This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa File: K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa (raw, json) Hash identifier: S3HIvCfdHY15prwrA39u7TMubC1wO10vPZ16cT0joHY= Subject key identifier: 2B:DD:50:E2:5A:FD:7D:3D:BF:1D:11:70:D9:6D:AA:38:90:9F:1D:FC Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019BB2C905C39492659B86D8020109ACFA3F Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa Signing time: Mon 12 Jan 2026 15:17:57 +0000 ASPA not before: Mon 12 Jan 2026 15:17:57 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 62078 Providers: AS: 59645 AS: 207960 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:c9:05:c3:94:92:65:9b:86:d8:02:01:09:ac:fa:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Jan 12 15:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bdd50e25afd7d3dbf1d1170d96daa38909f1dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:6b:16:81:cd:82:f2:aa:90:fb:0a:f5:60: b4:d5:68:dc:d2:6f:3a:4d:f7:c7:fc:32:56:0b:a7: 41:0e:d0:9d:8a:78:fa:c3:5d:aa:9b:ee:f6:41:40: 9d:74:2c:6a:c0:a1:42:2f:5a:25:1e:d2:66:bc:de: 01:47:e8:9b:96:a2:dd:0b:97:9e:2d:9d:18:78:53: 5a:f1:72:b2:ae:22:29:4f:b9:04:37:47:6c:8e:98: ce:6d:ac:2d:b6:72:27:93:0a:ef:8e:33:f3:54:7d: f5:ed:e5:2e:06:a0:70:97:21:14:dc:28:71:1a:da: 0d:17:e9:84:f6:af:ab:43:9f:8d:5c:d2:62:19:59: 0f:9c:23:ca:5c:be:13:d0:8d:9c:11:ea:af:08:95: c5:40:ce:8c:ec:30:d8:3d:f1:ea:1b:58:cd:57:19: 80:30:90:b6:5e:1e:46:d9:82:8c:50:39:d7:5f:01: 6a:78:9a:34:7b:48:16:d5:03:e6:b3:a0:99:18:9b: 60:35:98:b2:1c:f2:85:77:05:d2:bf:6f:4b:c2:8f: 0e:4c:09:1e:63:cc:ce:42:41:d2:c6:eb:db:63:d6: 36:7f:e3:56:64:3b:d7:5e:70:22:f3:c9:ea:2a:50: ce:82:57:bd:12:a4:58:f4:4d:32:73:cb:13:78:75: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:50:E2:5A:FD:7D:3D:BF:1D:11:70:D9:6D:AA:38:90:9F:1D:FC X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/K91Q4lr9fT2_HRFw2W2qOJCfHfw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 62078 Signature Algorithm: sha256WithRSAEncryption 67:eb:a0:d4:00:80:7e:0a:29:46:33:3c:f4:b4:27:32:1a:23: 85:aa:5a:0b:d1:4e:4e:3f:32:4d:63:84:50:4c:9b:ed:79:e5: 9a:cf:8b:f0:39:ea:00:17:76:18:cd:db:22:9b:e3:8c:68:49: a7:b2:6b:cf:c8:d0:0f:41:1b:bd:47:8d:f5:1d:ff:aa:a5:6a: 7d:3d:7d:54:2f:e9:df:fe:c7:da:ae:37:57:50:09:8f:04:09: 3a:cf:86:a6:51:ce:60:57:cc:33:8b:1b:6f:53:4c:fc:90:7c: 81:83:af:9e:45:46:49:42:0d:12:f2:1d:24:81:2d:bd:9f:03: 53:cb:0b:1a:84:a9:8c:c7:88:26:d7:d0:a8:0d:79:3e:b9:a3: ee:8c:f3:11:d3:96:78:80:8d:06:bc:29:1e:d8:ca:2f:cf:6a: f5:80:4f:9d:6f:bc:e0:82:ab:24:22:8e:95:77:ed:56:f0:5d: df:ac:84:bd:fb:c9:d6:8c:67:84:e8:f1:10:04:e2:f0:a2:36: 40:9d:cc:a5:6a:b1:b8:ed:d6:ab:07:65:54:45:a3:34:74:b0: 25:b2:7a:fb:ca:21:7f:77:fa:94:1e:86:da:5b:8a:9d:ef:8f: b6:4d:69:2f:b7:66:01:21:8e:42:4b:fb:69:da:b8:2e:51:6c: 01:7e:e6:28 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZuyyQXDlJJlm4bYAgEJrPo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjYwMTEyMTUxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmRkNTBlMjVhZmQ3ZDNkYmYxZDExNzBkOTZkYWEzODkwOWYxZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr5rFoHNgvKqkPsK9WC01Wjc0m86 TffH/DJWC6dBDtCdinj6w12qm+72QUCddCxqwKFCL1olHtJmvN4BR+iblqLdC5ee LZ0YeFNa8XKyriIpT7kEN0dsjpjObawttnInkwrvjjPzVH317eUuBqBwlyEU3Chx GtoNF+mE9q+rQ5+NXNJiGVkPnCPKXL4T0I2cEeqvCJXFQM6M7DDYPfHqG1jNVxmA MJC2Xh5G2YKMUDnXXwFqeJo0e0gW1QPms6CZGJtgNZiyHPKFdwXSv29Lwo8OTAke Y8zOQkHSxuvbY9Y2f+NWZDvXXnAi88nqKlDOgle9EqRY9E0yc8sTeHX9gwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCvdUOJa/X09vx0RcNltqjiQnx38MB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEvSzkxUTRscjlmVDJfSFJGdzJXMnFPSkNmSGZ3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyfjANBgkqhkiG 9w0BAQsFAAOCAQEAZ+ug1ACAfgopRjM89LQnMhojhapaC9FOTj8yTWOEUEyb7Xnl ms+L8DnqABd2GM3bIpvjjGhJp7Jrz8jQD0EbvUeN9R3/qqVqfT19VC/p3/7H2q43 V1AJjwQJOs+GplHOYFfMM4sbb1NM/JB8gYOvnkVGSUINEvIdJIEtvZ8DU8sLGoSp jMeIJtfQqA15Prmj7ozzEdOWeICNBrwpHtjKL89q9YBPnW+84IKrJCKOlXftVvBd 36yEvfvJ1oxnhOjxEATi8KI2QJ3MpWqxuO3WqwdlVEWjNHSwJbJ6+8ohf3f6lB6G 2luKne+Ptk1pL7dmASGOQkv7adq4LlFsAX7mKA== -----END CERTIFICATE-----Generated at Mon Feb 2 04:42:06 2026 by rpki-client