This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/hlcXZMeAMbkehrXk-27ZnwwQkjg.asa File: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (raw, json) Hash identifier: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I= Subject key identifier: 86:57:17:64:C7:80:31:B9:1E:86:B5:E4:FB:6E:D9:9F:0C:10:92:38 Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Certificate serial: 019B2E4FA2C9D72BACCA4F857CA1F0EB71DD Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/hlcXZMeAMbkehrXk-27ZnwwQkjg.asa Signing time: Wed 17 Dec 2025 21:55:29 +0000 ASPA not before: Wed 17 Dec 2025 21:55:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 47527 Providers: AS: 3223 AS: 3292 AS: 3308 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:4f:a2:c9:d7:2b:ac:ca:4f:85:7c:a1:f0:eb:71:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Validity Not Before: Dec 17 21:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86571764c78031b91e86b5e4fb6ed99f0c109238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fa:85:ed:33:2c:3f:63:b8:bb:8e:6f:cb:b9: c9:bf:4b:00:83:5b:b9:73:f4:cd:0e:aa:67:94:1e: 36:27:4f:a1:ec:4d:d7:cd:f3:95:a6:50:d8:b8:91: b1:f0:ed:8c:d8:05:99:f9:57:5a:78:0f:75:49:a3: 5e:68:0e:06:e3:e3:36:76:fa:0b:86:cb:d8:d7:f2: 37:0a:0f:f5:56:54:93:6b:25:3e:99:b8:0c:cb:f4: 04:79:d6:fe:81:58:85:c2:f4:76:ab:42:9d:e5:46: 02:df:99:73:72:60:78:61:2f:2d:1a:16:57:f2:df: 3f:d5:08:54:b7:f7:28:b7:a4:28:28:05:54:ed:f5: 8a:94:80:e9:f6:60:e6:d3:e3:1f:80:c0:b5:ac:28: ab:02:af:aa:b7:9b:54:93:c7:b8:2a:e9:b7:e9:7c: 9a:99:0f:73:ac:4c:d7:8f:97:7f:bd:47:a0:bd:6a: 48:54:8a:bb:f4:a4:ef:a4:d4:61:63:63:7d:e1:73: 85:86:75:c7:14:36:ac:67:7b:06:30:c4:42:db:4e: e7:88:b4:27:41:70:79:ef:ca:57:82:91:1f:22:ea: cc:5a:cb:95:6b:45:56:86:5b:21:18:15:0c:b2:88: 1c:0f:c9:b7:3b:29:99:d3:72:cc:77:9a:33:bd:3a: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:17:64:C7:80:31:B9:1E:86:B5:E4:FB:6E:D9:9F:0C:10:92:38 X509v3 Authority Key Identifier: keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/hlcXZMeAMbkehrXk-27ZnwwQkjg.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 47527 Signature Algorithm: sha256WithRSAEncryption 65:3f:1b:15:62:2f:6b:83:12:c5:83:99:fd:17:1d:85:84:8e: 73:54:c7:ab:fe:da:4f:24:45:10:03:08:13:06:0f:dd:2d:93: 7f:84:95:d2:46:5c:cb:4d:81:4b:69:db:41:05:44:41:b7:e4: 5a:e0:b0:25:93:08:a1:61:90:d6:23:5f:27:91:de:9a:da:73: 36:58:55:cf:28:27:28:04:5d:45:75:da:c9:f5:49:91:85:a5: fe:89:a6:ec:8e:e1:26:38:9b:61:d3:7b:f6:9e:18:b5:28:67: 36:4d:c8:09:67:13:d0:f8:55:8a:47:cc:94:63:cd:0e:84:95: 0f:0b:03:0c:58:c8:9b:68:66:6d:99:07:9a:93:36:8c:7a:71: f6:77:5f:92:fa:c7:b0:9a:dc:1a:eb:58:95:03:37:80:f6:c8: e8:2d:d2:a6:43:8f:3e:62:64:24:50:24:12:d0:0e:44:ab:59: eb:8c:52:ad:be:d6:3b:90:82:7a:6d:5f:6a:2c:04:5b:59:13: a0:31:09:a9:51:ec:96:88:6e:92:94:10:ba:36:f2:c9:41:b7: 3b:06:35:57:97:24:80:51:ad:27:58:c6:e2:1c:91:c4:de:86: d5:6f:2f:94:a7:d1:04:50:5d:f5:0e:d0:77:73:a8:70:79:65: db:52:3c:85 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsuT6LJ1yusyk+FfKHw63HdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi YjdhOWIwHhcNMjUxMjE3MjE1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjU3MTc2NGM3ODAzMWI5MWU4NmI1ZTRmYjZlZDk5ZjBjMTA5MjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/qF7TMsP2O4u45vy7nJv0sAg1u5 c/TNDqpnlB42J0+h7E3XzfOVplDYuJGx8O2M2AWZ+VdaeA91SaNeaA4G4+M2dvoL hsvY1/I3Cg/1VlSTayU+mbgMy/QEedb+gViFwvR2q0Kd5UYC35lzcmB4YS8tGhZX 8t8/1QhUt/cot6QoKAVU7fWKlIDp9mDm0+MfgMC1rCirAq+qt5tUk8e4Kum36Xya mQ9zrEzXj5d/vUegvWpIVIq79KTvpNRhY2N94XOFhnXHFDasZ3sGMMRC207niLQn QXB578pXgpEfIurMWsuVa0VWhlshGBUMsogcD8m3OymZ03LMd5ozvTrrVwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFIZXF2THgDG5Hoa15Ptu2Z8MEJI4MB8GA1UdIwQY MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt MWJlNzUzZmFkMWJmLzEvaGxjWFpNZUFNYmtlaHJYay0yN1pud3dRa2pnLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC5pzANBgkqhkiG 9w0BAQsFAAOCAQEAZT8bFWIva4MSxYOZ/RcdhYSOc1THq/7aTyRFEAMIEwYP3S2T f4SV0kZcy02BS2nbQQVEQbfkWuCwJZMIoWGQ1iNfJ5HemtpzNlhVzygnKARdRXXa yfVJkYWl/omm7I7hJjibYdN79p4YtShnNk3ICWcT0PhVikfMlGPNDoSVDwsDDFjI m2hmbZkHmpM2jHpx9ndfkvrHsJrcGutYlQM3gPbI6C3SpkOPPmJkJFAkEtAORKtZ 64xSrb7WO5CCem1faiwEW1kToDEJqVHslohukpQQujbyyUG3OwY1V5ckgFGtJ1jG 4hyRxN6G1W8vlKfRBFBd9Q7Qd3OocHll21I8hQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:56:55 2025 by rpki-client