This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa File: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (raw, json) Hash identifier: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM= Subject key identifier: E2:40:F9:6B:10:8F:0D:28:7F:39:3A:F7:6C:36:3A:85:34:6E:47:E6 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B0DA9AC4061ED20349C5E79A2EB26177A Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa Signing time: Thu 11 Dec 2025 13:46:22 +0000 ASPA not before: Thu 11 Dec 2025 13:46:22 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 51135 Providers: AS: 0 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:ac:40:61:ed:20:34:9c:5e:79:a2:eb:26:17:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Dec 11 13:46:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e240f96b108f0d287f393af76c363a85346e47e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4f:21:be:90:dd:11:a5:d9:54:8f:92:aa:c9: c3:bb:89:1a:5c:45:04:e0:57:4b:7b:2a:76:5a:62: 2a:00:cf:30:cd:3b:38:bc:2e:bf:39:37:69:27:9b: b6:a5:47:19:97:62:87:e3:05:b1:64:a9:e1:25:b0: 04:34:98:c7:44:f5:c7:cd:26:8c:89:37:e1:8e:bd: 59:e7:e0:a8:2a:c3:bc:f0:ff:3f:30:75:5a:d1:27: 28:5d:d1:11:ec:1e:7d:c1:f9:b9:7d:bd:d3:c1:98: e0:0a:3f:f1:d0:ec:87:d7:03:22:09:69:30:eb:36: 09:19:d3:ff:2c:6c:c0:c4:d0:fd:ed:81:aa:92:34: 8f:49:7b:b4:45:6a:e3:d2:a1:b9:5a:df:81:1f:69: ed:b2:91:0d:6f:4e:ab:ab:97:39:6d:48:13:32:20: a6:5c:dc:4e:c8:ea:e9:47:72:e4:fd:60:1c:8d:86: a1:86:ad:05:9a:8f:7c:c0:00:13:15:db:76:07:c8: 23:92:ba:14:c9:ff:38:e7:c6:ff:23:5a:3c:62:0a: 83:8c:4c:3d:1d:46:ab:5f:27:c3:77:7d:92:80:20: 67:3a:5b:93:79:12:3d:b3:b4:21:4a:ca:0a:b4:9e: eb:48:15:e8:07:f9:c2:da:25:f2:46:b5:68:89:7c: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:40:F9:6B:10:8F:0D:28:7F:39:3A:F7:6C:36:3A:85:34:6E:47:E6 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 51135 Signature Algorithm: sha256WithRSAEncryption 3a:52:5e:dc:e2:5b:31:fb:17:56:2f:be:31:81:75:b3:0a:1b: a5:63:24:05:79:c1:74:31:b4:1a:8c:d0:0c:bb:01:11:b4:8b: 33:1e:1f:7c:47:ca:5b:33:06:c5:91:1b:34:ab:f4:63:4c:f5: 11:73:e4:bd:55:37:77:1d:af:d6:65:14:e5:24:fe:75:81:60: 10:bb:9b:53:0c:8f:d8:ff:ed:47:01:0f:40:87:ae:5f:26:55: 8f:c5:0a:e7:19:29:28:ee:d7:8e:86:20:22:73:e4:ef:a0:98: 0c:04:f8:92:a5:69:27:f7:b7:2c:11:06:45:a3:7f:52:b2:6a: 7e:5d:51:ea:7b:9c:98:20:55:fd:ba:5a:0a:97:42:a6:ea:0d: 88:c2:f8:85:fc:3a:0a:50:14:30:77:ee:39:ab:cf:bc:2a:aa: 60:fc:25:41:7d:db:1b:7d:da:ce:75:70:ba:9d:45:05:41:9e: e2:f7:b9:cd:9b:23:10:1f:59:71:b8:8b:16:d1:60:70:49:f2: 98:a1:d7:45:e7:7d:13:25:47:90:bf:e5:2f:a5:d5:45:51:3b: ac:2f:ab:0b:b4:e8:77:64:c8:75:e2:1d:ac:f9:52:d4:4d:52: e2:56:3d:fa:07:7a:14:40:6e:95:17:8b:96:07:72:be:9b:46: 56:0f:d0:7a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsNqaxAYe0gNJxeeaLrJhd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjUxMjExMTM0NjIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQwZjk2YjEwOGYwZDI4N2YzOTNhZjc2YzM2M2E4NTM0NmU0N2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU8hvpDdEaXZVI+SqsnDu4kaXEUE 4FdLeyp2WmIqAM8wzTs4vC6/OTdpJ5u2pUcZl2KH4wWxZKnhJbAENJjHRPXHzSaM iTfhjr1Z5+CoKsO88P8/MHVa0ScoXdER7B59wfm5fb3TwZjgCj/x0OyH1wMiCWkw 6zYJGdP/LGzAxND97YGqkjSPSXu0RWrj0qG5Wt+BH2ntspENb06rq5c5bUgTMiCm XNxOyOrpR3Lk/WAcjYahhq0Fmo98wAATFdt2B8gjkroUyf8458b/I1o8YgqDjEw9 HUarXyfDd32SgCBnOluTeRI9s7QhSsoKtJ7rSBXoB/nC2iXyRrVoiXw7/QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFOJA+WsQjw0ofzk692w2OoU0bkfmMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvNGtENWF4Q1BEU2hfT1RyM2JEWTZoVFJ1Ui1ZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDHvzANBgkqhkiG 9w0BAQsFAAOCAQEAOlJe3OJbMfsXVi++MYF1swobpWMkBXnBdDG0GozQDLsBEbSL Mx4ffEfKWzMGxZEbNKv0Y0z1EXPkvVU3dx2v1mUU5ST+dYFgELubUwyP2P/tRwEP QIeuXyZVj8UK5xkpKO7XjoYgInPk76CYDAT4kqVpJ/e3LBEGRaN/UrJqfl1R6nuc mCBV/bpaCpdCpuoNiML4hfw6ClAUMHfuOavPvCqqYPwlQX3bG33aznVwup1FBUGe 4ve5zZsjEB9ZcbiLFtFgcEnymKHXRed9EyVHkL/lL6XVRVE7rC+rC7Tod2TIdeId rPlS1E1S4lY9+gd6FEBulReLlgdyvptGVg/Qeg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:41:58 2025 by rpki-client