This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/3NZi3BsWrkxxy4r6KC3-CpZTFCM.asa File: 3NZi3BsWrkxxy4r6KC3-CpZTFCM.asa (raw, json) Hash identifier: VHEBpu1qKct1uQd8w6vYfllQkyWLLkyZVPvuHKR37Tc= Subject key identifier: DC:D6:62:DC:1B:16:AE:4C:71:CB:8A:FA:28:2D:FE:0A:96:53:14:23 Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b Certificate serial: 019B9C7AD5237C9970C8E180C45989CD625F Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/3NZi3BsWrkxxy4r6KC3-CpZTFCM.asa Signing time: Thu 08 Jan 2026 07:20:54 +0000 ASPA not before: Thu 08 Jan 2026 07:20:54 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 198731 Providers: AS: 174 AS: 8903 AS: 29119 AS: 202766 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:7a:d5:23:7c:99:70:c8:e1:80:c4:59:89:cd:62:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b Validity Not Before: Jan 8 07:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcd662dc1b16ae4c71cb8afa282dfe0a96531423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:41:4b:1a:76:24:ff:a2:e6:95:0d:2c:16: 61:71:09:be:54:ab:c3:0b:10:89:fb:b3:fe:7d:eb: 06:b6:ae:54:eb:25:f8:3d:e9:53:46:44:08:d2:72: d6:30:29:31:1c:94:f6:29:d5:98:d1:eb:c1:32:6b: e8:4c:16:e8:4c:55:d9:a1:6c:2d:86:6f:c3:7e:f9: 01:a1:23:b5:c8:ee:c3:e1:f7:1e:2a:20:94:1a:b0: 4d:a4:b9:8d:ae:e1:e8:f7:96:09:6d:b5:17:43:d2: a9:e3:5e:b6:da:aa:ad:4a:f3:1a:98:c6:13:57:01: 5f:89:07:5f:be:0a:85:46:51:e8:dc:f5:e2:c7:10: 24:1a:67:ac:c7:e1:d0:8b:3b:39:fd:3f:d2:26:8f: 54:3e:59:2f:88:ca:61:87:3d:98:3a:4b:aa:f5:25: fd:36:43:cf:61:7f:6a:06:98:50:79:c6:bf:7a:91: 1b:cf:c8:06:ab:fa:1c:c1:7b:b4:01:c9:32:d4:9c: f3:41:66:49:67:bf:b0:35:44:ae:93:00:05:1c:30: 38:e6:4a:e0:c8:11:f4:10:92:3f:23:ff:e0:d5:46: 5d:37:5b:7d:6f:f5:a2:00:32:6f:c0:11:be:a2:53: d9:3c:9d:22:1d:25:3a:18:ee:3c:35:e7:83:84:33: dd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:62:DC:1B:16:AE:4C:71:CB:8A:FA:28:2D:FE:0A:96:53:14:23 X509v3 Authority Key Identifier: keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/3NZi3BsWrkxxy4r6KC3-CpZTFCM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 198731 Signature Algorithm: sha256WithRSAEncryption 5b:a6:e4:18:9c:4f:bf:5d:43:ad:f6:7d:b5:3c:15:b7:05:07: 57:2c:78:ac:3c:5d:42:81:f4:ec:7f:8f:07:a7:f0:6e:a3:5c: a3:2b:ea:50:2d:a7:91:9f:88:ad:c7:b8:8d:e2:49:22:1f:c3: 10:04:1f:9d:bb:bb:80:58:e1:a3:a1:21:ad:bd:6a:a3:c6:24: 66:92:e9:99:f6:2b:cb:cf:8e:93:49:e6:ab:b0:dc:e5:25:7b: 62:12:a0:16:02:dd:7c:e5:5f:bf:eb:58:44:29:e3:b7:e9:f2: 2c:a2:fc:1a:e1:49:e5:f9:81:fa:6b:3e:87:d3:18:0b:ab:a2: 17:72:61:08:96:d4:87:86:f3:a0:b7:8d:5c:32:cc:a8:58:4d: a2:55:57:a2:ce:93:f7:0b:3c:e0:da:d5:d6:fa:8a:47:9c:f7: 18:c5:9c:5d:94:da:4b:79:40:d8:85:8e:16:23:52:f1:8b:d4: 8b:e2:70:0e:11:1f:d6:a5:a4:4c:34:ea:ea:ce:7d:16:d4:ad: e1:34:a4:7d:1c:1f:93:d5:1b:42:d2:78:8e:d7:5a:b6:bc:6f: 1c:60:60:9b:8f:b8:98:47:51:05:69:94:d3:fe:cf:a4:8f:50: 40:f5:a6:dd:d8:42:14:c1:59:0b:47:c9:7c:55:07:72:23:c2: 91:6c:a8:93 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZucetUjfJlwyOGAxFmJzWJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh OWI4OGIwHhcNMjYwMTA4MDcyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2Q2NjJkYzFiMTZhZTRjNzFjYjhhZmEyODJkZmUwYTk2NTMxNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SFBSxp2JP+i5pUNLBZhcQm+VKvD CxCJ+7P+fesGtq5U6yX4PelTRkQI0nLWMCkxHJT2KdWY0evBMmvoTBboTFXZoWwt hm/DfvkBoSO1yO7D4fceKiCUGrBNpLmNruHo95YJbbUXQ9Kp41622qqtSvMamMYT VwFfiQdfvgqFRlHo3PXixxAkGmesx+HQizs5/T/SJo9UPlkviMphhz2YOkuq9SX9 NkPPYX9qBphQeca/epEbz8gGq/ocwXu0Acky1JzzQWZJZ7+wNUSukwAFHDA45krg yBH0EJI/I//g1UZdN1t9b/WiADJvwBG+olPZPJ0iHSU6GO48NeeDhDPdPQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNzWYtwbFq5MccuK+igt/gqWUxQjMB8GA1UdIwQY MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt MmI4MDM4MjgzMDE3LzEvM05aaTNCc1dya3h4eTRyNktDMy1DcFpURkNNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3 LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMISzANBgkqhkiG 9w0BAQsFAAOCAQEAW6bkGJxPv11DrfZ9tTwVtwUHVyx4rDxdQoH07H+PB6fwbqNc oyvqUC2nkZ+Irce4jeJJIh/DEAQfnbu7gFjho6Ehrb1qo8YkZpLpmfYry8+Ok0nm q7Dc5SV7YhKgFgLdfOVfv+tYRCnjt+nyLKL8GuFJ5fmB+ms+h9MYC6uiF3JhCJbU h4bzoLeNXDLMqFhNolVXos6T9ws84NrV1vqKR5z3GMWcXZTaS3lA2IWOFiNS8YvU i+JwDhEf1qWkTDTq6s59FtSt4TSkfRwfk9UbQtJ4jtdatrxvHGBgm4+4mEdRBWmU 0/7PpI9QQPWm3dhCFMFZC0fJfFUHciPCkWyokw== -----END CERTIFICATE-----Generated at Mon Feb 2 04:43:11 2026 by rpki-client