This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/36K8uvuxLLbczf1YXC_ASJxPbng.asa File: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (raw, json) Hash identifier: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw= Subject key identifier: DF:A2:BC:BA:FB:B1:2C:B6:DC:CD:FD:58:5C:2F:C0:48:9C:4F:6E:78 Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019B032E60555B8D15337764C840EB351E41 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/36K8uvuxLLbczf1YXC_ASJxPbng.asa Signing time: Tue 09 Dec 2025 12:55:29 +0000 ASPA not before: Tue 09 Dec 2025 12:55:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 201011 Providers: AS: 33891 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:2e:60:55:5b:8d:15:33:77:64:c8:40:eb:35:1e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Dec 9 12:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dfa2bcbafbb12cb6dccdfd585c2fc0489c4f6e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:1f:1a:b5:20:6e:c3:03:05:8e:0b:b8:94: 11:61:20:cd:36:89:0f:50:55:ee:87:a1:4e:92:e4: 13:21:fa:ee:c3:7c:dd:48:89:3f:2a:a4:87:57:26: a3:3c:36:7a:07:9f:22:d3:32:1a:ec:b6:f5:8b:be: 41:6b:b8:70:90:41:8b:33:3b:22:65:5e:55:6f:aa: 2f:7f:73:6a:83:ea:ab:67:e7:22:98:ef:5f:e8:92: 5c:d5:d8:12:ce:ff:89:29:69:49:e3:46:51:64:cc: 3b:50:0e:05:52:79:1f:58:90:6f:6d:af:3c:c4:17: e9:35:a6:d3:80:9b:74:54:cd:8d:50:a2:bf:2d:66: a3:bb:43:fb:7f:77:ae:ca:6e:cd:6c:40:c8:a1:72: ce:ec:37:d2:08:f6:4a:68:56:62:b8:59:10:3a:9d: 57:ed:77:e6:0f:92:a2:95:7b:de:2f:24:34:73:b7: f4:3d:28:b6:05:d8:64:43:5e:9f:6f:9a:d4:bd:70: 2d:ea:b4:b5:5e:af:78:8e:30:f2:f7:b4:12:70:f5: ff:cb:66:78:db:cc:0d:86:64:1f:8a:3e:a7:9d:ee: 83:59:82:5f:e6:3d:07:5d:4d:0d:bd:51:71:3d:ab: 95:54:e2:58:41:7e:71:6c:6e:ff:d5:db:16:38:84: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:BC:BA:FB:B1:2C:B6:DC:CD:FD:58:5C:2F:C0:48:9C:4F:6E:78 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/36K8uvuxLLbczf1YXC_ASJxPbng.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201011 Signature Algorithm: sha256WithRSAEncryption 82:dd:ca:a9:49:d2:73:ab:94:c1:8f:a5:a1:8a:15:61:42:1e: 0f:5f:67:f0:3c:f3:36:b8:41:d2:6d:97:a2:4b:b4:2d:5f:2e: b1:2f:ef:9c:c2:56:4a:54:25:b1:fd:96:d3:93:10:13:5b:e4: 6f:dd:62:10:22:61:6e:10:51:10:bd:66:9f:34:e0:86:00:3e: 7c:8f:d1:a2:89:a1:44:72:6a:8c:42:65:b1:64:66:e7:7f:db: ac:da:3a:b4:af:ac:f9:a6:ce:51:b5:c9:7e:de:1f:a7:44:00: 78:a8:a6:83:d9:0b:c0:9a:0b:b1:45:1e:f5:4f:40:1e:bf:34: 72:3b:4a:8d:c3:99:8d:e4:08:7d:0c:20:2b:51:b1:6a:d7:8e: bc:25:1c:12:0f:a3:a2:65:96:46:39:e3:ef:a0:83:59:10:c8: 49:bb:2f:8c:56:17:bd:d0:5d:cd:e9:1f:56:40:83:b6:ce:17: 52:dc:da:00:31:3c:17:ca:de:a6:8d:a4:27:22:57:9b:d4:32: e0:9a:a4:51:e2:2a:6e:00:0c:e8:0a:59:11:07:61:ae:67:bd: f0:14:13:5c:f7:23:3a:46:9a:22:fe:c3:60:47:31:a6:27:53: 5a:bd:f0:ac:58:26:7a:cb:c4:ed:cd:15:5e:3b:00:04:a8:ff: 82:cf:96:4d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsDLmBVW40VM3dkyEDrNR5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjUxMjA5MTI1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmEyYmNiYWZiYjEyY2I2ZGNjZGZkNTg1YzJmYzA0ODljNGY2ZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP0fGrUgbsMDBY4LuJQRYSDNNokP UFXuh6FOkuQTIfruw3zdSIk/KqSHVyajPDZ6B58i0zIa7Lb1i75Ba7hwkEGLMzsi ZV5Vb6ovf3Nqg+qrZ+cimO9f6JJc1dgSzv+JKWlJ40ZRZMw7UA4FUnkfWJBvba88 xBfpNabTgJt0VM2NUKK/LWaju0P7f3euym7NbEDIoXLO7DfSCPZKaFZiuFkQOp1X 7XfmD5KilXveLyQ0c7f0PSi2BdhkQ16fb5rUvXAt6rS1Xq94jjDy97QScPX/y2Z4 28wNhmQfij6nne6DWYJf5j0HXU0NvVFxPauVVOJYQX5xbG7/1dsWOITdQQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFN+ivLr7sSy23M39WFwvwEicT254MB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvMzZLOHV2dXhMTGJjemYxWVhDX0FTSnhQYm5nLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRMzANBgkqhkiG 9w0BAQsFAAOCAQEAgt3KqUnSc6uUwY+loYoVYUIeD19n8DzzNrhB0m2Xoku0LV8u sS/vnMJWSlQlsf2W05MQE1vkb91iECJhbhBREL1mnzTghgA+fI/RoomhRHJqjEJl sWRm53/brNo6tK+s+abOUbXJft4fp0QAeKimg9kLwJoLsUUe9U9AHr80cjtKjcOZ jeQIfQwgK1GxateOvCUcEg+jomWWRjnj76CDWRDISbsvjFYXvdBdzekfVkCDts4X UtzaADE8F8repo2kJyJXm9Qy4JqkUeIqbgAM6ApZEQdhrme98BQTXPcjOkaaIv7D YEcxpidTWr3wrFgmesvE7c0VXjsABKj/gs+WTQ== -----END CERTIFICATE-----Generated at Thu Dec 11 16:26:36 2025 by rpki-client