This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/IroHvVT-fL1CA6Xw3HQVfFISYaw.asa File: IroHvVT-fL1CA6Xw3HQVfFISYaw.asa (raw, json) Hash identifier: HdlzKV3zaYl517+NmI61+gCveDCkmQqdmsHAC/9LNUY= Subject key identifier: 22:BA:07:BD:54:FE:7C:BD:42:03:A5:F0:DC:74:15:7C:52:12:61:AC Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5 Certificate serial: 019B47FD1FF8CFB60BC9EBE6F82B708FA3F5 Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/IroHvVT-fL1CA6Xw3HQVfFISYaw.asa Signing time: Mon 22 Dec 2025 21:35:29 +0000 ASPA not before: Mon 22 Dec 2025 21:35:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 205071 Providers: AS: 24940 AS: 33891 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:fd:1f:f8:cf:b6:0b:c9:eb:e6:f8:2b:70:8f:a3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5 Validity Not Before: Dec 22 21:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22ba07bd54fe7cbd4203a5f0dc74157c521261ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:a4:3e:bd:3f:d5:ef:83:d7:a0:c7:2e:ef: 01:0b:68:9c:35:44:d8:57:69:df:b5:2b:d7:bc:05: 5c:7a:7b:ac:e4:d6:9f:d6:26:f8:27:77:6d:9e:05: e2:e4:c4:bc:b8:7b:fa:d2:4d:1f:c3:2c:8d:df:da: b2:ee:cd:90:aa:04:a7:51:c2:ed:bd:90:17:cf:1f: 60:ac:9b:d1:d2:c6:d9:ab:4e:a6:90:e4:f9:c9:34: 14:3d:05:fe:f2:54:14:5b:8a:e1:fd:f4:e0:96:e6: b0:fb:c0:ed:86:f6:ac:ab:f5:4c:8a:fd:0a:a1:a8: eb:c7:8b:92:b7:06:de:18:58:d2:cb:0e:00:1e:60: 2c:1a:12:56:fc:23:dc:a4:f4:1a:4b:4e:86:e6:71: ea:15:3b:39:65:d8:12:72:17:b0:58:c6:ee:ac:48: d8:15:1c:3e:2b:7d:6c:44:96:45:8d:5c:d0:f3:40: 2d:49:89:83:67:2e:be:4c:7d:08:e6:96:5e:82:35: a8:14:f6:4b:49:c0:e9:e5:ab:30:be:c5:8d:d4:7a: 9b:6b:11:d2:a1:7f:ea:7f:81:b5:be:8a:85:92:5f: 05:93:d0:81:ba:48:c0:56:65:e1:ec:eb:80:9a:09: 18:ef:76:d7:ab:8d:3e:7b:5b:3e:c1:85:56:63:61: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:07:BD:54:FE:7C:BD:42:03:A5:F0:DC:74:15:7C:52:12:61:AC X509v3 Authority Key Identifier: keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/IroHvVT-fL1CA6Xw3HQVfFISYaw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205071 Signature Algorithm: sha256WithRSAEncryption 8a:84:4f:04:c9:15:29:d2:6a:eb:d1:73:58:d7:b2:47:e1:f8: b2:3e:e1:fe:e9:24:95:11:e1:cb:99:70:b8:ad:fb:8b:52:35: b0:42:d9:a1:0d:a7:44:34:18:fd:70:cd:01:ce:85:c6:25:2c: 14:41:31:7e:94:7d:ab:b9:76:4f:37:b2:e6:62:34:20:f4:bb: e2:1e:ab:05:5f:9e:51:58:0c:c0:47:78:92:97:bd:98:e7:1a: 62:94:f1:d6:29:65:55:d4:80:e2:ed:ff:12:d9:9c:cc:0f:35: 3b:59:05:f9:18:69:5e:6b:8c:ee:06:1f:cf:f8:ac:35:8e:d0: f7:9c:8c:97:43:15:7a:95:02:8c:b7:7a:2c:ef:64:32:99:06: 69:e8:56:b8:31:8a:cf:cb:55:72:52:c1:0f:05:64:cc:b1:8c: 9d:2f:7b:00:4e:78:ab:75:de:8d:ca:8c:f3:60:0a:8f:9e:18: a7:0d:d6:00:d6:81:4c:18:21:f1:b3:3c:bf:a7:c4:49:4d:13: 15:62:a2:a0:f1:72:cf:96:ee:43:93:2b:9d:d7:4c:34:0b:ab: 99:49:8c:f6:21:29:d5:9e:5a:05:21:f8:e9:ce:57:6f:57:bb: 88:81:d0:b5:9f:62:c2:c8:c7:1e:ea:1e:53:79:36:a4:4c:bd: fe:5d:be:a9 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtH/R/4z7YLyevm+Ctwj6P1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx NzQyZjUwHhcNMjUxMjIyMjEzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJhMDdiZDU0ZmU3Y2JkNDIwM2E1ZjBkYzc0MTU3YzUyMTI2MWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd6kPr0/1e+D16DHLu8BC2icNUTY V2nftSvXvAVcenus5Naf1ib4J3dtngXi5MS8uHv60k0fwyyN39qy7s2QqgSnUcLt vZAXzx9grJvR0sbZq06mkOT5yTQUPQX+8lQUW4rh/fTgluaw+8Dthvasq/VMiv0K oajrx4uStwbeGFjSyw4AHmAsGhJW/CPcpPQaS06G5nHqFTs5ZdgSchewWMburEjY FRw+K31sRJZFjVzQ80AtSYmDZy6+TH0I5pZegjWoFPZLScDp5aswvsWN1HqbaxHS oX/qf4G1voqFkl8Fk9CBukjAVmXh7OuAmgkY73bXq40+e1s+wYVWY2EMOQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCK6B71U/ny9QgOl8Nx0FXxSEmGsMB8GA1UdIwQY MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt YWZkMjcyZGQwZmI1LzEvSXJvSHZWVC1mTDFDQTZYdzNIUVZmRklTWWF3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1 LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMhDzANBgkqhkiG 9w0BAQsFAAOCAQEAioRPBMkVKdJq69FzWNeyR+H4sj7h/ukklRHhy5lwuK37i1I1 sELZoQ2nRDQY/XDNAc6FxiUsFEExfpR9q7l2Tzey5mI0IPS74h6rBV+eUVgMwEd4 kpe9mOcaYpTx1illVdSA4u3/EtmczA81O1kF+RhpXmuM7gYfz/isNY7Q95yMl0MV epUCjLd6LO9kMpkGaehWuDGKz8tVclLBDwVkzLGMnS97AE54q3XejcqM82AKj54Y pw3WANaBTBgh8bM8v6fESU0TFWKioPFyz5buQ5MrnddMNAurmUmM9iEp1Z5aBSH4 6c5Xb1e7iIHQtZ9iwsjHHuoeU3k2pEy9/l2+qQ== -----END CERTIFICATE-----Generated at Mon Feb 2 04:41:49 2026 by rpki-client