This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/ZFXp04liA97zf3zh4neEvtk3ie8.asa File: ZFXp04liA97zf3zh4neEvtk3ie8.asa (raw, json) Hash identifier: cIRV8SOkhq7w5WXsE++0aN0EFAl2RW4qpxwXHeP91R0= Subject key identifier: 64:55:E9:D3:89:62:03:DE:F3:7F:7C:E1:E2:77:84:BE:D9:37:89:EF Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5 Certificate serial: 019B4BA20B725BA7F87735F9789CBD12022A Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/ZFXp04liA97zf3zh4neEvtk3ie8.asa Signing time: Tue 23 Dec 2025 14:34:29 +0000 ASPA not before: Tue 23 Dec 2025 14:34:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 206260 Providers: AS: 2116 AS: 34087 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:a2:0b:72:5b:a7:f8:77:35:f9:78:9c:bd:12:02:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5 Validity Not Before: Dec 23 14:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6455e9d3896203def37f7ce1e27784bed93789ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:03:de:d5:68:ad:51:5b:6a:98:18:35:b9: 72:59:af:c5:5a:49:e5:51:43:4c:fb:96:f8:8b:38: 53:fc:bb:df:9b:cc:79:e2:95:fc:39:7c:1d:cf:c7: b7:de:9c:ed:64:be:8f:c5:a7:89:c5:2c:da:6b:ce: 09:9c:6a:ed:ba:9d:cb:14:e6:e6:17:1f:7a:e6:5d: 49:ff:6e:44:2a:99:fa:82:8b:44:6e:9f:2a:53:b1: fb:e3:fb:3a:f2:4a:c8:c4:2f:f9:a7:13:72:a7:2a: 66:ed:e2:10:23:bc:24:1a:9a:33:1a:17:97:99:cb: ee:52:32:e4:ef:1e:d3:dc:de:47:2e:86:90:dc:28: 43:a4:0c:ea:3c:79:52:63:a4:be:fe:2a:f8:a2:dc: 4a:f7:b3:20:50:06:6d:96:ca:10:87:89:dc:b2:7c: 59:7b:9d:a6:2a:f3:2a:a0:3f:48:f0:84:46:86:66: 8b:b7:23:3d:60:90:6a:f5:18:ff:7a:97:37:ac:51: 4f:38:45:cd:31:87:73:0b:e8:29:7f:92:50:66:13: b3:14:a3:81:40:e8:ac:36:d5:19:5b:eb:b3:c1:d7: f8:fe:9e:5a:6a:6e:b1:6b:93:98:b1:0a:ea:06:cf: 12:3e:78:da:72:17:39:e7:c3:a5:12:d2:be:fa:8f: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:55:E9:D3:89:62:03:DE:F3:7F:7C:E1:E2:77:84:BE:D9:37:89:EF X509v3 Authority Key Identifier: keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/ZFXp04liA97zf3zh4neEvtk3ie8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206260 Signature Algorithm: sha256WithRSAEncryption 63:dc:0f:f1:44:2f:57:aa:c4:0c:13:be:70:f8:31:6e:35:ac: f3:e0:44:b5:ea:21:ad:ec:8f:e2:6a:0a:66:ef:43:24:cb:4a: 97:f1:11:15:05:f8:cb:2c:14:78:c5:4f:4e:1a:09:0d:9a:f5: 11:50:80:a1:30:13:90:48:34:98:3d:4a:ca:c5:83:3c:78:dd: 68:3f:80:4e:cf:88:60:f8:5f:e5:7f:9e:82:e1:6c:4f:1e:d6: 85:be:ea:76:80:0a:8f:14:d6:8e:1d:06:00:4f:ee:ad:b3:14: 2e:f7:68:fb:a9:47:cc:8b:89:1c:e8:8b:4c:14:ff:30:c7:78: 9e:bf:50:b6:43:b9:1c:e6:04:43:46:f9:53:f0:f0:30:9a:b2: 1c:11:06:e2:c1:74:c1:ac:29:7e:90:2b:38:ec:a8:48:bd:fc: 5a:17:cc:64:64:a7:f7:af:5e:52:6c:e3:69:b3:12:d8:9d:2f: 4e:b8:98:af:4f:ae:8d:c4:1b:b5:f5:93:fa:5d:76:ec:13:40: d8:8f:96:6e:51:43:d1:9e:cb:4d:75:4d:68:3d:55:af:d2:01: 39:4b:b3:b7:32:42:ff:13:df:ed:13:c2:16:4a:50:57:93:e7: 06:00:b5:68:a1:b2:6c:62:06:0d:c4:a9:df:0a:ef:6b:2f:ce: 77:a0:86:ac -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtLogtyW6f4dzX5eJy9EgIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjlhOTY5NTI3NzdmMTA3NDMzODMwM2VjYjY1MDI1YzRl MmI4YjUwHhcNMjUxMjIzMTQzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDU1ZTlkMzg5NjIwM2RlZjM3ZjdjZTFlMjc3ODRiZWQ5Mzc4OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6YD3tVorVFbapgYNblyWa/FWknl UUNM+5b4izhT/Lvfm8x54pX8OXwdz8e33pztZL6PxaeJxSzaa84JnGrtup3LFObm Fx965l1J/25EKpn6gotEbp8qU7H74/s68krIxC/5pxNypypm7eIQI7wkGpozGheX mcvuUjLk7x7T3N5HLoaQ3ChDpAzqPHlSY6S+/ir4otxK97MgUAZtlsoQh4ncsnxZ e52mKvMqoD9I8IRGhmaLtyM9YJBq9Rj/epc3rFFPOEXNMYdzC+gpf5JQZhOzFKOB QOisNtUZW+uzwdf4/p5aam6xa5OYsQrqBs8SPnjachc558OlEtK++o+BlwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFGRV6dOJYgPe83984eJ3hL7ZN4nvMB8GA1UdIwQY MBaAFEL5qWlSd38QdDODA+y2UCXE4ri1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUt NzdmYTI5MTI5OTRkLzEvWkZYcDA0bGlBOTd6ZjN6aDRuZUV2dGszaWU4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yZjdiYzUtYTAzNi00MjE5LWFkOGUtNzdmYTI5MTI5OTRk LzEvUXZtcGFWSjNmeEIwTTRNRDdMWlFKY1RpdUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMltDANBgkqhkiG 9w0BAQsFAAOCAQEAY9wP8UQvV6rEDBO+cPgxbjWs8+BEteohreyP4moKZu9DJMtK l/ERFQX4yywUeMVPThoJDZr1EVCAoTATkEg0mD1KysWDPHjdaD+ATs+IYPhf5X+e guFsTx7Whb7qdoAKjxTWjh0GAE/urbMULvdo+6lHzIuJHOiLTBT/MMd4nr9QtkO5 HOYEQ0b5U/DwMJqyHBEG4sF0wawpfpArOOyoSL38WhfMZGSn969eUmzjabMS2J0v TriYr0+ujcQbtfWT+l127BNA2I+WblFD0Z7LTXVNaD1Vr9IBOUuztzJC/xPf7RPC FkpQV5PnBgC1aKGybGIGDcSp3wrvay/Od6CGrA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:21 2026 by rpki-client