This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/24lvsSxh7MUVQcE3eg7_Djq-Tso.asa File: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (raw, json) Hash identifier: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c= Subject key identifier: DB:89:6F:B1:2C:61:EC:C5:15:41:C1:37:7A:0E:FF:0E:3A:BE:4E:CA Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B03311FA1EA174D0B4F07E157C0BF45E6 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/24lvsSxh7MUVQcE3eg7_Djq-Tso.asa Signing time: Tue 09 Dec 2025 12:58:29 +0000 ASPA not before: Tue 09 Dec 2025 12:58:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 33891 Providers: AS: 1299 AS: 3257 AS: 3320 AS: 3356 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:31:1f:a1:ea:17:4d:0b:4f:07:e1:57:c0:bf:45:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Dec 9 12:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=db896fb12c61ecc51541c1377a0eff0e3abe4eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:8c:42:17:d8:d3:71:28:d9:d6:26:ea:fe: dd:5b:87:a0:69:8f:28:31:0b:ab:86:c9:73:36:7b: ed:66:9f:da:41:45:48:08:7d:a3:0d:ef:c7:15:f0: 4b:40:37:f8:0d:fa:bf:ae:7c:bb:d5:02:1e:35:45: d2:8b:69:18:d7:f6:d4:bc:98:af:30:49:b6:6a:2a: 99:2c:30:b8:8a:54:7d:64:cd:38:46:86:02:fe:e9: 35:20:51:ae:71:f1:bf:66:06:91:c0:48:08:0c:c6: bd:51:65:21:88:32:19:70:f3:9e:09:06:6f:7e:d2: 0d:30:02:7e:77:f1:17:41:b5:41:12:71:fb:aa:a0: db:49:c5:00:78:76:9d:f8:ed:47:75:7b:24:6c:c9: c7:69:fe:1d:43:f3:1b:97:81:2b:29:6d:c8:5c:02: e0:0b:96:10:92:87:24:6b:00:93:e5:7b:2b:b4:71: 7d:ab:9d:84:dd:c9:f7:0c:77:6c:a4:ce:00:9d:cf: 85:61:be:85:67:cd:db:d9:f7:45:73:86:54:6c:6d: fc:f2:83:6e:64:e5:85:fb:93:fe:46:01:3d:2a:25: 67:1a:fc:ec:a4:17:ce:e2:f7:c1:f7:35:17:b3:c0: cc:2a:b4:c6:f7:b8:36:82:ab:1c:7c:81:bc:89:0f: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:89:6F:B1:2C:61:EC:C5:15:41:C1:37:7A:0E:FF:0E:3A:BE:4E:CA X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/24lvsSxh7MUVQcE3eg7_Djq-Tso.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 33891 Signature Algorithm: sha256WithRSAEncryption 02:ba:f7:b4:25:28:de:66:41:36:32:e4:31:4e:14:76:23:57: a8:20:16:d8:46:a4:f4:de:a6:10:a2:a6:e4:e6:59:83:31:54: f1:1b:8b:06:b8:e0:b3:fe:92:c7:f6:fd:08:05:9e:ba:d1:53: 9f:f2:16:6c:57:30:17:4f:b4:2b:bb:1e:01:1b:ca:98:de:f0: 6c:f9:9e:44:98:62:b9:cf:e5:44:71:58:0e:3d:d3:38:eb:85: ed:90:f6:d8:f7:5c:f9:6e:cd:22:53:26:de:41:5d:bb:b1:c1: 26:3e:cf:77:f9:74:39:8c:50:d1:3e:fd:00:38:6f:69:9f:14: be:8f:2a:58:aa:ca:df:ab:97:f9:82:3f:7a:fd:ff:83:14:2b: 34:1e:19:f5:0b:1d:b9:37:e2:2a:c1:c4:2f:86:9e:a2:e1:94: 81:10:8c:42:60:a8:d2:d2:fe:df:ed:91:f7:f9:b9:be:8d:95: 0a:fa:e6:1a:a6:57:df:40:13:64:f3:04:81:96:c6:e7:32:8f: d2:64:99:ef:65:7f:cf:9d:68:82:12:e4:65:cb:93:9f:9e:47: 06:dc:bd:23:fd:d5:3a:0f:ff:cc:e3:a1:49:67:33:e6:26:f5: 9a:80:48:63:0d:d8:bc:49:e0:41:5d:30:7f:76:cb:96:06:91: 2d:f1:61:f9 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsDMR+h6hdNC08H4VfAv0XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjUxMjA5MTI1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjg5NmZiMTJjNjFlY2M1MTU0MWMxMzc3YTBlZmYwZTNhYmU0ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR+MQhfY03Eo2dYm6v7dW4egaY8o MQurhslzNnvtZp/aQUVICH2jDe/HFfBLQDf4Dfq/rny71QIeNUXSi2kY1/bUvJiv MEm2aiqZLDC4ilR9ZM04RoYC/uk1IFGucfG/ZgaRwEgIDMa9UWUhiDIZcPOeCQZv ftINMAJ+d/EXQbVBEnH7qqDbScUAeHad+O1HdXskbMnHaf4dQ/Mbl4ErKW3IXALg C5YQkockawCT5XsrtHF9q52E3cn3DHdspM4Anc+FYb6FZ83b2fdFc4ZUbG388oNu ZOWF+5P+RgE9KiVnGvzspBfO4vfB9zUXs8DMKrTG97g2gqscfIG8iQ/YZwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNuJb7EsYezFFUHBN3oO/w46vk7KMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvMjRsdnNTeGg3TVVWUWNFM2VnN19EanEtVHNvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCEYzANBgkqhkiG 9w0BAQsFAAOCAQEAArr3tCUo3mZBNjLkMU4UdiNXqCAW2Eak9N6mEKKm5OZZgzFU 8RuLBrjgs/6Sx/b9CAWeutFTn/IWbFcwF0+0K7seARvKmN7wbPmeRJhiuc/lRHFY Dj3TOOuF7ZD22Pdc+W7NIlMm3kFdu7HBJj7Pd/l0OYxQ0T79ADhvaZ8Uvo8qWKrK 36uX+YI/ev3/gxQrNB4Z9QsduTfiKsHEL4aeouGUgRCMQmCo0tL+3+2R9/m5vo2V CvrmGqZX30ATZPMEgZbG5zKP0mSZ72V/z51oghLkZcuTn55HBty9I/3VOg//zOOh SWcz5ib1moBIYw3YvEngQV0wf3bLlgaRLfFh+Q== -----END CERTIFICATE-----Generated at Wed Dec 10 12:49:18 2025 by rpki-client