This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa File: ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa (raw, json) Hash identifier: v7QZ8HhFIWG34nVuRTJxlOgKji8pCozgn4SVeyKdDG4= Subject key identifier: A2:81:71:2E:A8:42:21:90:9E:98:85:7C:69:E1:52:CB:90:71:9B:8C Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Certificate serial: 019AFE3A5EFF72FD9A6EDC906640EF012E18 Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa Signing time: Mon 08 Dec 2025 13:50:29 +0000 ASPA not before: Mon 08 Dec 2025 13:50:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 203868 Providers: AS: 6939 AS: 8772 AS: 34927 AS: 152368 AS: 209533 AS: 210475 AS: 212895 AS: 214481 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:3a:5e:ff:72:fd:9a:6e:dc:90:66:40:ef:01:2e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e Validity Not Before: Dec 8 13:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a281712ea84221909e98857c69e152cb90719b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:ba:7c:12:74:7b:73:00:9d:b7:f0:a9:c0: 9c:10:6c:5e:4d:fc:e6:7c:c2:ee:49:b1:3c:f1:05: 73:4c:bb:c5:eb:c3:ed:d8:d0:b0:c5:24:e5:8a:34: 40:ae:f5:6b:5c:2d:de:46:f3:33:52:a4:67:0a:9b: c6:29:1d:d3:46:91:75:2d:b3:4f:4f:81:03:3a:71: 37:05:d4:b7:be:59:af:3f:09:a0:7f:6b:48:95:d0: a5:c5:cf:c0:9e:a1:da:8c:72:23:e3:50:63:34:52: 8c:92:9e:4a:ce:87:d8:f4:47:72:60:c2:2d:b5:13: 7e:3f:c2:a1:7c:d2:ba:82:d9:0c:8a:29:3b:ed:dc: 4f:0f:8c:40:58:ca:c8:1e:01:c7:5d:a6:ce:68:81: a2:35:d3:b5:83:d8:8c:56:80:bd:d0:bb:ae:25:94: f3:97:5d:53:4b:e5:ca:a1:9e:a5:f9:27:64:b7:67: 16:2a:09:e7:73:78:d4:cf:ae:7a:be:4a:ac:0c:b6: 6d:71:1d:7a:78:00:cf:00:63:0e:eb:20:68:bb:3c: 47:2c:af:09:53:e2:6e:19:64:fb:1e:36:1e:ff:e0: 2f:e5:af:ac:31:b4:51:d5:1d:72:17:be:9f:67:cc: 01:3e:e7:7b:95:a4:c5:81:95:b8:ca:6f:2f:f3:67: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:81:71:2E:A8:42:21:90:9E:98:85:7C:69:E1:52:CB:90:71:9B:8C X509v3 Authority Key Identifier: keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203868 Signature Algorithm: sha256WithRSAEncryption 72:3a:44:9b:4a:c9:a1:0d:d5:06:2d:e1:d6:e6:1d:a4:65:1f: 78:9c:5b:3f:d7:ff:bd:e4:5c:ac:9d:96:24:63:08:cd:99:18: 2b:3b:c8:24:3a:0c:75:e5:32:2d:9d:c4:cc:7c:94:27:c4:05: 54:eb:a6:07:78:e3:09:16:de:e3:ac:ca:41:da:d7:39:1c:13: 3a:a9:74:68:42:41:c8:0b:da:57:86:57:ac:13:c0:d1:8f:82: 7e:f5:13:77:17:cb:e9:1a:42:06:75:31:02:17:25:21:e7:34: 03:7f:02:d2:d7:f4:60:8d:49:1e:45:c7:45:d7:85:37:eb:fa: 39:46:78:1c:94:e8:b9:cc:65:11:26:c8:4c:b9:10:f9:21:25: 49:c2:5b:3c:46:44:74:6e:0a:61:b4:45:34:17:ba:32:e8:91: 1c:74:c6:27:06:21:78:68:e8:76:03:00:3a:9a:30:c5:32:8a: d3:2b:85:6e:d7:47:e0:6e:54:dd:6d:4d:37:4e:f2:06:63:59: e1:94:3e:87:98:7d:c3:32:25:da:f7:b1:32:5b:66:9a:19:9c: df:2a:19:9b:86:0c:0a:78:63:36:30:55:43:2d:6c:ed:45:d3: 87:b0:0b:39:76:58:5f:6f:6b:7f:64:b1:c0:9d:8b:f9:a7:03: 8b:17:12:b7 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr+Ol7/cv2abtyQZkDvAS4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy ZWQzM2UwHhcNMjUxMjA4MTM1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjgxNzEyZWE4NDIyMTkwOWU5ODg1N2M2OWUxNTJjYjkwNzE5YjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mS6fBJ0e3MAnbfwqcCcEGxeTfzm fMLuSbE88QVzTLvF68Pt2NCwxSTlijRArvVrXC3eRvMzUqRnCpvGKR3TRpF1LbNP T4EDOnE3BdS3vlmvPwmgf2tIldClxc/AnqHajHIj41BjNFKMkp5KzofY9EdyYMIt tRN+P8KhfNK6gtkMiik77dxPD4xAWMrIHgHHXabOaIGiNdO1g9iMVoC90LuuJZTz l11TS+XKoZ6l+Sdkt2cWKgnnc3jUz656vkqsDLZtcR16eADPAGMO6yBouzxHLK8J U+JuGWT7HjYe/+Av5a+sMbRR1R1yF76fZ8wBPud7laTFgZW4ym8v82dGGQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKKBcS6oQiGQnpiFfGnhUsuQcZuMMB8GA1UdIwQY MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt MDFmZjA0YjBhMWE0LzEvb29GeExxaENJWkNlbUlWOGFlRlN5NUJ4bTR3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0 LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMcXDANBgkqhkiG 9w0BAQsFAAOCAQEAcjpEm0rJoQ3VBi3h1uYdpGUfeJxbP9f/veRcrJ2WJGMIzZkY KzvIJDoMdeUyLZ3EzHyUJ8QFVOumB3jjCRbe46zKQdrXORwTOql0aEJByAvaV4ZX rBPA0Y+CfvUTdxfL6RpCBnUxAhclIec0A38C0tf0YI1JHkXHRdeFN+v6OUZ4HJTo ucxlESbITLkQ+SElScJbPEZEdG4KYbRFNBe6MuiRHHTGJwYheGjodgMAOpowxTKK 0yuFbtdH4G5U3W1NN07yBmNZ4ZQ+h5h9wzIl2vexMltmmhmc3yoZm4YMCnhjNjBV Qy1s7UXTh7ALOXZYX29rf2SxwJ2L+acDixcStw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:09:17 2025 by rpki-client