This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/OpiyEA7jLNoth377L3JQZRW22EA.asa File: OpiyEA7jLNoth377L3JQZRW22EA.asa (raw, json) Hash identifier: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8= Subject key identifier: 3A:98:B2:10:0E:E3:2C:DA:2D:87:7E:FB:2F:72:50:65:15:B6:D8:40 Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457 Certificate serial: 019C344D15D5F709B2E06E950A5EBF44248D Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/OpiyEA7jLNoth377L3JQZRW22EA.asa Signing time: Fri 06 Feb 2026 18:53:12 +0000 ASPA not before: Fri 06 Feb 2026 18:53:12 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 201002 Providers: AS: 212027 AS: 215413 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:34:4d:15:d5:f7:09:b2:e0:6e:95:0a:5e:bf:44:24:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457 Validity Not Before: Feb 6 18:53:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a98b2100ee32cda2d877efb2f72506515b6d840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:f7:04:bf:c0:44:57:1f:89:29:05:4a:2d: 84:7d:a1:94:ad:97:f3:16:91:88:3e:3f:a4:a2:79: f9:82:2b:f8:b3:84:21:cb:d1:73:cf:0e:e2:9b:7c: bb:e1:80:f7:82:72:03:9a:05:49:38:e9:b0:56:99: a5:6e:7a:de:74:ab:4b:50:f0:0e:dc:eb:ab:ae:09: e6:e2:98:ec:f7:1a:42:0e:bb:5d:2a:3b:00:b7:8d: b9:e2:d0:ad:d1:60:e3:64:7e:59:27:4b:9f:7d:92: 9a:77:09:34:91:9e:aa:2b:7e:c1:6c:53:c7:4e:8a: f0:71:01:ff:e3:86:00:aa:d1:b6:eb:36:30:f9:c6: 98:a3:1b:9b:37:6d:2f:f8:32:34:dc:68:e5:f7:8a: b2:8a:19:43:34:62:0c:6b:60:94:0d:f2:96:0f:5a: a9:aa:a8:39:b0:ad:0a:8f:37:00:00:e8:a0:28:7d: e1:a0:4b:b9:04:55:1a:bf:dd:cf:e1:ae:fa:83:42: a1:0d:42:58:cf:7d:b8:a4:13:13:71:04:23:1e:b1: 93:55:32:19:66:e6:11:a9:25:c4:48:83:59:fc:99: 98:d2:9e:7a:c6:56:ba:21:7a:0f:3d:40:d7:c1:41: 9a:99:70:91:d5:9c:f2:78:b8:21:48:18:d8:9e:3e: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:98:B2:10:0E:E3:2C:DA:2D:87:7E:FB:2F:72:50:65:15:B6:D8:40 X509v3 Authority Key Identifier: keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/OpiyEA7jLNoth377L3JQZRW22EA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201002 Signature Algorithm: sha256WithRSAEncryption b2:d5:5a:8e:bc:5b:0a:41:16:7c:ef:08:ad:fd:7b:15:95:1d: e5:82:52:d2:a6:ea:7f:96:44:4b:15:70:97:e3:3b:16:1d:4c: 47:fc:99:28:29:fd:64:a5:29:6c:1c:9e:13:fa:7c:e2:d5:ff: 2b:a8:50:b4:b7:0c:d2:14:e4:62:0e:9a:1e:15:44:90:95:96: b5:8e:e9:7c:96:de:a9:80:f3:5f:55:f1:c9:15:88:03:ca:50: 65:b1:0e:19:8c:bf:0d:02:e8:69:ee:8c:76:3c:9d:9f:d5:ae: ff:9c:d1:fd:e4:fe:0b:23:de:ab:8b:a2:0f:4f:b3:69:03:e1: de:6d:57:ec:30:d7:87:45:a8:90:74:8f:2e:1e:04:b3:5c:d2: bc:c7:41:30:33:d6:f3:22:1f:a6:a1:d6:26:51:61:8f:d7:75: 23:2a:de:8b:c1:4b:9f:2c:81:fa:af:2b:d2:b6:ab:15:45:52: 84:a9:6a:2c:96:ae:f6:5a:b7:c1:28:7f:37:00:84:56:ba:e3: d5:da:96:e2:3d:8d:21:60:3e:02:3e:85:3a:19:89:99:52:19: 22:7d:82:6d:1b:52:a6:47:d7:0d:70:be:c5:b0:53:4d:4a:ef: 7d:83:92:ce:6a:ee:f1:85:2c:4b:48:77:44:b1:48:f2:37:db: 47:32:39:4c -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZw0TRXV9wmy4G6VCl6/RCSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDA5MzIxNzJhYTJkMWM3N2M0YmI5ODM3MGFhYjNkZTZh YzM0NTcwHhcNMjYwMjA2MTg1MzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTk4YjIxMDBlZTMyY2RhMmQ4NzdlZmIyZjcyNTA2NTE1YjZkODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCv3BL/ARFcfiSkFSi2EfaGUrZfz FpGIPj+konn5giv4s4Qhy9Fzzw7im3y74YD3gnIDmgVJOOmwVpmlbnredKtLUPAO 3Ourrgnm4pjs9xpCDrtdKjsAt4254tCt0WDjZH5ZJ0uffZKadwk0kZ6qK37BbFPH TorwcQH/44YAqtG26zYw+caYoxubN20v+DI03Gjl94qyihlDNGIMa2CUDfKWD1qp qqg5sK0KjzcAAOigKH3hoEu5BFUav93P4a76g0KhDUJYz324pBMTcQQjHrGTVTIZ ZuYRqSXESINZ/JmY0p56xla6IXoPPUDXwUGamXCR1ZzyeLghSBjYnj7/NwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDqYshAO4yzaLYd++y9yUGUVtthAMB8GA1UdIwQY MBaAFGXQkyFyqi0cd8S7mDcKqz3mrDRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMt MWVkZGU2YzlkOTZhLzEvT3BpeUVBN2pMTm90aDM3N0wzSlFaUlcyMkVBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9mYTc3MTEtMzdmZi00YWVjLTk4NTMtMWVkZGU2YzlkOTZh LzEvWmRDVElYS3FMUngzeEx1WU53cXJQZWFzTkZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRKjANBgkqhkiG 9w0BAQsFAAOCAQEAstVajrxbCkEWfO8Irf17FZUd5YJS0qbqf5ZESxVwl+M7Fh1M R/yZKCn9ZKUpbByeE/p84tX/K6hQtLcM0hTkYg6aHhVEkJWWtY7pfJbeqYDzX1Xx yRWIA8pQZbEOGYy/DQLoae6Mdjydn9Wu/5zR/eT+CyPeq4uiD0+zaQPh3m1X7DDX h0WokHSPLh4Es1zSvMdBMDPW8yIfpqHWJlFhj9d1Iyrei8FLnyyB+q8r0rarFUVS hKlqLJau9lq3wSh/NwCEVrrj1dqW4j2NIWA+Aj6FOhmJmVIZIn2CbRtSpkfXDXC+ xbBTTUrvfYOSzmru8YUsS0h3RLFI8jfbRzI5TA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:27 2026 by rpki-client