This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/HxCQoY1pq0QBJxIzXS6TyizjztQ.asa File: HxCQoY1pq0QBJxIzXS6TyizjztQ.asa (raw, json) Hash identifier: FaLt49G6xYi0pL7XXopVcBPXas22uAHvv5DCFc3jDFU= Subject key identifier: 1F:10:90:A1:8D:69:AB:44:01:27:12:33:5D:2E:93:CA:2C:E3:CE:D4 Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Certificate serial: 019C1E86B41BBE204B7B5B6D85B950DA311F Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/HxCQoY1pq0QBJxIzXS6TyizjztQ.asa Signing time: Mon 02 Feb 2026 13:24:30 +0000 ASPA not before: Mon 02 Feb 2026 13:24:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 200040 Providers: AS: 9121 AS: 15924 AS: 34984 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:86:b4:1b:be:20:4b:7b:5b:6d:85:b9:50:da:31:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Validity Not Before: Feb 2 13:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f1090a18d69ab44012712335d2e93ca2ce3ced4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:09:45:9b:84:39:1d:59:90:23:db:6a:f5: fa:12:f7:f5:75:fd:5e:a9:48:a6:69:83:84:7e:ba: d9:5c:2d:b2:24:9e:63:85:16:f2:f8:b1:07:80:e5: 78:cb:83:6d:26:b5:25:88:85:87:04:2b:50:4d:c5: ab:74:31:fc:07:ba:91:0b:d9:06:a0:49:40:21:5e: 98:3b:5a:b2:90:64:6d:e8:bd:a6:63:8d:67:26:23: d0:fb:85:87:f8:bf:fe:88:62:85:51:77:ec:34:f5: 6b:6f:0f:ec:f2:9d:3b:4a:75:f0:10:42:f8:53:07: e9:21:49:b0:fd:0d:6d:b8:5c:6e:8c:a0:0a:b2:8f: c1:66:65:c7:0f:cd:d3:03:39:70:ed:18:15:66:86: 7c:2e:8e:19:cd:36:82:2c:ab:16:cc:dd:9e:da:03: 6d:e1:1e:9e:ff:87:2d:ce:ec:cd:89:1c:13:61:1c: 53:b7:5a:14:ef:f1:32:a6:61:f6:95:28:57:ec:10: 43:16:42:93:58:ba:1c:4a:95:f4:8f:d6:5c:a1:4c: 2c:e7:13:8f:3e:08:69:12:33:47:cf:12:c3:55:b0: 92:45:a4:3a:9c:e6:c7:29:49:ce:a9:a9:fb:8b:9f: ac:cc:85:db:1f:3d:e8:e3:25:d5:2a:ea:55:09:22: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:10:90:A1:8D:69:AB:44:01:27:12:33:5D:2E:93:CA:2C:E3:CE:D4 X509v3 Authority Key Identifier: keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/HxCQoY1pq0QBJxIzXS6TyizjztQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200040 Signature Algorithm: sha256WithRSAEncryption 6c:07:25:1c:80:e9:2b:ec:eb:89:af:02:81:93:b7:dd:7d:d9: 50:17:8d:4a:0b:9e:d5:9c:61:94:3f:31:17:4f:fe:13:cc:38: ec:f2:eb:06:d3:87:c8:84:05:41:b2:1b:92:93:a8:16:11:e3: ff:c2:5a:f5:a9:94:12:24:2a:48:3b:70:11:10:97:b9:5b:2b: a5:32:38:fe:ee:52:e4:cf:3e:c2:07:20:71:7c:5e:df:fa:d8: f9:29:5c:f5:52:6f:60:50:f4:e2:92:85:4f:52:f0:2b:4f:8c: a0:49:5b:1c:5d:77:45:8d:90:79:dc:95:8f:3d:f6:ba:e2:72: ac:c1:df:1e:28:8c:6c:cd:16:6f:13:9e:27:39:e7:a7:fc:4e: fc:e1:cc:b7:14:29:81:a4:f8:3a:39:c2:fb:e2:83:85:bb:47: bb:1a:0c:cc:72:58:3c:32:58:f2:84:c7:a3:96:d1:a3:c2:52: 76:a9:7e:24:12:03:e4:30:79:6e:ef:57:d2:46:d1:81:1a:86: 39:35:da:3e:96:c9:b9:1c:07:25:8f:55:23:58:a5:ce:ed:95: c8:f6:a4:f4:6c:5d:53:91:a6:4b:8b:4a:34:d4:e7:bd:2c:31: 9e:88:3e:b9:51:17:dd:92:b0:2e:95:a3:d2:a1:ee:2f:f2:6f: 77:9c:5e:62 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwehrQbviBLe1tthblQ2jEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5 YzkwMzAwHhcNMjYwMjAyMTMyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjEwOTBhMThkNjlhYjQ0MDEyNzEyMzM1ZDJlOTNjYTJjZTNjZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEIJRZuEOR1ZkCPbavX6Evf1df1e qUimaYOEfrrZXC2yJJ5jhRby+LEHgOV4y4NtJrUliIWHBCtQTcWrdDH8B7qRC9kG oElAIV6YO1qykGRt6L2mY41nJiPQ+4WH+L/+iGKFUXfsNPVrbw/s8p07SnXwEEL4 UwfpIUmw/Q1tuFxujKAKso/BZmXHD83TAzlw7RgVZoZ8Lo4ZzTaCLKsWzN2e2gNt 4R6e/4ctzuzNiRwTYRxTt1oU7/EypmH2lShX7BBDFkKTWLocSpX0j9ZcoUws5xOP PghpEjNHzxLDVbCSRaQ6nObHKUnOqan7i5+szIXbHz3o4yXVKupVCSIzXQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFB8QkKGNaatEAScSM10uk8os487UMB8GA1UdIwQY MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt NTg4ZTBkOTIzYzE1LzEvSHhDUW9ZMXBxMFFCSnhJelhTNlR5aXpqenRRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1 LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNaDANBgkqhkiG 9w0BAQsFAAOCAQEAbAclHIDpK+zria8CgZO33X3ZUBeNSgue1ZxhlD8xF0/+E8w4 7PLrBtOHyIQFQbIbkpOoFhHj/8Ja9amUEiQqSDtwERCXuVsrpTI4/u5S5M8+wgcg cXxe3/rY+Slc9VJvYFD04pKFT1LwK0+MoElbHF13RY2QedyVjz32uuJyrMHfHiiM bM0WbxOeJznnp/xO/OHMtxQpgaT4OjnC++KDhbtHuxoMzHJYPDJY8oTHo5bRo8JS dql+JBID5DB5bu9X0kbRgRqGOTXaPpbJuRwHJY9VI1ilzu2VyPak9GxdU5GmS4tK NNTnvSwxnog+uVEX3ZKwLpWj0qHuL/Jvd5xeYg== -----END CERTIFICATE-----Generated at Sat Feb 7 07:32:19 2026 by rpki-client