This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/PMb5QpHERgutl-yC5RQn75DTGLw.asa File: PMb5QpHERgutl-yC5RQn75DTGLw.asa (raw, json) Hash identifier: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ= Subject key identifier: 3C:C6:F9:42:91:C4:46:0B:AD:97:EC:82:E5:14:27:EF:90:D3:18:BC Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B0DA9ACE4C7D55B12DFCEC1283DAEEF8F Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/PMb5QpHERgutl-yC5RQn75DTGLw.asa Signing time: Thu 11 Dec 2025 13:46:22 +0000 ASPA not before: Thu 11 Dec 2025 13:46:22 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 198309 Providers: AS: 25400 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:ac:e4:c7:d5:5b:12:df:ce:c1:28:3d:ae:ef:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Dec 11 13:46:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3cc6f94291c4460bad97ec82e51427ef90d318bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:ea:29:7a:83:70:0b:bb:18:fe:38:6e:f0: eb:72:19:05:f1:40:46:fd:2e:d4:af:a2:41:c7:9c: 08:97:ec:ac:99:ee:9d:53:44:62:84:62:ca:b7:9d: 50:cf:d1:7e:e7:4b:22:b1:bc:f7:c3:77:7b:96:49: ea:4d:56:f5:9e:b0:fc:72:82:6e:b0:f3:7e:ec:81: e6:12:97:c4:41:93:5c:a9:17:63:ce:43:63:7a:b4: a2:7d:e5:13:e0:2e:d5:1f:aa:ea:59:73:b3:a2:f8: 95:2d:16:b4:c3:01:77:0b:8a:b0:e8:a6:b2:55:cb: 22:2c:4d:73:f1:27:40:6a:d4:98:8a:40:72:51:40: 07:d6:94:83:86:ff:ee:30:66:ae:18:d4:fd:16:2a: e6:ab:cb:80:dd:52:5e:13:97:56:7d:f2:2a:b6:81: 01:a5:c5:a9:4d:14:93:8b:44:60:13:c5:90:f9:76: e4:0b:d5:1f:27:53:ce:ed:8b:8b:e7:1c:8d:84:10: 0d:72:8d:0a:f0:e4:12:6b:75:e3:96:32:b1:47:6a: 6e:cf:a2:08:7b:c9:4e:f9:7f:da:0e:ad:19:c3:f8: 40:f4:e9:6c:9c:e0:9a:38:62:a5:1a:72:e3:0d:ca: 50:dd:ea:e0:69:3a:90:06:1d:da:6c:4f:f0:b0:46: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C6:F9:42:91:C4:46:0B:AD:97:EC:82:E5:14:27:EF:90:D3:18:BC X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/PMb5QpHERgutl-yC5RQn75DTGLw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198309 Signature Algorithm: sha256WithRSAEncryption 50:4e:6c:4a:57:15:6b:bc:bb:cc:b9:87:54:78:6b:d8:91:ff: 00:b4:d9:18:7b:3c:08:8f:db:71:ab:1f:d8:ec:bd:25:b4:bf: 01:60:f9:65:ad:85:0c:37:8d:73:3d:29:dd:12:3b:c8:a9:b7: 24:b3:80:8a:f7:29:ed:e3:57:17:56:48:e9:8e:3c:33:f7:a9: c4:ee:00:d2:c7:0c:46:53:7d:76:8f:ce:c8:02:8b:e9:b0:3c: 63:7b:e8:e1:d7:f0:95:d4:25:95:3c:bc:6b:dc:10:12:66:fc: c6:34:c9:3a:4e:24:e3:83:65:13:b1:ae:5b:b5:61:75:1b:c7: c2:8c:ab:2e:b6:89:8f:5d:33:a1:5f:08:44:34:4a:ea:8c:80: ca:15:9f:ea:e2:94:8f:ee:fc:60:15:da:4d:58:fe:c8:43:87: 2a:8e:88:a1:0d:53:92:54:3e:61:7a:0b:9c:b6:79:06:88:94: 69:56:23:54:98:be:d3:97:a4:4b:58:21:0a:f8:57:3b:12:b6: b8:21:3b:2a:90:50:50:16:80:2e:f6:ea:44:a7:94:99:09:30: 0c:5c:c1:dc:49:5e:77:e8:a3:21:74:b4:e0:20:28:78:14:f0: 04:29:f3:58:e0:3b:29:39:d8:23:c1:3e:7d:21:fe:b6:9d:a1: 4a:56:5f:44 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsNqazkx9VbEt/OwSg9ru+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjUxMjExMTM0NjIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2M2Zjk0MjkxYzQ0NjBiYWQ5N2VjODJlNTE0MjdlZjkwZDMxOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7HqKXqDcAu7GP44bvDrchkF8UBG /S7Ur6JBx5wIl+ysme6dU0RihGLKt51Qz9F+50sisbz3w3d7lknqTVb1nrD8coJu sPN+7IHmEpfEQZNcqRdjzkNjerSifeUT4C7VH6rqWXOzoviVLRa0wwF3C4qw6Kay VcsiLE1z8SdAatSYikByUUAH1pSDhv/uMGauGNT9Firmq8uA3VJeE5dWffIqtoEB pcWpTRSTi0RgE8WQ+XbkC9UfJ1PO7YuL5xyNhBANco0K8OQSa3XjljKxR2puz6II e8lO+X/aDq0Zw/hA9OlsnOCaOGKlGnLjDcpQ3ergaTqQBh3abE/wsEbh2wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDzG+UKRxEYLrZfsguUUJ++Q0xi8MB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvUE1iNVFwSEVSZ3V0bC15QzVSUW43NURUR0x3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMGpTANBgkqhkiG 9w0BAQsFAAOCAQEAUE5sSlcVa7y7zLmHVHhr2JH/ALTZGHs8CI/bcasf2Oy9JbS/ AWD5Za2FDDeNcz0p3RI7yKm3JLOAivcp7eNXF1ZI6Y48M/epxO4A0scMRlN9do/O yAKL6bA8Y3vo4dfwldQllTy8a9wQEmb8xjTJOk4k44NlE7GuW7VhdRvHwoyrLraJ j10zoV8IRDRK6oyAyhWf6uKUj+78YBXaTVj+yEOHKo6IoQ1TklQ+YXoLnLZ5BoiU aVYjVJi+05ekS1ghCvhXOxK2uCE7KpBQUBaALvbqRKeUmQkwDFzB3Eled+ijIXS0 4CAoeBTwBCnzWOA7KTnYI8E+fSH+tp2hSlZfRA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:41:58 2025 by rpki-client