This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/nqCowGB0ICzLbyaA3M41ICLCHf8.asa File: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (raw, json) Hash identifier: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA= Subject key identifier: 9E:A0:A8:C0:60:74:20:2C:CB:6F:26:80:DC:CE:35:20:22:C2:1D:FF Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B0DA9A9988984CA47FA4A5331C6090C27 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/nqCowGB0ICzLbyaA3M41ICLCHf8.asa Signing time: Thu 11 Dec 2025 13:46:21 +0000 ASPA not before: Thu 11 Dec 2025 13:46:21 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 25400 Providers: AS: 544 AS: 1299 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:a9:a9:98:89:84:ca:47:fa:4a:53:31:c6:09:0c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Dec 11 13:46:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9ea0a8c06074202ccb6f2680dcce352022c21dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:43:e4:0a:76:f0:04:d0:01:3f:79:7a:e4: e5:26:ed:17:e5:67:11:ee:ee:c6:76:d0:0f:39:f7: 38:e6:aa:c5:40:a4:bd:50:da:da:ca:27:de:a3:03: 3f:96:df:94:b8:26:a9:02:b7:8c:92:9a:b6:a7:ab: ec:8f:7e:d2:d1:f3:75:3c:4e:f1:28:66:0d:c2:be: 52:b5:ab:91:2f:47:5c:d2:81:8d:66:c8:ca:6e:be: 2a:ea:84:32:d6:43:80:5a:79:d9:b6:dd:8c:14:cc: 1e:61:a8:dc:57:53:4c:78:cc:f2:cf:f3:44:80:31: 1d:d9:3e:92:65:30:b7:e9:8c:65:6c:2d:5a:aa:44: c7:02:f5:08:fd:8f:75:9d:3e:a4:d7:3a:3b:0e:c0: d1:74:a1:74:ac:7f:19:8a:c6:e8:11:11:3c:5b:40: 28:b7:11:4a:bb:7f:17:65:e9:98:a1:25:7c:e4:f6: b4:12:55:61:01:7a:68:e1:d6:78:2c:cb:f3:c6:6b: b9:f9:33:be:bf:1d:50:72:90:1e:f6:dc:25:8f:ec: f1:83:22:ab:d4:f8:a0:5a:a8:33:4d:16:7c:4e:5f: aa:ed:cb:d0:c7:92:ae:ae:39:d5:ed:fe:15:e4:67: cc:0a:41:ea:80:49:80:a5:5e:fc:39:09:50:8a:bd: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A0:A8:C0:60:74:20:2C:CB:6F:26:80:DC:CE:35:20:22:C2:1D:FF X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/nqCowGB0ICzLbyaA3M41ICLCHf8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 25400 Signature Algorithm: sha256WithRSAEncryption 2c:64:a3:4b:d6:a3:0e:2b:4c:79:dd:fb:a2:bb:aa:97:a8:d6: 74:65:12:1f:7d:83:40:5a:ff:a9:b7:98:a6:67:c7:bf:62:70: 4e:8d:b1:84:10:7a:4d:be:5d:52:1e:c0:c1:39:d8:ba:69:e5: 4c:64:58:6b:04:04:df:e8:d5:d1:fe:c6:14:92:48:11:8d:05: dc:6e:5b:77:c6:88:4d:65:a7:fb:e0:37:a4:9d:67:65:5e:c3: e8:fd:34:97:05:c4:2e:63:2e:33:86:5a:af:c9:32:03:07:e7: e7:43:0c:94:4d:81:d9:ec:3e:35:24:95:9a:2d:a0:12:e7:4a: 73:2e:89:8a:01:c3:d5:2a:2f:29:d0:34:fd:90:01:0e:c9:0a: 36:98:41:a6:91:c6:a9:03:3d:fe:19:fc:21:fc:36:24:1b:6f: 3f:e9:90:e9:72:18:61:89:5d:82:04:9f:cb:2f:27:0e:18:7f: 60:53:54:82:f2:99:cd:74:03:f3:dc:71:85:8f:f7:d2:57:87: 8b:a9:db:a1:6e:96:e8:8e:d9:22:78:61:71:a5:b5:dc:0b:04: b5:1b:a8:eb:18:e9:e7:e2:30:ea:da:f3:63:28:13:38:f6:7d: 81:9f:bd:90:e2:33:1d:0e:7b:57:52:25:76:d7:87:7c:a2:9b: c4:ee:a4:55 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZsNqamYiYTKR/pKUzHGCQwnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjUxMjExMTM0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWEwYThjMDYwNzQyMDJjY2I2ZjI2ODBkY2NlMzUyMDIyYzIxZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbhD5Ap28ATQAT95euTlJu0X5WcR 7u7GdtAPOfc45qrFQKS9UNrayifeowM/lt+UuCapAreMkpq2p6vsj37S0fN1PE7x KGYNwr5StauRL0dc0oGNZsjKbr4q6oQy1kOAWnnZtt2MFMweYajcV1NMeMzyz/NE gDEd2T6SZTC36YxlbC1aqkTHAvUI/Y91nT6k1zo7DsDRdKF0rH8ZisboERE8W0Ao txFKu38XZemYoSV85Pa0ElVhAXpo4dZ4LMvzxmu5+TO+vx1QcpAe9twlj+zxgyKr 1PigWqgzTRZ8Tl+q7cvQx5KurjnV7f4V5GfMCkHqgEmApV78OQlQir19jQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFJ6gqMBgdCAsy28mgNzONSAiwh3/MB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvbnFDb3dHQjBJQ3pMYnlhQTNNNDFJQ0xDSGY4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmM4MA0GCSqGSIb3 DQEBCwUAA4IBAQAsZKNL1qMOK0x53fuiu6qXqNZ0ZRIffYNAWv+pt5imZ8e/YnBO jbGEEHpNvl1SHsDBOdi6aeVMZFhrBATf6NXR/sYUkkgRjQXcblt3xohNZaf74Dek nWdlXsPo/TSXBcQuYy4zhlqvyTIDB+fnQwyUTYHZ7D41JJWaLaAS50pzLomKAcPV Ki8p0DT9kAEOyQo2mEGmkcapAz3+Gfwh/DYkG28/6ZDpchhhiV2CBJ/LLycOGH9g U1SC8pnNdAPz3HGFj/fSV4eLqduhbpbojtkieGFxpbXcCwS1G6jrGOnn4jDq2vNj KBM49n2Bn72Q4jMdDntXUiV214d8opvE7qRV -----END CERTIFICATE-----Generated at Fri Dec 12 01:31:48 2025 by rpki-client