This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa File: kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa (raw, json) Hash identifier: KBTvBLA7hlVu2CLPVlebFUt7pxSDoq9fKLwXTzeDfzY= Subject key identifier: 91:44:61:65:00:53:1B:A6:4C:F5:5F:E9:CB:22:50:B0:60:4C:53:0A Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Certificate serial: 019C143911759B8F3059F287223BE8A44D97 Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa Signing time: Sat 31 Jan 2026 13:23:30 +0000 ASPA not before: Sat 31 Jan 2026 13:23:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 208663 Providers: AS: 15935 AS: 28755 AS: 34080 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:14:39:11:75:9b:8f:30:59:f2:87:22:3b:e8:a4:4d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Validity Not Before: Jan 31 13:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9144616500531ba64cf55fe9cb2250b0604c530a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:62:29:40:87:e5:d1:c9:f7:60:90:a2:64:a0: ff:ed:ec:e3:b8:6e:37:12:18:6d:70:b4:64:ec:68: 29:28:8f:74:ed:4e:47:ca:7b:91:96:fb:42:13:1c: 45:15:22:50:ee:fb:82:a3:71:e8:9c:1f:49:76:9c: a6:d2:c9:14:99:67:14:60:1e:f6:dd:30:80:2a:bf: 30:bc:4b:55:a9:80:3d:1d:b8:50:85:03:c7:8a:68: a0:d1:98:b1:c0:60:1a:e7:9b:32:5d:c0:f0:60:d4: 45:56:a0:38:8d:8f:08:05:86:9a:4b:fd:08:38:e7: b7:b6:3f:2d:93:8a:e2:ba:db:2d:28:25:f8:0d:34: 4c:bd:ad:4e:98:0b:54:02:70:66:9b:26:88:c4:bb: da:5b:bd:2c:45:9e:f8:c6:99:a6:e9:2f:b4:d6:e2: 7b:18:57:f1:a2:cd:44:cc:40:a1:2e:fc:3a:4c:89: a7:57:4c:59:89:cb:af:7a:45:b9:96:ae:a4:c0:9c: 50:d7:76:87:ee:41:22:37:8f:16:c9:5b:47:d9:b6: d9:f6:d3:e4:4a:4f:c8:8d:c4:62:57:e0:67:e9:55: fe:93:ee:a7:07:ea:2a:1b:f3:ff:21:d2:2c:89:b1: 6e:dc:ac:91:38:33:5c:3a:62:d6:90:79:8c:62:db: dd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:44:61:65:00:53:1B:A6:4C:F5:5F:E9:CB:22:50:B0:60:4C:53:0A X509v3 Authority Key Identifier: keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/kURhZQBTG6ZM9V_pyyJQsGBMUwo.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208663 Signature Algorithm: sha256WithRSAEncryption 6b:74:a5:0d:22:7c:d8:f0:51:01:3e:87:5e:26:d7:9c:77:9b: bb:79:00:63:d5:cf:70:a1:a8:86:5a:5c:05:21:c9:38:ee:51: ab:40:56:80:36:81:5e:a2:a0:e3:b3:e3:6d:8c:a8:8c:16:3b: 97:91:1a:20:6d:fe:b5:02:63:37:b2:4f:0f:c2:6e:e6:7a:64: 15:30:6d:83:49:14:be:94:b6:33:2d:b6:7c:95:78:fe:97:62: 90:a0:7d:d7:80:8b:f9:87:18:63:6c:cc:09:d6:0b:0e:2e:d6: bb:54:69:05:ac:14:75:1f:4f:db:69:af:ed:da:11:bb:a6:9b: cb:e5:6d:95:f0:e2:29:78:b2:08:fd:1a:92:bd:0e:5a:16:a5: fb:a1:ef:a7:34:29:f2:d3:f4:cf:a2:fe:41:2a:26:e0:4c:93: 74:c5:d8:fb:a4:2b:7e:af:8f:94:a8:1d:df:0d:85:35:7f:12: ed:a5:1f:cb:d4:40:86:db:bb:a8:c0:f3:5a:09:ad:1c:8a:8b: 0f:8a:61:f8:ba:fa:23:fe:23:84:fd:2f:1c:84:db:1d:c4:32: fd:11:39:8a:12:16:ad:b2:b7:e6:3c:f4:f6:f9:28:ab:87:ef: ca:3e:63:d0:f4:cf:03:77:e4:e7:ad:b3:33:7b:ea:a4:b5:b5: 0b:f6:b8:90 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwUORF1m48wWfKHIjvopE2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm OTdhMjEwHhcNMjYwMTMxMTMyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTQ0NjE2NTAwNTMxYmE2NGNmNTVmZTljYjIyNTBiMDYwNGM1MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WIpQIfl0cn3YJCiZKD/7ezjuG43 EhhtcLRk7GgpKI907U5HynuRlvtCExxFFSJQ7vuCo3HonB9Jdpym0skUmWcUYB72 3TCAKr8wvEtVqYA9HbhQhQPHimig0ZixwGAa55syXcDwYNRFVqA4jY8IBYaaS/0I OOe3tj8tk4riutstKCX4DTRMva1OmAtUAnBmmyaIxLvaW70sRZ74xpmm6S+01uJ7 GFfxos1EzEChLvw6TImnV0xZicuvekW5lq6kwJxQ13aH7kEiN48WyVtH2bbZ9tPk Sk/IjcRiV+Bn6VX+k+6nB+oqG/P/IdIsibFu3KyRODNcOmLWkHmMYtvdVQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJFEYWUAUxumTPVf6csiULBgTFMKMB8GA1UdIwQY MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt ZTdmZGY3NzQxYTY1LzEva1VSaFpRQlRHNlpNOVZfcHl5SlFzR0JNVXdvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1 LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMvFzANBgkqhkiG 9w0BAQsFAAOCAQEAa3SlDSJ82PBRAT6HXibXnHebu3kAY9XPcKGohlpcBSHJOO5R q0BWgDaBXqKg47PjbYyojBY7l5EaIG3+tQJjN7JPD8Ju5npkFTBtg0kUvpS2My22 fJV4/pdikKB914CL+YcYY2zMCdYLDi7Wu1RpBawUdR9P22mv7doRu6aby+VtlfDi KXiyCP0akr0OWhal+6HvpzQp8tP0z6L+QSom4EyTdMXY+6Qrfq+PlKgd3w2FNX8S 7aUfy9RAhtu7qMDzWgmtHIqLD4ph+Lr6I/4jhP0vHITbHcQy/RE5ihIWrbK35jz0 9vkoq4fvyj5j0PTPA3fk562zM3vqpLW1C/a4kA== -----END CERTIFICATE-----Generated at Mon Feb 2 04:43:12 2026 by rpki-client