This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/z7Q7Uc4sfRearIOg2fguIub7LO8.asa File: z7Q7Uc4sfRearIOg2fguIub7LO8.asa (raw, json) Hash identifier: 8s++qk0Ww4g7wtu1bl1zax9iy1ShimKiVPRsQryJkyc= Subject key identifier: CF:B4:3B:51:CE:2C:7D:17:9A:AC:83:A0:D9:F8:2E:22:E6:FB:2C:EF Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3 Certificate serial: 019B64DE01AC1898B31BF4C8614F044A5832 Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/z7Q7Uc4sfRearIOg2fguIub7LO8.asa Signing time: Sun 28 Dec 2025 12:10:29 +0000 ASPA not before: Sun 28 Dec 2025 12:10:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 210861 Providers: AS: 15576 AS: 39040 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:de:01:ac:18:98:b3:1b:f4:c8:61:4f:04:4a:58:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3 Validity Not Before: Dec 28 12:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfb43b51ce2c7d179aac83a0d9f82e22e6fb2cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:c6:fa:d4:86:4f:db:7e:b7:12:5c:67:f3: 45:2c:21:db:43:d6:e2:ff:3b:2b:bd:00:3d:1b:36: 90:cc:75:29:f9:c6:ec:e1:2b:82:60:d1:96:25:06: cf:65:66:58:21:3b:95:61:a2:c0:bf:e7:f2:62:11: 0b:ef:c0:0c:e2:6e:29:d6:3c:35:87:8e:26:6f:c2: 13:b0:de:f5:1d:59:a6:4b:95:95:8f:4e:01:55:7a: a5:0e:ea:ce:d6:25:e2:90:2f:26:e7:95:df:42:74: 05:73:ad:d0:10:d7:cb:ee:f3:c4:e3:fd:d5:d1:9a: b5:74:64:bc:46:eb:f6:b6:51:56:36:ac:6c:b4:0a: a2:ef:e3:9a:6a:4a:be:57:67:03:12:eb:0e:76:c5: ca:37:0a:af:58:bb:41:d2:98:5e:a9:26:6e:ce:81: c1:39:85:4b:c5:19:e5:c1:56:64:5d:81:03:96:c7: 4a:a0:6d:1f:af:bf:f5:30:20:04:c1:6e:ef:2d:1a: b2:86:c7:00:e5:e0:be:f3:d0:92:06:16:ec:1d:fd: 25:b1:15:a7:54:5f:42:83:64:90:7d:6b:2b:28:65: c9:ac:e7:f5:c0:cb:49:fd:af:ec:1e:78:19:99:10: 23:36:0f:55:7c:f1:f5:5a:45:7e:7e:bb:09:2b:06: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B4:3B:51:CE:2C:7D:17:9A:AC:83:A0:D9:F8:2E:22:E6:FB:2C:EF X509v3 Authority Key Identifier: keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/z7Q7Uc4sfRearIOg2fguIub7LO8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210861 Signature Algorithm: sha256WithRSAEncryption 47:6c:d8:a3:c4:d4:99:2d:fe:68:20:7c:4c:a9:24:2c:b9:58: 37:25:52:a9:fd:78:af:11:db:dc:f6:35:4e:d4:9e:8d:6a:aa: db:05:4f:6e:7c:6b:82:3b:e9:0a:70:8a:0e:7e:ff:47:ca:fd: 0d:ba:8f:b1:83:31:11:4b:56:82:49:e7:09:0e:01:32:35:86: 2f:74:b0:03:d8:c8:3d:bf:e0:17:76:74:12:ff:44:b8:80:0d: ab:6e:3e:0e:c4:2c:19:8d:c8:94:34:87:d7:9b:dd:34:ca:b2: 63:55:fc:93:6d:65:7a:1b:c7:8e:98:cf:5a:a3:22:01:f5:d1: 30:34:62:92:23:de:a8:72:48:63:0f:51:28:7f:f9:e8:e1:84: bf:03:b9:b9:23:bb:58:92:60:b7:73:ef:22:5c:5c:4f:60:bf: 15:98:5f:a2:c7:2b:48:ca:dd:af:55:a4:7e:c5:2f:4e:1a:42: 13:36:0b:74:73:6a:84:95:bb:7c:ee:5c:59:7a:e2:cd:75:40: 5c:7b:f2:9d:fd:c6:fe:fb:7a:62:f6:8b:48:e5:8e:fc:9d:5d: 5f:97:26:b0:f2:db:24:36:30:bc:1f:22:aa:39:40:08:4c:72: c8:3b:98:5c:90:fb:61:45:a4:5d:82:b0:ca:ca:e6:3d:a3:48: 23:9f:2d:b1 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtk3gGsGJizG/TIYU8ESlgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmE4ZDY0ZTkwMWIzOWI1MDFlZDM2OTNlYzI3NDMwNzEz ODg2ZTMwHhcNMjUxMjI4MTIxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmI0M2I1MWNlMmM3ZDE3OWFhYzgzYTBkOWY4MmUyMmU2ZmIyY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAbG+tSGT9t+txJcZ/NFLCHbQ9bi /zsrvQA9GzaQzHUp+cbs4SuCYNGWJQbPZWZYITuVYaLAv+fyYhEL78AM4m4p1jw1 h44mb8ITsN71HVmmS5WVj04BVXqlDurO1iXikC8m55XfQnQFc63QENfL7vPE4/3V 0Zq1dGS8Ruv2tlFWNqxstAqi7+Oaakq+V2cDEusOdsXKNwqvWLtB0pheqSZuzoHB OYVLxRnlwVZkXYEDlsdKoG0fr7/1MCAEwW7vLRqyhscA5eC+89CSBhbsHf0lsRWn VF9Cg2SQfWsrKGXJrOf1wMtJ/a/sHngZmRAjNg9VfPH1WkV+frsJKwYQ9wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFM+0O1HOLH0XmqyDoNn4LiLm+yzvMB8GA1UdIwQY MBaAFGa6jWTpAbObUB7TaT7CdDBxOIbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEt MGIzZTdlYmU0YWMyLzEvejdRN1VjNHNmUmVhcklPZzJmZ3VJdWI3TE84LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEtMGIzZTdlYmU0YWMy LzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM3rTANBgkqhkiG 9w0BAQsFAAOCAQEAR2zYo8TUmS3+aCB8TKkkLLlYNyVSqf14rxHb3PY1TtSejWqq 2wVPbnxrgjvpCnCKDn7/R8r9DbqPsYMxEUtWgknnCQ4BMjWGL3SwA9jIPb/gF3Z0 Ev9EuIANq24+DsQsGY3IlDSH15vdNMqyY1X8k21lehvHjpjPWqMiAfXRMDRikiPe qHJIYw9RKH/56OGEvwO5uSO7WJJgt3PvIlxcT2C/FZhfoscrSMrdr1WkfsUvThpC EzYLdHNqhJW7fO5cWXrizXVAXHvynf3G/vt6YvaLSOWO/J1dX5cmsPLbJDYwvB8i qjlACExyyDuYXJD7YUWkXYKwysrmPaNII58tsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:17 2026 by rpki-client