This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/4pTe3zVq_LBaEng6PDXChOvOrYM.asa File: 4pTe3zVq_LBaEng6PDXChOvOrYM.asa (raw, json) Hash identifier: ajIeKP46hnwug0OLXYz0+5iBNt1utjAL/IG5/ovLQUU= Subject key identifier: E2:94:DE:DF:35:6A:FC:B0:5A:12:78:3A:3C:35:C2:84:EB:CE:AD:83 Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78 Certificate serial: 019AC3A0DDE6CE294FF43A43381DD854C342 Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/4pTe3zVq_LBaEng6PDXChOvOrYM.asa Signing time: Thu 27 Nov 2025 04:44:50 +0000 ASPA not before: Thu 27 Nov 2025 04:44:50 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 8283 Providers: AS: 8455 AS: 15703 AS: 38930 AS: 57866 AS: 58115 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c3:a0:dd:e6:ce:29:4f:f4:3a:43:38:1d:d8:54:c3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78 Validity Not Before: Nov 27 04:44:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e294dedf356afcb05a12783a3c35c284ebcead83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b5:2d:35:a5:e4:a1:5a:2c:60:49:7b:04:77: 3a:f2:53:91:ed:d6:30:5f:15:61:3f:41:dc:16:22: de:16:b2:7d:e2:ae:71:24:a4:20:87:6b:e2:1c:63: be:f7:f0:c1:c6:b2:8c:89:f0:b4:4e:ff:d6:f8:d0: a3:ca:3f:2c:4a:c6:c0:a2:36:b6:be:98:c4:0b:4b: 15:08:fe:c7:12:cf:7e:70:4c:41:2a:f9:f5:07:07: 68:a6:cc:f0:6c:a5:18:39:09:be:8b:97:7e:09:d6: fa:69:68:8f:ac:4c:1a:cb:d8:cf:7a:2c:2c:76:c6: 07:f0:09:19:34:bb:2b:38:8f:f9:8f:b6:8d:1a:23: 80:67:5a:51:1b:8e:24:de:86:5a:3d:1e:15:d0:9f: ca:06:8a:09:fd:f3:60:bd:64:e3:36:a8:8b:e3:15: ff:97:bd:91:d4:38:ad:b8:8c:7c:ae:39:36:90:f8: 46:39:de:a5:57:7c:82:9c:67:8b:20:a0:ef:0b:e4: 70:c6:6a:29:18:85:7e:c5:2f:ea:ba:a0:16:01:41: 51:41:ba:61:3f:89:c7:d9:fa:05:a2:ad:79:2d:83: bb:b6:e8:4e:44:e0:76:91:ec:21:42:c5:66:69:20: b3:d6:b2:6f:ad:f8:35:fe:6a:d3:67:e2:fa:7c:8f: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:94:DE:DF:35:6A:FC:B0:5A:12:78:3A:3C:35:C2:84:EB:CE:AD:83 X509v3 Authority Key Identifier: keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/4pTe3zVq_LBaEng6PDXChOvOrYM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 8283 Signature Algorithm: sha256WithRSAEncryption d1:c1:0e:36:6e:ec:ec:e9:6f:1a:e1:75:fe:61:4d:5d:f3:15: 35:0e:e9:40:e4:b2:11:b0:bb:61:ae:d1:f7:8c:ad:3c:b7:3d: 51:66:4c:79:ac:56:5b:94:31:02:e2:2d:0c:11:f1:ba:bb:fa: 3b:27:2a:ac:a0:0e:1e:4e:8a:b3:f3:ad:99:40:48:ee:ab:e7: 9f:24:2a:19:66:5d:9f:b5:aa:b1:1a:cd:e6:da:63:3c:6a:3a: 8e:dd:e7:7c:7c:20:c7:ee:af:02:38:ce:f8:5a:cc:ff:a6:29: 93:05:20:b8:7e:63:2f:5f:e6:76:e7:5e:08:7b:18:12:46:54: 4f:71:41:74:2d:eb:e6:95:60:c5:38:92:1c:57:c2:af:dc:7c: a1:c0:54:eb:da:37:db:ec:15:48:35:2d:0a:6f:53:54:92:65: 1e:c4:f0:1f:5d:a6:ee:18:d7:b8:0f:22:fc:c7:67:6b:14:f4: 3a:8a:2d:83:0c:6a:65:32:d8:2c:03:c2:50:cb:50:bc:4d:3b: d3:2a:cf:79:e6:a2:28:1f:1d:93:57:c3:c3:b5:a9:a3:97:7c: 96:bc:57:ca:0c:2d:24:e1:12:9f:59:c6:40:d8:f6:5c:08:7a: 88:eb:9d:4f:d0:45:5e:6e:4d:c9:d3:4b:f0:82:33:74:e4:b7: ed:9a:6b:30 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZrDoN3mzilP9DpDOB3YVMNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3 N2ZjNzgwHhcNMjUxMTI3MDQ0NDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjk0ZGVkZjM1NmFmY2IwNWExMjc4M2EzYzM1YzI4NGViY2VhZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rUtNaXkoVosYEl7BHc68lOR7dYw XxVhP0HcFiLeFrJ94q5xJKQgh2viHGO+9/DBxrKMifC0Tv/W+NCjyj8sSsbAoja2 vpjEC0sVCP7HEs9+cExBKvn1BwdopszwbKUYOQm+i5d+Cdb6aWiPrEway9jPeiws dsYH8AkZNLsrOI/5j7aNGiOAZ1pRG44k3oZaPR4V0J/KBooJ/fNgvWTjNqiL4xX/ l72R1DituIx8rjk2kPhGOd6lV3yCnGeLIKDvC+RwxmopGIV+xS/quqAWAUFRQbph P4nH2foFoq15LYO7tuhOROB2kewhQsVmaSCz1rJvrfg1/mrTZ+L6fI+1xwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFOKU3t81avywWhJ4Ojw1woTrzq2DMB8GA1UdIwQY MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt NTA1MDUzODJmZDcyLzEvNHBUZTN6VnFfTEJhRW5nNlBEWENoT3ZPcllNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiBbMA0GCSqGSIb3 DQEBCwUAA4IBAQDRwQ42buzs6W8a4XX+YU1d8xU1DulA5LIRsLthrtH3jK08tz1R Zkx5rFZblDEC4i0MEfG6u/o7JyqsoA4eToqz862ZQEjuq+efJCoZZl2ftaqxGs3m 2mM8ajqO3ed8fCDH7q8COM74Wsz/pimTBSC4fmMvX+Z2514IexgSRlRPcUF0Levm lWDFOJIcV8Kv3HyhwFTr2jfb7BVINS0Kb1NUkmUexPAfXabuGNe4DyL8x2drFPQ6 ii2DDGplMtgsA8JQy1C8TTvTKs955qIoHx2TV8PDtamjl3yWvFfKDC0k4RKfWcZA 2PZcCHqI651P0EVebk3J00vwgjN05Lftmmsw -----END CERTIFICATE-----Generated at Thu Dec 4 21:06:49 2025 by rpki-client