This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/dfjch8XLq-4wXUHU0X4FRj8rZtw.asa File: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (raw, json) Hash identifier: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0= Subject key identifier: 75:F8:DC:87:C5:CB:AB:EE:30:5D:41:D4:D1:7E:05:46:3F:2B:66:DC Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8 Certificate serial: 019B44EE58E20EC4DAF85FE96790EFD5EF42 Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/dfjch8XLq-4wXUHU0X4FRj8rZtw.asa Signing time: Mon 22 Dec 2025 07:20:29 +0000 ASPA not before: Mon 22 Dec 2025 07:20:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 203468 Providers: AS: 9121 AS: 34984 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:ee:58:e2:0e:c4:da:f8:5f:e9:67:90:ef:d5:ef:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8 Validity Not Before: Dec 22 07:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=75f8dc87c5cbabee305d41d4d17e05463f2b66dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:49:cf:72:42:18:8c:bd:c9:90:07:07:cd: e3:b9:b0:76:2c:40:af:ae:bd:ee:52:94:33:43:d5: fd:e0:29:6c:44:91:c0:82:ad:97:a7:f5:66:49:d1: 9b:93:1a:0d:36:53:4e:ff:1e:77:58:17:79:8e:0e: 77:ff:2e:a7:fe:d7:0b:52:93:9f:f3:b1:27:f5:1d: db:9c:73:ed:fc:d7:9d:46:33:26:29:1a:fd:27:1e: b0:32:ad:f5:e3:ed:e5:81:ff:03:ac:39:11:02:bb: 9c:12:34:68:ab:e4:8b:a0:68:ad:78:7e:27:0c:8e: ff:de:7c:6c:70:b6:c9:a4:12:a4:36:ef:cb:cf:20: bc:d2:6e:d6:32:40:a9:6f:d5:5b:0b:59:4f:aa:cb: 84:ac:c3:e6:3e:49:23:c6:3c:49:6f:82:2a:28:4e: 6e:1d:aa:36:23:96:63:86:2e:1f:b9:65:da:ae:c6: 50:c9:f0:62:6e:d9:ff:0b:70:4b:60:29:73:cf:e6: d0:d0:4a:e5:75:ac:8e:d8:13:74:fd:bb:4f:76:84: f0:78:3d:9d:2d:92:55:84:5e:1f:b4:3f:51:c0:d7: cc:ed:c0:45:ae:60:77:52:1b:fe:70:cd:63:de:ae: 70:3b:f7:d0:b3:4b:4a:fb:f6:43:bb:31:44:c2:7c: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F8:DC:87:C5:CB:AB:EE:30:5D:41:D4:D1:7E:05:46:3F:2B:66:DC X509v3 Authority Key Identifier: keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/dfjch8XLq-4wXUHU0X4FRj8rZtw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203468 Signature Algorithm: sha256WithRSAEncryption 94:a2:d7:a8:00:09:1b:80:d9:b2:a8:15:b3:2a:ba:56:6f:b2: cb:d0:45:30:bc:99:fb:96:27:e9:99:57:37:98:e7:fc:fc:63: 9b:aa:6a:94:2a:11:d2:8b:fa:e0:fc:f5:6a:83:64:ca:39:32: 8a:e6:5e:54:6e:cd:d8:70:03:84:72:3b:29:99:81:ae:76:54: 34:00:08:51:1a:18:f3:a2:c0:92:45:fc:94:96:0c:ec:cd:0b: c1:df:3e:80:83:7f:b0:d0:f9:0d:f1:e3:2a:f4:a8:14:c3:32: 37:52:f2:9d:ed:cd:03:3e:3a:de:52:80:db:90:bc:73:0d:ae: d4:a9:91:9f:15:73:fc:8e:d2:ca:b6:34:2a:2f:8c:91:11:f3: 91:07:6c:59:f5:4b:88:51:aa:b1:0a:5a:5c:1a:d3:7b:aa:17: 1c:05:88:23:86:ef:50:d0:88:a5:e5:fe:43:cf:13:22:c9:0c: 63:2e:f9:76:b8:04:d6:be:19:d8:ad:fb:e6:d1:37:86:0f:fb: 19:de:c0:42:eb:6e:f1:ef:c2:40:fd:cb:c9:28:1e:b7:40:50: 2c:07:cf:7a:4c:66:2f:61:1f:2d:00:27:72:af:ab:1f:ec:38: 4f:9d:d6:e7:2e:3e:fa:13:3f:81:0c:0b:3b:69:a2:a4:2c:cf: 2f:21:ea:30 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtE7ljiDsTa+F/pZ5Dv1e9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyODExOWFjMTc4ZTM3OTg5MDM2ZWEyOWEyYzBmNDYzMDY5 NmNmZTgwHhcNMjUxMjIyMDcyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWY4ZGM4N2M1Y2JhYmVlMzA1ZDQxZDRkMTdlMDU0NjNmMmI2NmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXBJz3JCGIy9yZAHB83jubB2LECv rr3uUpQzQ9X94ClsRJHAgq2Xp/VmSdGbkxoNNlNO/x53WBd5jg53/y6n/tcLUpOf 87En9R3bnHPt/NedRjMmKRr9Jx6wMq314+3lgf8DrDkRArucEjRoq+SLoGiteH4n DI7/3nxscLbJpBKkNu/LzyC80m7WMkCpb9VbC1lPqsuErMPmPkkjxjxJb4IqKE5u Hao2I5Zjhi4fuWXarsZQyfBibtn/C3BLYClzz+bQ0ErldayO2BN0/btPdoTweD2d LZJVhF4ftD9RwNfM7cBFrmB3Uhv+cM1j3q5wO/fQs0tK+/ZDuzFEwnyEAQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHX43IfFy6vuMF1B1NF+BUY/K2bcMB8GA1UdIwQY MBaAFBKBGawXjjeYkDbqKaLA9GMGls/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAt N2VhMGRlYjgzMGFiLzEvZGZqY2g4WExxLTR3WFVIVTBYNEZSajhyWnR3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAtN2VhMGRlYjgzMGFi LzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMazDANBgkqhkiG 9w0BAQsFAAOCAQEAlKLXqAAJG4DZsqgVsyq6Vm+yy9BFMLyZ+5Yn6ZlXN5jn/Pxj m6pqlCoR0ov64Pz1aoNkyjkyiuZeVG7N2HADhHI7KZmBrnZUNAAIURoY86LAkkX8 lJYM7M0Lwd8+gIN/sND5DfHjKvSoFMMyN1Lyne3NAz463lKA25C8cw2u1KmRnxVz /I7SyrY0Ki+MkRHzkQdsWfVLiFGqsQpaXBrTe6oXHAWII4bvUNCIpeX+Q88TIskM Yy75drgE1r4Z2K375tE3hg/7Gd7AQutu8e/CQP3LySget0BQLAfPekxmL2EfLQAn cq+rH+w4T53W5y4++hM/gQwLO2mipCzPLyHqMA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:20:13 2025 by rpki-client