This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa File: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (raw, json) Hash identifier: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE= Subject key identifier: 35:CD:4B:56:C1:73:AC:7D:DE:41:C7:C7:30:09:83:62:08:FF:A7:AE Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Certificate serial: 019B2D80BB04579791FB20003A57AFB8F623 Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa Signing time: Wed 17 Dec 2025 18:09:29 +0000 ASPA not before: Wed 17 Dec 2025 18:09:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 213333 Providers: AS: 8283 AS: 209845 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:80:bb:04:57:97:91:fb:20:00:3a:57:af:b8:f6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Validity Not Before: Dec 17 18:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=35cd4b56c173ac7dde41c7c73009836208ffa7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:21:10:ac:81:a1:7a:39:3e:16:c4:34:8d: 0e:88:97:95:27:e2:ca:de:20:3a:62:44:8a:a8:71: 1e:2b:8b:30:0f:fb:e9:5d:82:41:71:0d:b7:e7:7c: 19:d9:60:a5:ea:95:7e:40:49:c5:e6:4a:00:d6:be: 56:82:9e:04:bb:11:9e:7e:e1:ce:2f:9a:1a:4e:e2: a7:a6:b4:03:56:31:b0:b7:ca:aa:09:0d:f4:f0:cc: 0f:9a:34:36:df:ca:23:84:2b:8e:de:8b:3f:39:6c: 9a:44:94:7b:7b:c3:af:b1:ac:ab:62:da:c7:95:1f: 33:3d:8e:a6:65:35:ea:41:d1:c2:cf:a1:e8:0f:92: 99:78:03:46:c2:94:61:ef:3b:ed:5e:31:d7:be:42: e5:64:d2:f6:56:fc:3c:fb:04:a3:44:38:d9:f9:a8: 45:d3:3b:d4:9a:38:5f:e7:2a:0e:e1:a1:f6:67:4d: 59:17:0e:7f:ec:bb:83:a5:ec:ec:a9:32:d4:ca:23: a3:d8:19:42:1a:d7:89:9f:d9:16:a4:89:f2:db:bd: fd:46:84:ee:bb:84:89:0e:1f:7d:b4:88:d2:95:f3: 36:ad:c2:86:52:25:a9:fb:24:fe:92:36:45:9b:53: 83:4d:7b:d9:f9:78:ea:ae:95:92:93:d2:1d:2c:9f: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CD:4B:56:C1:73:AC:7D:DE:41:C7:C7:30:09:83:62:08:FF:A7:AE X509v3 Authority Key Identifier: keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213333 Signature Algorithm: sha256WithRSAEncryption 52:5b:63:bb:a7:72:a3:05:ad:d5:56:ea:14:02:75:a1:2e:0c: f5:de:24:d0:e1:07:7e:d9:2a:cf:52:2c:33:46:87:3a:5a:c5: c6:d4:d1:cc:30:9d:a7:00:bc:1d:a1:60:b2:a1:bd:f1:bb:2d: c6:4c:f9:29:b6:e7:1a:fd:0d:ee:63:42:4d:09:8f:c8:d7:2b: ee:9f:33:09:fa:30:81:44:15:3a:b8:db:bc:0d:7d:dd:9a:f9: 84:7c:8b:ed:e7:d4:18:fc:b4:7a:35:78:70:63:aa:b4:d7:8c: 54:42:34:a3:01:a9:6a:da:d5:d1:8b:f4:78:b4:68:8c:46:a8: cb:ab:46:fc:83:27:f3:37:0b:2d:08:d2:f2:cf:62:d6:87:6e: 84:7c:ea:d1:34:05:52:67:5c:b1:b8:f0:93:3b:21:68:02:c2: ed:c1:7b:8e:3c:ab:dc:99:1f:23:87:a8:98:5b:c9:70:8d:33: 9e:e1:70:d5:b3:9c:a8:a2:91:19:1a:fc:67:fc:fd:92:8e:da: 20:f2:34:8f:2f:56:b3:4b:35:eb:02:80:7d:bf:67:e3:08:43: 2a:c1:96:f0:a3:3f:6b:f9:91:57:fc:ca:e0:44:e2:6e:03:20: a4:e3:94:25:75:a7:5a:56:c4:12:16:b4:6d:36:24:47:0b:96: 50:79:41:e1 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZstgLsEV5eR+yAAOlevuPYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi ZmQyNDkwHhcNMjUxMjE3MTgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWNkNGI1NmMxNzNhYzdkZGU0MWM3YzczMDA5ODM2MjA4ZmZhN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnYhEKyBoXo5PhbENI0OiJeVJ+LK 3iA6YkSKqHEeK4swD/vpXYJBcQ2353wZ2WCl6pV+QEnF5koA1r5Wgp4EuxGefuHO L5oaTuKnprQDVjGwt8qqCQ308MwPmjQ238ojhCuO3os/OWyaRJR7e8OvsayrYtrH lR8zPY6mZTXqQdHCz6HoD5KZeANGwpRh7zvtXjHXvkLlZNL2Vvw8+wSjRDjZ+ahF 0zvUmjhf5yoO4aH2Z01ZFw5/7LuDpezsqTLUyiOj2BlCGteJn9kWpIny2739RoTu u4SJDh99tIjSlfM2rcKGUiWp+yT+kjZFm1ODTXvZ+XjqrpWSk9IdLJ9l4wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDXNS1bBc6x93kHHxzAJg2II/6euMB8GA1UdIwQY MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt MjFmZDM1Y2Y0YmI5LzEvTmMxTFZzRnpySDNlUWNmSE1BbURZZ2pfcDY0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5 LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNBVTANBgkqhkiG 9w0BAQsFAAOCAQEAUltju6dyowWt1VbqFAJ1oS4M9d4k0OEHftkqz1IsM0aHOlrF xtTRzDCdpwC8HaFgsqG98bstxkz5KbbnGv0N7mNCTQmPyNcr7p8zCfowgUQVOrjb vA193Zr5hHyL7efUGPy0ejV4cGOqtNeMVEI0owGpatrV0Yv0eLRojEaoy6tG/IMn 8zcLLQjS8s9i1oduhHzq0TQFUmdcsbjwkzshaALC7cF7jjyr3JkfI4eomFvJcI0z nuFw1bOcqKKRGRr8Z/z9ko7aIPI0jy9Ws0s16wKAfb9n4whDKsGW8KM/a/mRV/zK 4ETibgMgpOOUJXWnWlbEEha0bTYkRwuWUHlB4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 21:09:41 2025 by rpki-client