This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/E9XmR3-Bi9_XHIyVFPe__9RBWrE.asa File: E9XmR3-Bi9_XHIyVFPe__9RBWrE.asa (raw, json) Hash identifier: ObdWbxrxyYN88ZVvVzbAmIbulsDo3X2Gi1Jf4mXfLOY= Subject key identifier: 13:D5:E6:47:7F:81:8B:DF:D7:1C:8C:95:14:F7:BF:FF:D4:41:5A:B1 Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024 Certificate serial: 019B024140F1DC65CB34705BD590114AE936 Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/E9XmR3-Bi9_XHIyVFPe__9RBWrE.asa Signing time: Tue 09 Dec 2025 08:36:29 +0000 ASPA not before: Tue 09 Dec 2025 08:36:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 8265 Providers: AS: 6453 AS: 51569 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:41:40:f1:dc:65:cb:34:70:5b:d5:90:11:4a:e9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024 Validity Not Before: Dec 9 08:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13d5e6477f818bdfd71c8c9514f7bfffd4415ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:52:fa:39:fd:1f:87:5e:04:5b:96:7e:39:93: 4a:7d:de:fe:9a:5d:fe:17:d4:77:30:9b:ae:6f:e1: a8:af:a2:10:44:6a:d5:10:ce:b0:bf:2a:17:40:c1: 45:2c:28:d2:ca:52:29:58:da:5b:99:60:63:9a:3a: 8f:4a:22:46:d9:fc:97:5e:6c:ec:7a:69:db:8f:31: d8:92:49:57:30:d0:bc:2c:6a:bb:07:d0:4c:4d:c3: 58:8d:8d:6b:49:3f:26:c4:01:e9:9f:4e:62:77:95: 10:87:1f:5e:a6:b0:d4:ca:6e:6c:51:52:c0:3c:72: 6e:0d:77:39:a9:50:79:b2:3b:ef:63:d4:6f:3d:75: 4d:53:cf:2b:bd:ee:05:c4:5a:8b:8a:6e:5a:91:b3: da:6e:4f:74:d0:b9:ee:e4:cc:64:9f:51:36:2f:c0: 67:78:ba:39:50:88:ce:39:9e:c5:23:cf:a4:69:d4: 1f:0d:1b:d6:74:cd:e4:2c:24:c7:d2:7d:c5:d0:22: e9:19:e0:85:62:35:87:ac:0a:fd:76:8f:41:05:6c: da:fd:26:a8:b3:e0:8f:48:45:4d:bc:8e:ef:80:53: b4:c2:38:7c:9d:76:d4:79:49:90:ce:d8:8e:3f:04: 30:43:8e:d2:18:fe:85:3c:ad:ed:25:ee:e1:1e:bd: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D5:E6:47:7F:81:8B:DF:D7:1C:8C:95:14:F7:BF:FF:D4:41:5A:B1 X509v3 Authority Key Identifier: keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/E9XmR3-Bi9_XHIyVFPe__9RBWrE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 8265 Signature Algorithm: sha256WithRSAEncryption 32:36:f9:66:18:21:7a:29:62:0b:85:36:a7:e2:b9:33:0e:9b: 7a:96:be:a1:f1:f3:51:49:98:ea:db:08:99:1a:08:38:68:67: eb:d8:af:13:a0:13:8b:b4:8b:1d:77:d7:20:c6:a0:76:24:d5: 2c:0f:03:e5:14:69:39:48:86:85:d5:ba:13:f0:9f:ce:01:79: d9:4a:b9:d9:14:3a:3a:a0:2d:fc:c3:a1:ef:7d:d5:f6:9c:09: d0:68:58:69:79:a9:8f:cf:c3:af:7f:43:04:36:aa:4a:29:5f: 88:ea:4d:d7:c7:ef:db:19:0d:4f:41:80:6d:08:0b:b8:34:2a: 7a:42:26:06:9b:4e:48:56:82:d2:d9:84:1e:c8:e1:1e:39:94: dd:7c:f1:3a:48:7f:41:80:09:19:48:f8:55:6c:0b:33:ac:1a: 26:67:b3:ab:20:51:c8:06:47:e9:43:02:19:a2:06:3b:9f:d2: 8a:df:c7:48:8d:9b:d0:99:a9:d4:f5:73:dc:89:d9:de:b2:c2: 3a:70:35:84:dc:f2:0f:1e:71:1a:c4:bd:78:bd:e1:d9:b7:d3: 45:81:e7:10:57:11:b9:99:63:98:88:a7:b9:25:1a:12:55:32: bb:32:9e:88:2d:9e:52:0a:03:b4:1c:33:0f:d4:d3:3b:52:1c: b1:5e:06:5d -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZsCQUDx3GXLNHBb1ZARSuk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDM0MTVjMjJlMTQxOTcyYzBkN2U3NmMyNGU4OGIyMjQy N2IwMjQwHhcNMjUxMjA5MDgzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2Q1ZTY0NzdmODE4YmRmZDcxYzhjOTUxNGY3YmZmZmQ0NDE1YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFL6Of0fh14EW5Z+OZNKfd7+ml3+ F9R3MJuub+Gor6IQRGrVEM6wvyoXQMFFLCjSylIpWNpbmWBjmjqPSiJG2fyXXmzs emnbjzHYkklXMNC8LGq7B9BMTcNYjY1rST8mxAHpn05id5UQhx9eprDUym5sUVLA PHJuDXc5qVB5sjvvY9RvPXVNU88rve4FxFqLim5akbPabk900Lnu5Mxkn1E2L8Bn eLo5UIjOOZ7FI8+kadQfDRvWdM3kLCTH0n3F0CLpGeCFYjWHrAr9do9BBWza/Sao s+CPSEVNvI7vgFO0wjh8nXbUeUmQztiOPwQwQ47SGP6FPK3tJe7hHr2qTwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFBPV5kd/gYvf1xyMlRT3v//UQVqxMB8GA1UdIwQY MBaAFFZDQVwi4UGXLA1+dsJOiLIkJ7AkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2Mt Zjk5NjdjM2FkM2U0LzEvRTlYbVIzLUJpOV9YSEl5VkZQZV9fOVJCV3JFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2MtZjk5NjdjM2FkM2U0 LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiBJMA0GCSqGSIb3 DQEBCwUAA4IBAQAyNvlmGCF6KWILhTan4rkzDpt6lr6h8fNRSZjq2wiZGgg4aGfr 2K8ToBOLtIsdd9cgxqB2JNUsDwPlFGk5SIaF1boT8J/OAXnZSrnZFDo6oC38w6Hv fdX2nAnQaFhpeamPz8Ovf0MENqpKKV+I6k3Xx+/bGQ1PQYBtCAu4NCp6QiYGm05I VoLS2YQeyOEeOZTdfPE6SH9BgAkZSPhVbAszrBomZ7OrIFHIBkfpQwIZogY7n9KK 38dIjZvQmanU9XPcidnessI6cDWE3PIPHnEaxL14veHZt9NFgecQVxG5mWOYiKe5 JRoSVTK7Mp6ILZ5SCgO0HDMP1NM7UhyxXgZd -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:06 2025 by rpki-client