This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/MZuJW49Q0-iqK40OGwij3e053zY.asa File: MZuJW49Q0-iqK40OGwij3e053zY.asa (raw, json) Hash identifier: +9M2FRyYrlIfSiCaC2n7/lm/ODixjDz7d9tgpWDH54w= Subject key identifier: 31:9B:89:5B:8F:50:D3:E8:AA:2B:8D:0E:1B:08:A3:DD:ED:39:DF:36 Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5 Certificate serial: 019B47FA61494289405B91595C07CC88BE0C Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/MZuJW49Q0-iqK40OGwij3e053zY.asa Signing time: Mon 22 Dec 2025 21:32:29 +0000 ASPA not before: Mon 22 Dec 2025 21:32:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 60574 Providers: AS: 24940 AS: 33891 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:fa:61:49:42:89:40:5b:91:59:5c:07:cc:88:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5 Validity Not Before: Dec 22 21:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=319b895b8f50d3e8aa2b8d0e1b08a3dded39df36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:e7:0c:e6:39:01:c2:b5:eb:31:f1:f4:a6: 4d:62:d6:33:e7:2f:b6:ca:62:1a:0f:70:fa:c0:ae: d4:9a:20:91:b9:f8:55:23:34:0d:9c:58:03:2c:15: ed:25:a3:b6:cc:b3:a3:29:25:5a:2f:b5:60:1d:0f: c8:a2:c8:8f:9b:f4:90:1f:f7:57:38:61:f0:19:f4: 89:77:08:e5:ec:8c:ec:8d:e3:ee:0e:e6:a2:f6:4e: 6e:be:ac:81:14:d6:86:5a:be:c7:a5:67:1f:55:b7: 06:71:47:18:9c:10:5b:98:62:b0:18:45:5b:01:b5: ef:77:7e:19:b8:8b:ef:ff:b2:8c:d0:e6:ff:c2:c3: e4:a4:ed:51:c6:3a:a8:3b:96:74:26:11:3b:54:e1: 14:b5:eb:42:27:e2:1d:c1:31:8a:e1:2e:d0:e5:1e: 76:8d:25:47:85:78:7f:20:ed:85:e0:76:c3:66:61: 65:12:13:13:5f:d7:ec:f3:65:eb:98:3d:b7:8f:cd: b0:b6:01:74:82:d5:32:80:e0:b6:1c:4f:da:ca:2f: 5c:48:91:f6:c4:c7:c8:59:1f:61:c8:3c:9a:d5:b2: 40:69:f3:22:33:a2:76:43:4c:04:c5:08:4d:2c:f8: cb:24:89:03:b6:68:ea:92:e0:aa:66:c1:a5:69:41: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:89:5B:8F:50:D3:E8:AA:2B:8D:0E:1B:08:A3:DD:ED:39:DF:36 X509v3 Authority Key Identifier: keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/MZuJW49Q0-iqK40OGwij3e053zY.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 60574 Signature Algorithm: sha256WithRSAEncryption 92:7a:05:50:09:30:86:3f:d9:e9:83:bd:7f:75:e6:4c:bf:64: d0:7f:81:d8:b2:24:e4:2e:1c:26:53:e5:50:aa:62:05:5d:0c: 9e:ae:5b:25:9b:be:88:9c:68:78:18:72:e7:f5:7f:a7:c0:70: 05:81:38:c9:c7:fd:32:6d:f5:56:e5:88:0c:6c:9b:4f:13:c8: c5:73:a8:06:ff:c8:c3:93:80:04:f6:b8:a8:38:45:f1:b4:b3: c2:56:ad:91:84:0f:9e:6d:5d:58:af:d5:cf:cd:6f:f4:28:3f: a5:03:72:42:51:ac:8a:8e:fb:35:f8:39:32:bd:bd:d2:af:d2: f1:26:9e:99:d9:d0:3b:a9:a8:f6:db:5b:a0:a1:11:5d:a2:63: 0e:be:66:c2:90:17:df:7c:63:a0:43:3c:27:62:40:2f:f0:72: 02:61:77:31:f0:c2:14:73:fe:97:af:04:79:ae:08:0c:8c:2c: 28:70:38:19:f2:85:d2:d2:1c:29:13:c0:34:61:f1:29:2a:be: ae:b2:f3:bd:0b:73:a8:6b:96:e0:35:6a:d2:71:7c:a4:7a:9b: dc:67:52:4d:0d:cc:5d:69:82:04:eb:03:04:04:2f:69:85:00: 39:02:51:1c:c6:45:03:4d:68:b1:0b:a5:d2:07:be:a5:72:b2: 91:5e:ac:ad -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtH+mFJQolAW5FZXAfMiL4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOGY3ZWI0ZDI1NDhmOWNjYmYzY2IzOGU3MDJhMTkwYzEx NzQyZjUwHhcNMjUxMjIyMjEzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTliODk1YjhmNTBkM2U4YWEyYjhkMGUxYjA4YTNkZGVkMzlkZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5rnDOY5AcK16zHx9KZNYtYz5y+2 ymIaD3D6wK7UmiCRufhVIzQNnFgDLBXtJaO2zLOjKSVaL7VgHQ/IosiPm/SQH/dX OGHwGfSJdwjl7IzsjePuDuai9k5uvqyBFNaGWr7HpWcfVbcGcUcYnBBbmGKwGEVb AbXvd34ZuIvv/7KM0Ob/wsPkpO1RxjqoO5Z0JhE7VOEUtetCJ+IdwTGK4S7Q5R52 jSVHhXh/IO2F4HbDZmFlEhMTX9fs82XrmD23j82wtgF0gtUygOC2HE/ayi9cSJH2 xMfIWR9hyDya1bJAafMiM6J2Q0wExQhNLPjLJIkDtmjqkuCqZsGlaUEe7wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDGbiVuPUNPoqiuNDhsIo93tOd82MB8GA1UdIwQY MBaAFI2PfrTSVI+cy/PLOOcCoZDBF0L1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYt YWZkMjcyZGQwZmI1LzEvTVp1Slc0OVEwLWlxSzQwT0d3aWozZTA1M3pZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMjYxZWItYzdjZC00NTRkLTg0YTYtYWZkMjcyZGQwZmI1 LzEvalk5LXROSlVqNXpMODhzNDV3S2hrTUVYUXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsnjANBgkqhkiG 9w0BAQsFAAOCAQEAknoFUAkwhj/Z6YO9f3XmTL9k0H+B2LIk5C4cJlPlUKpiBV0M nq5bJZu+iJxoeBhy5/V/p8BwBYE4ycf9Mm31VuWIDGybTxPIxXOoBv/Iw5OABPa4 qDhF8bSzwlatkYQPnm1dWK/Vz81v9Cg/pQNyQlGsio77Nfg5Mr290q/S8SaemdnQ O6mo9ttboKERXaJjDr5mwpAX33xjoEM8J2JAL/ByAmF3MfDCFHP+l68Eea4IDIws KHA4GfKF0tIcKRPANGHxKSq+rrLzvQtzqGuW4DVq0nF8pHqb3GdSTQ3MXWmCBOsD BAQvaYUAOQJRHMZFA01osQul0ge+pXKykV6srQ== -----END CERTIFICATE-----Generated at Mon Feb 2 04:42:01 2026 by rpki-client