This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa File: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (raw, json) Hash identifier: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs= Subject key identifier: DF:93:92:7E:72:07:07:38:1E:54:D5:0E:9D:34:E5:2C:22:7E:E3:54 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B0DA9AA7430FF24BA6D689BFBF55E74EC Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa Signing time: Thu 11 Dec 2025 13:46:21 +0000 ASPA not before: Thu 11 Dec 2025 13:46:21 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 41483 Providers: AS: 12929 AS: 25400 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:aa:74:30:ff:24:ba:6d:68:9b:fb:f5:5e:74:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Dec 11 13:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df93927e720707381e54d50e9d34e52c227ee354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:10:5d:aa:2a:d0:f7:05:c8:08:00:2e:cf: ae:a4:ac:4b:f8:2c:f1:81:47:44:33:3a:1d:ef:71: aa:c7:a1:01:b3:c2:04:8a:d1:fa:8f:86:c1:f8:21: 50:7e:07:bd:0f:9a:bb:94:f0:c0:c5:2d:a9:57:c5: ff:c8:96:99:ba:93:9d:30:e0:02:f4:13:77:64:ef: 14:a9:d4:45:31:b1:2e:9c:c8:7c:e8:16:48:dc:87: 99:d2:dc:3b:57:1c:5f:0e:b1:9b:19:5d:51:92:0b: 44:b8:b8:2e:9c:e4:5a:6c:6e:d0:1e:65:9b:4b:a2: fb:77:c0:69:b9:5f:3d:61:3b:51:45:e3:67:24:4a: e7:60:10:6c:74:79:52:61:6a:e1:ee:5a:cc:84:7a: 40:b8:e8:93:b9:20:75:de:50:71:d8:50:b3:e4:32: 7f:dd:a9:57:68:52:23:db:4f:5a:2b:dc:9d:8f:1e: e1:a5:f3:34:de:5a:c2:b1:4e:df:da:f5:e1:40:39: 2a:47:32:75:73:08:94:d6:8c:68:69:b9:00:25:ca: 41:af:f7:80:6d:e5:b5:0d:ac:c4:c6:31:af:c1:49: 2c:7e:75:a8:0d:cf:a1:4e:90:25:d1:eb:04:4f:01: 0c:fc:9f:76:2c:21:cc:68:38:41:8c:7b:d7:92:6b: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:93:92:7E:72:07:07:38:1E:54:D5:0E:9D:34:E5:2C:22:7E:E3:54 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 41483 Signature Algorithm: sha256WithRSAEncryption 86:8f:61:9e:79:5c:71:ba:a0:2f:63:ea:d3:17:7f:ff:b5:29: 50:83:16:70:77:04:fb:f9:95:6a:7b:50:9b:bc:92:34:63:f0: 86:d1:62:87:d5:0a:ba:1f:28:07:06:7d:3b:0d:03:d9:e8:c1: cf:c8:ef:23:d9:5c:92:2e:d3:96:15:00:64:26:36:42:35:f0: dc:04:de:7a:d0:a3:2e:07:9a:f7:08:fa:1f:e3:30:0a:43:f1: 85:7f:ba:a2:8d:34:aa:4a:94:64:21:10:f8:d4:8e:43:7e:e4: 01:a7:60:ba:1a:a5:5a:7f:80:1c:cc:a2:c6:53:6e:49:c9:8a: 86:47:0b:bc:a9:5a:e5:40:13:94:21:30:99:50:b7:20:65:d2: 43:31:09:11:cd:1e:b5:a9:a6:cc:d9:c6:7b:b6:72:d4:fa:1c: 8a:cc:34:e2:5e:12:8f:18:42:d1:b1:8e:e8:2f:67:8d:64:79: e7:05:27:8a:6e:56:9e:65:59:8c:ba:bf:a8:bd:75:b7:a5:f6: 52:7d:64:af:6b:e4:68:70:7e:ea:18:2a:d6:17:10:72:b3:bc: d1:d1:27:9e:4e:d9:64:ea:1f:49:a9:c0:df:a4:b6:85:ae:93: c6:13:70:90:c0:8f:83:ad:56:9e:2e:9e:a8:51:cc:8e:af:e5: 0a:54:7e:21 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsNqap0MP8kum1om/v1XnTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjUxMjExMTM0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjkzOTI3ZTcyMDcwNzM4MWU1NGQ1MGU5ZDM0ZTUyYzIyN2VlMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9IQXaoq0PcFyAgALs+upKxL+Czx gUdEMzod73Gqx6EBs8IEitH6j4bB+CFQfge9D5q7lPDAxS2pV8X/yJaZupOdMOAC 9BN3ZO8UqdRFMbEunMh86BZI3IeZ0tw7VxxfDrGbGV1RkgtEuLgunORabG7QHmWb S6L7d8BpuV89YTtRReNnJErnYBBsdHlSYWrh7lrMhHpAuOiTuSB13lBx2FCz5DJ/ 3alXaFIj209aK9ydjx7hpfM03lrCsU7f2vXhQDkqRzJ1cwiU1oxoabkAJcpBr/eA beW1DazExjGvwUksfnWoDc+hTpAl0esETwEM/J92LCHMaDhBjHvXkmvQpQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFN+Tkn5yBwc4HlTVDp005SwifuNUMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvMzVPU2ZuSUhCemdlVk5VT25UVGxMQ0otNDFRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCiCzANBgkqhkiG 9w0BAQsFAAOCAQEAho9hnnlccbqgL2Pq0xd//7UpUIMWcHcE+/mVantQm7ySNGPw htFih9UKuh8oBwZ9Ow0D2ejBz8jvI9lcki7TlhUAZCY2QjXw3ATeetCjLgea9wj6 H+MwCkPxhX+6oo00qkqUZCEQ+NSOQ37kAadguhqlWn+AHMyixlNuScmKhkcLvKla 5UATlCEwmVC3IGXSQzEJEc0etammzNnGe7Zy1Pocisw04l4SjxhC0bGO6C9njWR5 5wUnim5WnmVZjLq/qL11t6X2Un1kr2vkaHB+6hgq1hcQcrO80dEnnk7ZZOofSanA 36S2ha6TxhNwkMCPg61Wni6eqFHMjq/lClR+IQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:41:58 2025 by rpki-client