This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/mT54iJsV7CUjkMXZtMcJT6FB0PQ.asa File: mT54iJsV7CUjkMXZtMcJT6FB0PQ.asa (raw, json) Hash identifier: WNLzhl9D0fHsdOb/IFwW18p9Oo9gLH5iswtxgsmv93c= Subject key identifier: 99:3E:78:88:9B:15:EC:25:23:90:C5:D9:B4:C7:09:4F:A1:41:D0:F4 Certificate issuer: /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13 Certificate serial: 019BDE066D1E1DDF8214E1A5D2001336B984 Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/mT54iJsV7CUjkMXZtMcJT6FB0PQ.asa Signing time: Wed 21 Jan 2026 00:48:41 +0000 ASPA not before: Wed 21 Jan 2026 00:48:41 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 39889 Providers: AS: 12552 AS: 50989 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:06:6d:1e:1d:df:82:14:e1:a5:d2:00:13:36:b9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13 Validity Not Before: Jan 21 00:48:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993e78889b15ec252390c5d9b4c7094fa141d0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:bd:ed:58:48:b3:54:25:6e:ab:41:c6:c7: 87:21:d9:ca:5b:aa:19:3a:40:3a:b5:7e:c6:a6:0e: 11:55:c6:9e:a8:01:89:e0:71:c7:3b:0c:63:1a:3a: 3a:33:4d:73:9d:7e:bd:b1:39:56:d0:f3:c5:fc:29: 6e:e6:52:f8:e2:bb:f0:3c:dc:92:98:9d:40:9f:9a: 24:ef:e0:5c:95:54:13:33:12:8c:3e:8e:c3:7a:e7: 5d:1d:da:05:c7:31:33:68:04:42:60:2d:d3:d3:83: 96:4e:fd:ab:5b:48:e3:06:d8:fa:e6:0b:23:1f:2c: 6b:b3:c4:8c:32:6d:f2:da:8c:d9:5c:c5:b1:ed:09: 82:c4:f2:76:7a:76:79:99:ad:5f:90:fb:19:a6:44: 23:cf:e1:d6:02:18:e0:00:d3:80:9b:f9:dc:fc:1b: f1:c9:1d:ba:51:2a:6e:96:15:03:c3:46:69:e1:24: a6:13:ff:81:0a:aa:a2:2e:3d:4d:92:30:71:20:08: 59:04:6d:fe:f3:6d:3d:93:39:ae:b9:ac:fb:c7:3e: b2:56:b8:c2:74:de:59:82:04:46:98:c3:e5:a5:5f: b5:1d:73:39:5c:be:41:9c:d0:e6:6e:dd:d9:05:18: 77:25:1d:34:da:ff:87:6b:da:23:a9:7a:ac:a5:b6: db:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3E:78:88:9B:15:EC:25:23:90:C5:D9:B4:C7:09:4F:A1:41:D0:F4 X509v3 Authority Key Identifier: keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/mT54iJsV7CUjkMXZtMcJT6FB0PQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 39889 Signature Algorithm: sha256WithRSAEncryption 51:18:c4:89:3a:2c:5a:22:4f:5c:b3:42:c6:64:ab:98:fa:67: 09:96:18:7d:0f:0f:34:2c:27:76:51:c8:9b:cd:73:38:a2:35: 0d:15:e1:13:bf:e3:25:71:e5:07:95:71:d7:51:b4:ee:d9:e4: c8:27:11:5c:b0:12:64:5d:ad:53:a9:4f:7f:47:ff:59:d9:c1: 85:65:fc:82:af:a1:08:13:fc:d8:f5:90:db:f0:43:7b:bb:1c: d2:6c:f9:23:9c:3b:2f:25:3e:84:e9:ca:d3:14:16:8b:b7:3e: f8:eb:ab:88:53:2c:7e:61:72:75:5c:e3:bd:f3:98:a5:fc:53: 49:60:cf:49:0d:04:0a:3e:31:32:86:19:db:81:d2:d6:1b:21: 88:a3:a0:da:b3:f8:19:f2:7a:a6:b9:58:dd:87:a2:d3:84:e2: 44:f8:81:3e:24:5b:fe:73:3e:37:24:9f:b7:e3:15:99:0e:db: ab:2d:27:db:e4:e2:47:76:c9:97:ce:59:ec:fa:9b:51:4d:ba: 18:91:0e:ed:ad:0c:b8:86:5f:57:96:7e:3a:ef:a8:06:35:bf: a9:f6:8e:ac:3a:2d:23:cf:6d:8e:91:b9:2c:ba:50:2a:15:7b: 21:ea:82:35:99:94:37:ba:ec:83:50:c0:2a:32:0d:0c:3d:0f: 2e:16:ed:79 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZveBm0eHd+CFOGl0gATNrmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMThjYTljOGIzZDdkZTZhYWNjM2QxNDJjNzdkZWY2NWQ5 ZDlhMTMwHhcNMjYwMTIxMDA0ODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNlNzg4ODliMTVlYzI1MjM5MGM1ZDliNGM3MDk0ZmExNDFkMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7G97VhIs1QlbqtBxseHIdnKW6oZ OkA6tX7Gpg4RVcaeqAGJ4HHHOwxjGjo6M01znX69sTlW0PPF/Clu5lL44rvwPNyS mJ1An5ok7+BclVQTMxKMPo7DeuddHdoFxzEzaARCYC3T04OWTv2rW0jjBtj65gsj Hyxrs8SMMm3y2ozZXMWx7QmCxPJ2enZ5ma1fkPsZpkQjz+HWAhjgANOAm/nc/Bvx yR26USpulhUDw0Zp4SSmE/+BCqqiLj1NkjBxIAhZBG3+8209kzmuuaz7xz6yVrjC dN5ZggRGmMPlpV+1HXM5XL5BnNDmbt3ZBRh3JR002v+Ha9ojqXqspbbbbQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJk+eIibFewlI5DF2bTHCU+hQdD0MB8GA1UdIwQY MBaAFA0YypyLPX3mqsw9FCx33vZdnZoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZDhjZDEtY2Y1MS00YzE2LWEzODYt N2Y1MDQyNzFjZjkwLzEvbVQ1NGlKc1Y3Q1Vqa01YWnRNY0pUNkZCMFBRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81ZDhjZDEtY2Y1MS00YzE2LWEzODYtN2Y1MDQyNzFjZjkw LzEvRFJqS25JczlmZWFxekQwVUxIZmU5bDJkbWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCb0TANBgkqhkiG 9w0BAQsFAAOCAQEAURjEiTosWiJPXLNCxmSrmPpnCZYYfQ8PNCwndlHIm81zOKI1 DRXhE7/jJXHlB5Vx11G07tnkyCcRXLASZF2tU6lPf0f/WdnBhWX8gq+hCBP82PWQ 2/BDe7sc0mz5I5w7LyU+hOnK0xQWi7c++OuriFMsfmFydVzjvfOYpfxTSWDPSQ0E Cj4xMoYZ24HS1hshiKOg2rP4GfJ6prlY3Yei04TiRPiBPiRb/nM+NySft+MVmQ7b qy0n2+TiR3bJl85Z7PqbUU26GJEO7a0MuIZfV5Z+Ou+oBjW/qfaOrDotI89tjpG5 LLpQKhV7IeqCNZmUN7rsg1DAKjINDD0PLhbteQ== -----END CERTIFICATE-----Generated at Mon Feb 2 04:42:04 2026 by rpki-client