This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/x85xaclh_I5fag7LOhEkjo3jhMw.asa File: x85xaclh_I5fag7LOhEkjo3jhMw.asa (raw, json) Hash identifier: SZArydHLaUzTTdXtg5nAF/HF99OnEgr16Dnn25uMEJw= Subject key identifier: C7:CE:71:69:C9:61:FC:8E:5F:6A:0E:CB:3A:11:24:8E:8D:E3:84:CC Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Certificate serial: 019B027AEEF726A7FB25B073414CDDD80B0E Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/x85xaclh_I5fag7LOhEkjo3jhMw.asa Signing time: Tue 09 Dec 2025 09:39:29 +0000 ASPA not before: Tue 09 Dec 2025 09:39:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 559 Providers: AS: 174 AS: 513 AS: 553 AS: 1299 AS: 3257 AS: 3356 AS: 20965 AS: 21320 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.mft rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:7a:ee:f7:26:a7:fb:25:b0:73:41:4c:dd:d8:0b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93 Validity Not Before: Dec 9 09:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7ce7169c961fc8e5f6a0ecb3a11248e8de384cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2d:5c:4b:72:8b:6d:c1:56:9e:38:1e:7c:f0: 28:02:ca:8d:8b:7e:58:d4:65:b8:d2:47:cf:9a:e6: 05:eb:4f:d3:83:03:7d:a4:81:f7:88:78:ae:5a:7b: ac:36:95:8e:30:d6:70:19:ee:14:86:55:17:d0:db: 5b:63:c7:b1:2e:68:49:f5:32:13:54:d7:a4:d4:d5: bd:bf:f6:8c:dd:02:2a:86:76:c9:9e:d1:71:7d:26: 85:d1:64:23:6e:33:44:cb:75:58:35:1f:16:c1:4e: 73:58:b8:75:51:fe:16:34:ee:a8:c7:18:68:d5:27: c6:d9:ab:25:a0:60:e5:00:76:0a:88:d3:67:25:b9: a5:22:f3:65:28:4c:d1:0d:da:11:18:fb:e2:37:6f: 86:9e:0b:70:36:2c:ec:8e:11:2c:32:bd:32:98:fb: 14:3e:d6:55:2b:57:5c:2a:6e:ec:0d:e0:24:d3:62: 97:c1:d9:60:78:55:07:dc:3e:6b:7b:78:1f:71:1a: 18:84:a7:6b:96:c5:42:aa:ba:d5:8d:e0:50:b7:7b: 13:54:12:a4:29:0d:c0:e0:ac:de:94:37:e9:d3:da: 26:38:02:1d:33:c2:17:78:3d:05:d7:fd:02:5d:68: 73:4d:d2:90:47:b3:f0:34:8f:45:d5:c8:4e:a9:62: 2d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:71:69:C9:61:FC:8E:5F:6A:0E:CB:3A:11:24:8E:8D:E3:84:CC X509v3 Authority Key Identifier: keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/x85xaclh_I5fag7LOhEkjo3jhMw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 559 Signature Algorithm: sha256WithRSAEncryption 8a:c5:b3:a6:98:c5:03:ac:9e:5e:a7:b5:98:a5:7b:02:25:83: 9d:32:ce:ed:8f:16:48:07:6d:f5:82:1d:33:a1:5b:29:fc:01: 1f:a8:5a:e2:ef:05:d1:7c:0d:18:31:60:74:4f:4d:8c:9f:3f: 05:70:57:c6:87:8e:3f:14:5e:ca:1b:de:eb:5f:8b:74:20:b2: 59:b5:77:05:7a:37:3c:80:2d:e5:aa:cd:51:49:76:6d:67:6a: be:d0:34:aa:73:a2:a1:6a:5c:24:3a:52:2c:91:b4:04:51:e8: 8c:9e:da:36:48:28:c7:f5:33:1f:ed:13:07:2f:f1:19:3b:76: 4a:7c:f4:b0:d8:a7:f9:1a:55:3a:0a:da:a5:6d:df:37:d9:68: 6b:25:ed:4a:aa:13:1e:33:b1:ca:39:c1:48:bf:e1:97:31:db: 4f:f4:89:da:2b:83:18:97:48:f9:d8:a9:07:ab:b7:e9:24:c6: 4d:5a:4e:ee:a6:bc:95:db:71:c0:07:01:94:1d:51:4f:dc:42: 19:32:c9:0a:f8:3c:6e:84:93:67:f6:00:c2:18:3c:84:47:0b: 53:d1:3a:23:4d:29:63:76:94:6a:bc:1d:f6:f0:8d:ca:f8:c1: 09:c6:5d:bb:b3:97:e1:93:24:da:65:cf:90:0f:b1:4e:ab:f8: 1e:0d:69:ab -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZsCeu73Jqf7JbBzQUzd2AsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5 ZjBhOTMwHhcNMjUxMjA5MDkzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2NlNzE2OWM5NjFmYzhlNWY2YTBlY2IzYTExMjQ4ZThkZTM4NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i1cS3KLbcFWnjgefPAoAsqNi35Y 1GW40kfPmuYF60/TgwN9pIH3iHiuWnusNpWOMNZwGe4UhlUX0NtbY8exLmhJ9TIT VNek1NW9v/aM3QIqhnbJntFxfSaF0WQjbjNEy3VYNR8WwU5zWLh1Uf4WNO6oxxho 1SfG2asloGDlAHYKiNNnJbmlIvNlKEzRDdoRGPviN2+GngtwNizsjhEsMr0ymPsU PtZVK1dcKm7sDeAk02KXwdlgeFUH3D5re3gfcRoYhKdrlsVCqrrVjeBQt3sTVBKk KQ3A4KzelDfp09omOAIdM8IXeD0F1/0CXWhzTdKQR7PwNI9F1chOqWItcwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFMfOcWnJYfyOX2oOyzoRJI6N44TMMB8GA1UdIwQY MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt N2NmZDk1N2YwOGZmLzEveDg1eGFjbGhfSTVmYWc3TE9oRWtqbzNqaE13LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMtN2NmZDk1N2YwOGZm LzEvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgIvMA0GCSqGSIb3 DQEBCwUAA4IBAQCKxbOmmMUDrJ5ep7WYpXsCJYOdMs7tjxZIB231gh0zoVsp/AEf qFri7wXRfA0YMWB0T02Mnz8FcFfGh44/FF7KG97rX4t0ILJZtXcFejc8gC3lqs1R SXZtZ2q+0DSqc6KhalwkOlIskbQEUeiMnto2SCjH9TMf7RMHL/EZO3ZKfPSw2Kf5 GlU6Ctqlbd832WhrJe1KqhMeM7HKOcFIv+GXMdtP9InaK4MYl0j52KkHq7fpJMZN Wk7upryV23HABwGUHVFP3EIZMskK+DxuhJNn9gDCGDyERwtT0TojTSljdpRqvB32 8I3K+MEJxl27s5fhkyTaZc+QD7FOq/geDWmr -----END CERTIFICATE-----Generated at Fri Dec 12 02:47:55 2025 by rpki-client