This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/rxKwNw-HYvaEaudZEMnlkl1R0aQ.asa File: rxKwNw-HYvaEaudZEMnlkl1R0aQ.asa (raw, json) Hash identifier: AkBAqHnhOWFOvZuD2iabledqYqVHvDi/JlYJZ+Tq7s0= Subject key identifier: AF:12:B0:37:0F:87:62:F6:84:6A:E7:59:10:C9:E5:92:5D:51:D1:A4 Certificate issuer: /CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487 Certificate serial: 019C426D6AE8155B99CEDB4480665CC550BD Authority key identifier: B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/rxKwNw-HYvaEaudZEMnlkl1R0aQ.asa Signing time: Mon 09 Feb 2026 12:43:12 +0000 ASPA not before: Mon 09 Feb 2026 12:43:12 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 201445 Providers: AS: 8772 AS: 11967 AS: 29632 AS: 41051 AS: 199829 AS: 209533 AS: 211358 AS: 212895 AS: 393577 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.mft rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:6d:6a:e8:15:5b:99:ce:db:44:80:66:5c:c5:50:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7f03334eaecb9e0a513eb7e221f7ccd49281487 Validity Not Before: Feb 9 12:43:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af12b0370f8762f6846ae75910c9e5925d51d1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:19:27:d1:2d:66:db:49:fe:42:7a:09:47: 29:40:3d:53:b3:e2:aa:6d:1a:79:fd:57:3b:7b:42: 68:cb:f5:9a:e1:fa:b5:c5:53:8e:ca:93:69:20:b3: ae:84:00:65:76:02:7f:44:f8:d7:b9:0c:00:a0:07: 13:8d:fc:3d:e0:2a:5a:24:02:1b:6d:bc:7f:3c:f5: c1:30:98:c7:05:f3:69:ad:bb:78:e9:a1:e8:a6:94: 9e:2e:18:6e:0e:9d:ae:40:d6:42:a4:f7:c5:d2:d9: 80:2d:69:aa:c5:a6:b7:b1:bb:6f:64:ca:10:8b:22: dd:88:20:6c:59:09:f6:33:a0:4e:db:45:51:ba:13: 1a:dc:cb:01:eb:b6:7d:23:16:62:42:43:1e:17:46: 54:ba:57:e4:7e:47:b6:6e:3e:02:90:cd:89:37:e8: c4:42:88:9e:69:9d:bd:0a:43:48:7f:22:1f:41:7a: 3c:41:50:58:aa:1f:e6:58:df:96:5f:ff:c3:94:50: dd:e9:a2:3b:d7:ce:48:2d:44:f8:62:4b:4c:16:8a: 49:eb:66:64:e3:9f:a5:bf:e4:64:5c:1c:bc:2d:25: 63:43:4c:65:64:13:35:59:07:75:64:62:03:05:7e: 67:c0:97:e6:a6:df:ce:4c:4a:86:12:4a:e7:c2:80: 69:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:12:B0:37:0F:87:62:F6:84:6A:E7:59:10:C9:E5:92:5D:51:D1:A4 X509v3 Authority Key Identifier: keyid:B7:F0:33:34:EA:EC:B9:E0:A5:13:EB:7E:22:1F:7C:CD:49:28:14:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_AzNOrsueClE-t-Ih98zUkoFIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/rxKwNw-HYvaEaudZEMnlkl1R0aQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/585f4b-26c5-4965-8269-36b469e419e1/1/t_AzNOrsueClE-t-Ih98zUkoFIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201445 Signature Algorithm: sha256WithRSAEncryption b4:8e:b8:2b:ca:ca:78:5d:4d:96:26:b7:d9:63:00:0f:a8:14: 28:2c:9d:a7:18:1d:6b:c4:8f:a9:e2:45:1a:34:1f:a9:b3:f7: 8d:8e:a4:ff:08:97:5e:d5:58:a0:7d:13:b8:f9:db:32:ee:54: 6f:fb:90:5c:1e:04:73:bc:63:14:6b:ec:b7:dd:52:96:6c:93: 6a:34:39:83:dc:ae:69:19:c0:9c:05:cf:ca:41:ff:b5:7c:2a: cd:78:88:54:e6:33:bd:cf:6f:88:e2:67:b3:7f:9b:94:f9:66: a9:e3:38:26:35:45:29:67:f4:4f:ba:1a:c2:66:e4:3a:64:f5: 42:b3:52:e3:03:52:76:27:d2:4b:6f:dc:60:34:c4:4b:6c:ee: 1e:a2:e9:72:14:da:d4:08:ac:80:46:ad:1e:a8:21:2a:23:29: dd:0b:8b:7f:b7:f4:79:32:75:8e:7f:8c:5d:68:9b:dc:6d:43: 2a:73:cd:fe:8f:bf:0b:e6:6f:5b:7b:0a:d6:d2:67:e9:08:50: b7:60:99:fa:68:84:e4:5a:dc:ce:5e:bb:21:89:b2:9c:17:bc: f7:f8:08:be:dd:66:3c:6a:0b:df:9d:18:9c:42:0d:17:41:85: d1:01:8c:d2:f3:96:c9:27:2b:f8:45:2a:c7:7b:82:c9:57:a0: 27:15:6f:7c -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZxCbWroFVuZzttEgGZcxVC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZjAzMzM0ZWFlY2I5ZTBhNTEzZWI3ZTIyMWY3Y2NkNDky ODE0ODcwHhcNMjYwMjA5MTI0MzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjEyYjAzNzBmODc2MmY2ODQ2YWU3NTkxMGM5ZTU5MjVkNTFkMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrMZJ9EtZttJ/kJ6CUcpQD1Ts+Kq bRp5/Vc7e0Joy/Wa4fq1xVOOypNpILOuhABldgJ/RPjXuQwAoAcTjfw94CpaJAIb bbx/PPXBMJjHBfNprbt46aHoppSeLhhuDp2uQNZCpPfF0tmALWmqxaa3sbtvZMoQ iyLdiCBsWQn2M6BO20VRuhMa3MsB67Z9IxZiQkMeF0ZUulfkfke2bj4CkM2JN+jE QoieaZ29CkNIfyIfQXo8QVBYqh/mWN+WX//DlFDd6aI7185ILUT4YktMFopJ62Zk 45+lv+RkXBy8LSVjQ0xlZBM1WQd1ZGIDBX5nwJfmpt/OTEqGEkrnwoBpkQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFK8SsDcPh2L2hGrnWRDJ5ZJdUdGkMB8GA1UdIwQY MBaAFLfwMzTq7LngpRPrfiIffM1JKBSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdF9Bek5PcnN1ZUNsRS10LUloOTh6VWtvRkljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ODVmNGItMjZjNS00OTY1LTgyNjkt MzZiNDY5ZTQxOWUxLzEvcnhLd053LUhZdmFFYXVkWkVNbmxrbDFSMGFRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ODVmNGItMjZjNS00OTY1LTgyNjktMzZiNDY5ZTQxOWUx LzEvdF9Bek5PcnN1ZUNsRS10LUloOTh6VWtvRkljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMS5TANBgkqhkiG 9w0BAQsFAAOCAQEAtI64K8rKeF1Nlia32WMAD6gUKCydpxgda8SPqeJFGjQfqbP3 jY6k/wiXXtVYoH0TuPnbMu5Ub/uQXB4Ec7xjFGvst91SlmyTajQ5g9yuaRnAnAXP ykH/tXwqzXiIVOYzvc9viOJns3+blPlmqeM4JjVFKWf0T7oawmbkOmT1QrNS4wNS difSS2/cYDTES2zuHqLpchTa1AisgEatHqghKiMp3QuLf7f0eTJ1jn+MXWib3G1D KnPN/o+/C+ZvW3sK1tJn6QhQt2CZ+miE5Frczl67IYmynBe89/gIvt1mPGoL350Y nEINF0GF0QGM0vOWyScr+EUqx3uCyVegJxVvfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:45:27 2026 by rpki-client