This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/fFXDtgvQwtuo26S2a1Fj55vsTB8.asa File: fFXDtgvQwtuo26S2a1Fj55vsTB8.asa (raw, json) Hash identifier: EyxWJ7SdSqpwJL1gtM1HT9SdtAnugRTp0AwNzm8Whcw= Subject key identifier: 7C:55:C3:B6:0B:D0:C2:DB:A8:DB:A4:B6:6B:51:63:E7:9B:EC:4C:1F Certificate issuer: /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Certificate serial: 019BDFBB2B5F228339FA294E5F63E1727B38 Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/fFXDtgvQwtuo26S2a1Fj55vsTB8.asa Signing time: Wed 21 Jan 2026 08:45:44 +0000 ASPA not before: Wed 21 Jan 2026 08:45:44 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 49630 Providers: AS: 3292 AS: 31027 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:bb:2b:5f:22:83:39:fa:29:4e:5f:63:e1:72:7b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f Validity Not Before: Jan 21 08:45:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c55c3b60bd0c2dba8dba4b66b5163e79bec4c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:fd:e9:9a:75:8d:b0:5f:00:97:69:37:d0: 5f:fc:70:93:82:56:7d:39:79:26:e4:5e:3b:e4:8e: b6:70:28:43:cb:a7:92:b1:80:42:75:d2:50:1e:d9: d2:ae:fd:0a:a8:ef:e1:eb:f3:96:81:0c:b1:bc:3d: 71:f5:fe:68:7f:cd:fa:d0:0c:2e:8e:4c:01:da:6d: fd:89:91:0d:08:bb:ce:0c:c6:c2:35:79:be:70:b8: c8:1d:c8:79:3c:3c:e3:5b:b7:d9:cf:89:a2:62:8a: 81:8b:ed:1b:78:07:20:fa:24:eb:49:db:72:0e:90: 2d:2b:e6:35:b4:99:11:b3:22:57:f1:3e:51:33:1f: f6:26:dd:d3:1c:cf:e3:77:83:80:b7:40:fd:d7:e2: 59:20:aa:b4:23:95:95:42:f2:c3:66:cb:03:a6:d6: 30:63:b3:78:ba:b9:ad:77:8e:a9:f0:d5:5c:45:3b: bc:4e:d4:02:5b:32:2d:6c:2f:61:bf:de:9f:f4:13: a2:77:29:ba:a6:70:5f:42:fc:20:2b:2b:43:e5:22: d8:ce:2f:90:59:48:f0:fb:da:b7:24:f6:c9:ef:69: 9d:7b:d2:c1:e2:cb:7b:05:fa:1c:13:7c:1d:ea:90: 31:d1:58:ad:ee:47:69:83:7f:67:cf:11:2b:f0:90: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:55:C3:B6:0B:D0:C2:DB:A8:DB:A4:B6:6B:51:63:E7:9B:EC:4C:1F X509v3 Authority Key Identifier: keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/fFXDtgvQwtuo26S2a1Fj55vsTB8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49630 Signature Algorithm: sha256WithRSAEncryption 7d:6a:8d:e5:eb:a3:8a:69:d0:48:3a:b4:e5:75:61:d0:7f:59: 72:54:7a:6b:68:c3:be:d4:6f:71:3e:74:8c:be:78:99:0d:5b: b9:5f:44:b7:82:30:a0:24:a5:ee:27:67:01:29:72:d1:70:ee: cd:f1:70:e8:ad:26:02:1a:01:ca:a3:45:0f:ec:11:a1:ff:ff: 3f:a6:84:96:85:a3:fb:17:7a:f6:f6:80:fc:c1:03:d9:f7:0c: b5:a7:98:fc:f3:c7:bf:a7:3a:bd:11:d9:83:0b:e4:b1:88:94: ae:81:74:f5:3a:02:c2:1d:aa:1f:01:1b:d6:00:e4:82:6c:ac: 71:76:03:d8:29:79:c4:a2:8b:4a:fc:12:df:9a:2a:d3:c0:21: 1a:18:1f:3e:e1:97:93:5f:c7:0f:47:55:7f:70:55:1b:80:cb: 38:2b:9d:99:59:00:e9:93:bb:b7:b8:6b:e4:21:cb:67:81:58: f5:dc:c0:aa:c2:12:e8:1c:c3:df:ce:43:f7:3a:00:d1:13:1d: 69:1b:4b:e3:ef:98:9d:4a:59:45:2c:61:38:33:2b:f3:7a:22: cd:3e:09:e1:c5:ab:2e:51:80:23:84:34:07:a8:69:42:40:d0: 66:26:92:27:3f:38:b9:71:46:f4:b5:c2:1e:aa:f5:8d:ed:58: c3:2a:a9:6c -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvfuytfIoM5+ilOX2Phcns4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZWEwOGVmYTliM2Y3OGM5ZWY5ZGI3NjdhZGMyMWRkNjE4 MzRlMGYwHhcNMjYwMTIxMDg0NTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzU1YzNiNjBiZDBjMmRiYThkYmE0YjY2YjUxNjNlNzliZWM0YzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1T96Zp1jbBfAJdpN9Bf/HCTglZ9 OXkm5F475I62cChDy6eSsYBCddJQHtnSrv0KqO/h6/OWgQyxvD1x9f5of8360Awu jkwB2m39iZENCLvODMbCNXm+cLjIHch5PDzjW7fZz4miYoqBi+0beAcg+iTrSdty DpAtK+Y1tJkRsyJX8T5RMx/2Jt3THM/jd4OAt0D91+JZIKq0I5WVQvLDZssDptYw Y7N4urmtd46p8NVcRTu8TtQCWzItbC9hv96f9BOidym6pnBfQvwgKytD5SLYzi+Q WUjw+9q3JPbJ72mde9LB4st7BfocE3wd6pAx0Vit7kdpg39nzxEr8JBdwQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHxVw7YL0MLbqNuktmtRY+eb7EwfMB8GA1UdIwQY MBaAFDPqCO+ps/eMnvnbdnrcId1hg04PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjct ZGVjY2ZhM2VhNjM1LzEvZkZYRHRndlF3dHVvMjZTMmExRmo1NXZzVEI4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi82ODg0MjUtMTRjYi00ZmQ2LThmMjctZGVjY2ZhM2VhNjM1 LzEvTS1vSTc2bXo5NHllLWR0MmV0d2gzV0dEVGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDB3jANBgkqhkiG 9w0BAQsFAAOCAQEAfWqN5eujimnQSDq05XVh0H9ZclR6a2jDvtRvcT50jL54mQ1b uV9Et4IwoCSl7idnASly0XDuzfFw6K0mAhoByqNFD+wRof//P6aEloWj+xd69vaA /MED2fcMtaeY/PPHv6c6vRHZgwvksYiUroF09ToCwh2qHwEb1gDkgmyscXYD2Cl5 xKKLSvwS35oq08AhGhgfPuGXk1/HD0dVf3BVG4DLOCudmVkA6ZO7t7hr5CHLZ4FY 9dzAqsIS6BzD385D9zoA0RMdaRtL4++YnUpZRSxhODMr83oizT4J4cWrLlGAI4Q0 B6hpQkDQZiaSJz84uXFG9LXCHqr1je1YwyqpbA== -----END CERTIFICATE-----Generated at Mon Feb 2 04:40:50 2026 by rpki-client