:c6:f5:a8:06:96:27:5c:5b:e1:51: f2:73:f9:41:f8:a9:dc:97:b4:52:ef:6a:5a:7b:19: a3:b7:0c:ab:fa:37:ca:1a:59:d7:51:e0:b7:e5:e5: 46:09:da:f7:dc:cc:4b:38:90:94:07:af:00:03:5f: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:FB:84:CD:4A:4C:FC:8D:FC:21:6E:A1:68:D6:95:B7:4A:12:08 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/_nH7hM1KTPyN_CFuoWjWlbdKEgg.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202032 Signature Algorithm: sha256WithRSAEncryption 7e:3b:45:a6:f5:d8:b0:d2:fb:04:dd:88:ed:5b:4b:e5:c5:ac: c1:47:37:42:91:6d:dc:e3:9f:c4:53:b1:f7:df:28:7b:2c:d1: 99:19:3c:3e:7a:22:d6:2c:4e:dc:6f:c8:38:62:21:da:4e:5d: 54:92:a7:8c:95:8a:32:f9:74:d3:77:aa:44:38:59:9d:ad:38: a7:41:71:8a:c8:7a:ca:30:c9:16:0c:ac:fb:bc:d6:09:25:e2: 95:6a:66:41:a2:ac:65:b9:a5:c7:c0:36:04:cd:8b:f3:c9:08: 70:7a:ae:0e:36:d3:4e:a9:6a:97:77:17:62:14:bd:39:79:56: d7:20:54:89:80:c0:f2:af:aa:8f:63:63:ba:68:ca:4c:ea:c1: 09:5e:06:6b:ee:d3:d5:1c:69:bf:e3:6f:11:23:54:bc:d4:a8: f2:42:7e:48:60:a2:f3:8c:95:7f:2a:4b:fe:45:d4:dc:fa:99: 44:db:01:1a:70:59:9e:e9:30:bf:4c:75:52:67:22:95:39:a0: 68:17:36:b4:49:9d:24:c4:2d:89:75:b0:bb:41:22:99:4e:93: 2f:43:52:0b:69:a5:97:5d:f6:0e:6c:d5:0a:34:c5:f3:2c:56: 38:97:43:55:8a:f5:60:a7:9e:42:e1:75:c4:54:72:5b:36:5e: c7:c6:7e:19 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvGZwVQcoTgs+eVNr9HbU5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjYwMTE2MTA0MzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTcxZmI4NGNkNGE0Y2ZjOGRmYzIxNmVhMTY4ZDY5NWI3NGExMjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgqKuUDC6mBL21tHmm/LnNl1e4Db bS3kqqH3E0NioRtd++yLGU38jbYydEJNJp8q3gKEdB8jlJa6RVZDtpetJBBK0n0b kP+R1rx45bVu/DMRvqlvse8twgydCDaOBv6c/+Gz+qUjO+i+NXHCPf7MJhLgdJDK VsFLlI1lv5D4Wk4KLUoFeEX0UfKPqb5a2ZLixTC0JZ5vV3+WfGNi2WdHw/JfvlRS uZ1upiETf7ERix7aEdHRLp5pA0Z4P/opw5d4w/QUwtRv8Mb1qAaWJ1xb4VHyc/lB +Kncl7RS72paexmjtwyr+jfKGlnXUeC35eVGCdr33MxLOJCUB68AA1/X3QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFP5x+4TNSkz8jfwhbqFo1pW3ShIIMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvX25IN2hNMUtUUHlOX0NGdW9XaldsYmRLRWdnLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVMDANBgkqhkiG 9w0BAQsFAAOCAQEAfjtFpvXYsNL7BN2I7VtL5cWswUc3QpFt3OOfxFOx998oeyzR mRk8Pnoi1ixO3G/IOGIh2k5dVJKnjJWKMvl003eqRDhZna04p0Fxish6yjDJFgys +7zWCSXilWpmQaKsZbmlx8A2BM2L88kIcHquDjbTTqlql3cXYhS9OXlW1yBUiYDA 8q+qj2NjumjKTOrBCV4Ga+7T1Rxpv+NvESNUvNSo8kJ+SGCi84yVfypL/kXU3PqZ RNsBGnBZnukwv0x1UmcilTmgaBc2tEmdJMQtiXWwu0EimU6TL0NSC2mll132DmzV CjTF8yxWOJdDVYr1YKeeQuF1xFRyWzZex8Z+GQ== -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:37 2026 by rpki-client