This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa File: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (raw, json) Hash identifier: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA= Subject key identifier: 89:25:3D:7B:92:2B:71:C1:C2:05:9D:50:01:CA:0E:D8:8C:76:27:BF Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019C05F99B712E2CBBED94A1417BC515B38C Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa Signing time: Wed 28 Jan 2026 18:59:30 +0000 ASPA not before: Wed 28 Jan 2026 18:59:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 202297 Providers: AS: 39392 AS: 47232 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:f9:9b:71:2e:2c:bb:ed:94:a1:41:7b:c5:15:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 28 18:59:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89253d7b922b71c1c2059d5001ca0ed88c7627bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0c:33:07:ef:5e:b8:9e:c3:bf:dc:2f:2d:85: d3:c5:0d:2b:65:7a:c0:b9:bf:8d:63:44:49:1e:56: 9f:a3:75:6f:fd:f7:f6:80:11:c9:1b:62:f0:91:7a: 82:35:41:2a:4b:ed:00:8c:27:c3:10:4f:25:ba:32: 60:a2:47:1c:14:83:3e:65:c7:37:29:d6:4e:70:9c: df:76:9f:cb:af:5d:d4:08:88:2c:e8:64:5d:33:53: d4:a8:9c:f8:de:ab:78:d0:ca:5d:98:60:04:bd:67: 74:c2:53:b6:f5:8c:cd:9c:c4:64:d2:bf:ec:90:e1: 50:79:24:1f:b1:0c:d4:9c:68:87:d2:ec:98:33:59: fc:89:2a:10:3b:f8:ea:ab:1a:f0:df:1e:e8:2b:87: 5c:f0:28:ba:d9:63:1e:a4:83:67:32:b3:ee:34:c7: 74:f8:4f:23:24:93:31:8f:e4:6d:ce:4b:5b:2e:5a: c8:7a:2a:81:1a:d3:66:14:c5:08:02:ea:3a:38:7f: 50:dd:b2:fe:c1:3e:72:a5:5b:70:85:f9:58:bf:11: a4:3f:48:96:a2:c1:32:a4:ac:0a:bb:e3:74:8b:a3: b9:dc:9c:be:fd:be:7c:87:6e:3b:17:65:71:98:a2: ff:ba:4e:8e:d9:9e:34:ee:3b:f9:c4:41:1c:41:43: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:25:3D:7B:92:2B:71:C1:C2:05:9D:50:01:CA:0E:D8:8C:76:27:BF X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202297 Signature Algorithm: sha256WithRSAEncryption 48:08:ee:2f:1d:99:ee:df:bc:e2:18:e9:69:77:85:05:16:8d: af:72:23:ba:d3:b6:ca:9a:a2:94:04:50:f9:01:6b:63:5f:5f: fc:1a:03:52:ff:42:37:32:0b:3e:66:43:45:77:ce:24:cd:ff: fe:f0:2e:1c:8b:f5:91:f4:dd:ff:c0:2c:8e:fb:07:f8:dc:66: 82:38:85:67:c8:75:4d:73:d1:30:5f:99:b6:86:bf:b9:84:a0: 22:19:8e:24:ad:9d:5b:26:73:0b:d6:d4:66:c6:6b:ce:0e:f1: fd:62:69:77:0e:fd:88:15:70:5b:07:1d:9b:6c:bf:c9:09:4d: 85:fc:e9:29:68:5a:68:28:c4:12:7d:7e:19:64:5f:dd:a5:46: 9a:3f:34:71:a8:0a:11:2a:2d:98:0a:ca:df:93:d9:58:21:ac: 90:23:7b:0a:9c:f7:ca:2c:9f:78:ee:6d:cc:2a:40:1e:ec:58: 2e:9d:68:64:12:ed:92:43:71:79:f7:18:3f:0b:a6:46:28:f1: 0d:6e:14:fb:bb:e4:55:06:f0:61:83:b7:a2:c3:ab:65:d2:f4: 0c:af:ff:6d:ff:18:c5:bf:dc:ee:72:1d:4b:ff:de:b4:4f:6d: c8:c6:f9:6f:1b:ac:f5:b5:50:0c:32:e3:20:b5:52:f1:8a:2a: b8:f1:2b:4b -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwF+ZtxLiy77ZShQXvFFbOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTI4MTg1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTI1M2Q3YjkyMmI3MWMxYzIwNTlkNTAwMWNhMGVkODhjNzYyN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwwzB+9euJ7Dv9wvLYXTxQ0rZXrA ub+NY0RJHlafo3Vv/ff2gBHJG2LwkXqCNUEqS+0AjCfDEE8lujJgokccFIM+Zcc3 KdZOcJzfdp/Lr13UCIgs6GRdM1PUqJz43qt40MpdmGAEvWd0wlO29YzNnMRk0r/s kOFQeSQfsQzUnGiH0uyYM1n8iSoQO/jqqxrw3x7oK4dc8Ci62WMepINnMrPuNMd0 +E8jJJMxj+RtzktbLlrIeiqBGtNmFMUIAuo6OH9Q3bL+wT5ypVtwhflYvxGkP0iW osEypKwKu+N0i6O53Jy+/b58h247F2VxmKL/uk6O2Z407jv5xEEcQUOorQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFIklPXuSK3HBwgWdUAHKDtiMdie/MB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvaVNVOWU1SXJjY0hDQloxUUFjb08ySXgySjc4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWOTANBgkqhkiG 9w0BAQsFAAOCAQEASAjuLx2Z7t+84hjpaXeFBRaNr3IjutO2ypqilARQ+QFrY19f /BoDUv9CNzILPmZDRXfOJM3//vAuHIv1kfTd/8AsjvsH+NxmgjiFZ8h1TXPRMF+Z toa/uYSgIhmOJK2dWyZzC9bUZsZrzg7x/WJpdw79iBVwWwcdm2y/yQlNhfzpKWha aCjEEn1+GWRf3aVGmj80cagKESotmArK35PZWCGskCN7Cpz3yiyfeO5tzCpAHuxY Lp1oZBLtkkNxefcYPwumRijxDW4U+7vkVQbwYYO3osOrZdL0DK//bf8Yxb/c7nId S//etE9tyMb5bxus9bVQDDLjILVS8YoquPErSw== -----END CERTIFICATE-----Generated at Mon Feb 2 04:40:33 2026 by rpki-client