This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/SJqCby9bRcz81zQZO1TeT-stBH8.asa File: SJqCby9bRcz81zQZO1TeT-stBH8.asa (raw, json) Hash identifier: zdlq1QtWJPDwU8pcUXTI4wu8J85849xwOKfqaDypeVk= Subject key identifier: 48:9A:82:6F:2F:5B:45:CC:FC:D7:34:19:3B:54:DE:4F:EB:2D:04:7F Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019B473B086887BCE588E9C9DE58E4B53050 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/SJqCby9bRcz81zQZO1TeT-stBH8.asa Signing time: Mon 22 Dec 2025 18:03:29 +0000 ASPA not before: Mon 22 Dec 2025 18:03:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 5405 Providers: AS: 1299 AS: 2914 AS: 3257 AS: 3320 AS: 3491 AS: 5511 AS: 6762 AS: 12956 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:3b:08:68:87:bc:e5:88:e9:c9:de:58:e4:b5:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Dec 22 18:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=489a826f2f5b45ccfcd734193b54de4feb2d047f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:39:52:db:81:51:f3:fe:09:21:44:df:4a: 04:e7:04:c6:16:bc:27:05:47:01:3c:95:1f:51:18: 02:1c:d9:0f:70:e1:60:c3:f3:a7:fa:24:f7:7f:fe: 24:22:99:a3:ac:4d:db:ae:16:28:22:9f:be:69:d5: 36:f1:81:43:21:a7:c5:fd:19:8a:33:39:cc:49:1b: 71:7e:dd:98:20:ce:45:21:d6:6d:dd:f0:94:a6:53: b6:a9:6c:8b:19:db:e1:02:0e:4c:a3:2b:22:5d:f8: 92:48:94:d9:a5:74:88:21:c5:18:3d:00:83:ad:e4: ff:60:37:0a:88:30:5e:ae:56:1d:d7:0d:dd:ec:dd: 70:81:4a:8e:e0:cc:89:27:2c:f6:92:d3:6c:dd:60: 46:b8:b3:35:b7:4c:60:b5:b2:f1:f8:07:69:78:94: 2d:ee:ee:d8:2b:7f:ea:4f:02:bb:3c:b1:f9:30:78: c8:4c:50:61:7c:48:78:b5:63:4f:8f:cc:1e:38:c9: 01:ae:a0:60:57:09:f4:fb:90:a5:ed:6b:66:22:3f: f2:1f:b8:ce:6d:9d:27:1a:8c:6e:bc:75:b3:8e:36: 75:f0:ed:50:ae:b8:61:14:2c:e8:25:56:74:f7:bf: d6:f3:9d:94:09:a0:52:59:f0:ba:83:21:9a:01:6d: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9A:82:6F:2F:5B:45:CC:FC:D7:34:19:3B:54:DE:4F:EB:2D:04:7F X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/SJqCby9bRcz81zQZO1TeT-stBH8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 5405 Signature Algorithm: sha256WithRSAEncryption 19:a8:4c:5e:43:d5:ae:b4:9e:b1:2d:95:c6:6f:27:24:e7:04: 53:4c:9a:ef:a7:48:bb:ab:ac:cf:ce:a1:6a:85:08:5b:78:be: af:5a:67:92:86:49:b9:f9:f7:f1:ae:b6:c2:05:79:c1:d3:86: 15:e7:69:89:31:c1:9a:99:a2:ac:a9:eb:98:c5:9f:1d:c5:1d: 17:ba:23:12:dc:f6:81:ee:c7:23:e2:20:2f:42:03:e8:19:a3: 72:d6:b8:c5:21:e0:c9:c6:10:ce:90:13:e0:a0:65:69:b4:b5: 4f:c7:ee:27:06:4f:f3:b1:a4:18:0f:8e:6d:61:7b:07:52:ae: 56:ce:d0:0b:55:8c:b4:1c:61:41:c9:ff:70:db:7f:b1:17:a6: b2:57:cc:8f:40:b0:ec:76:3e:c1:c0:40:31:db:ea:50:72:f4: 22:6c:24:ed:9f:5a:46:43:31:c1:ed:5f:81:f4:db:93:95:db: 85:f7:a9:5c:f5:5f:ba:6d:20:11:9c:19:19:f4:5a:10:01:20: 20:3f:bc:ca:3f:31:cb:25:b7:05:4f:6d:0a:52:1b:23:37:43: 03:c9:38:7f:1a:d7:f4:0c:37:a0:4a:a4:65:f6:44:d8:34:1b: f4:a0:f8:04:67:21:3e:ba:09:b3:d3:66:40:3f:7f:b8:bb:93: 38:71:eb:3e -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZtHOwhoh7zliOnJ3ljktTBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMjIyMTgwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODlhODI2ZjJmNWI0NWNjZmNkNzM0MTkzYjU0ZGU0ZmViMmQwNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAs5UtuBUfP+CSFE30oE5wTGFrwn BUcBPJUfURgCHNkPcOFgw/On+iT3f/4kIpmjrE3brhYoIp++adU28YFDIafF/RmK MznMSRtxft2YIM5FIdZt3fCUplO2qWyLGdvhAg5MoysiXfiSSJTZpXSIIcUYPQCD reT/YDcKiDBerlYd1w3d7N1wgUqO4MyJJyz2ktNs3WBGuLM1t0xgtbLx+AdpeJQt 7u7YK3/qTwK7PLH5MHjITFBhfEh4tWNPj8weOMkBrqBgVwn0+5Cl7WtmIj/yH7jO bZ0nGoxuvHWzjjZ18O1QrrhhFCzoJVZ097/W852UCaBSWfC6gyGaAW2spQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFEiagm8vW0XM/Nc0GTtU3k/rLQR/MB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvU0pxQ2J5OWJSY3o4MXpRWk8xVGVULXN0Qkg4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAhUdMA0GCSqGSIb3 DQEBCwUAA4IBAQAZqExeQ9WutJ6xLZXGbyck5wRTTJrvp0i7q6zPzqFqhQhbeL6v WmeShkm5+ffxrrbCBXnB04YV52mJMcGamaKsqeuYxZ8dxR0XuiMS3PaB7scj4iAv QgPoGaNy1rjFIeDJxhDOkBPgoGVptLVPx+4nBk/zsaQYD45tYXsHUq5WztALVYy0 HGFByf9w23+xF6ayV8yPQLDsdj7BwEAx2+pQcvQibCTtn1pGQzHB7V+B9NuTlduF 96lc9V+6bSARnBkZ9FoQASAgP7zKPzHLJbcFT20KUhsjN0MDyTh/Gtf0DDegSqRl 9kTYNBv0oPgEZyE+ugmz02ZAP3+4u5M4ces+ -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:44 2026 by rpki-client