This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/hlO_AecNEmj4D79lmjDucZzwZB4.asa File: hlO_AecNEmj4D79lmjDucZzwZB4.asa (raw, json) Hash identifier: /6I3ZOv6LwKowpbuh2iIMzDSrB6Wbph+0AzHVvuZ8eE= Subject key identifier: 86:53:BF:01:E7:0D:12:68:F8:0F:BF:65:9A:30:EE:71:9C:F0:64:1E Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Certificate serial: 019B5C8181A5861999FB5C7C768766A6843C Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/hlO_AecNEmj4D79lmjDucZzwZB4.asa Signing time: Fri 26 Dec 2025 21:12:29 +0000 ASPA not before: Fri 26 Dec 2025 21:12:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 215960 Providers: AS: 206075 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:81:81:a5:86:19:99:fb:5c:7c:76:87:66:a6:84:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Validity Not Before: Dec 26 21:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8653bf01e70d1268f80fbf659a30ee719cf0641e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:65:2a:d4:b2:2f:1e:18:ff:7c:32:d6:80: 49:aa:78:30:3d:2b:23:a1:9f:fb:3e:46:8f:50:0e: de:21:11:f8:8c:f9:1d:5b:0f:8a:f1:03:ce:34:5e: b7:26:75:84:58:6b:dc:67:92:e8:e5:d8:dc:05:27: a8:db:a3:e1:85:11:39:24:52:e5:94:f8:d8:8d:2c: 91:5f:36:05:da:b8:4b:8a:60:2d:50:34:45:19:cd: a2:c6:92:32:13:ea:c0:a1:1e:69:b3:c6:5a:02:fb: 8b:0a:a6:6e:ea:e1:c7:7c:34:68:49:f4:a2:d5:53: ec:57:db:c8:c7:eb:30:30:af:35:b1:f6:80:c2:05: b7:9a:f3:ba:ff:9a:31:31:56:cb:57:dd:8a:da:31: a9:dd:63:86:31:14:cb:0a:39:c9:73:c8:24:e2:17: 7c:83:5c:7c:b9:64:76:98:0e:2a:55:bd:15:9d:4c: 02:cb:2e:00:bd:ce:c8:33:e7:90:02:ca:43:d1:5d: e5:11:13:70:d7:3b:cd:48:5e:74:08:5e:50:4d:68: 72:e3:94:fa:34:18:f3:50:7d:44:c7:40:94:8a:ce: 48:6c:ab:95:25:1e:9f:7c:6b:44:c2:d7:00:32:b6: b3:5f:02:12:97:9d:a6:07:98:47:de:e2:aa:3a:98: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:53:BF:01:E7:0D:12:68:F8:0F:BF:65:9A:30:EE:71:9C:F0:64:1E X509v3 Authority Key Identifier: keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/hlO_AecNEmj4D79lmjDucZzwZB4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215960 Signature Algorithm: sha256WithRSAEncryption 32:a4:03:d2:e2:13:ba:36:75:98:68:e6:7c:f2:f8:af:ac:66: 19:2a:3d:89:c0:11:c5:89:27:27:8a:f6:db:5e:6b:41:91:9f: ec:7f:d9:90:1e:e2:4a:eb:0c:3b:56:82:99:74:d7:cf:60:f9: 6a:45:62:bf:e3:4b:c3:69:a2:39:7d:7d:df:9d:0f:09:ca:7e: 3d:86:9e:6c:f9:ed:e7:96:31:5d:1d:d1:da:e4:15:88:f1:74: d0:3a:69:11:20:ba:a5:f0:2b:f0:9d:70:58:3b:69:e9:a8:b9: 52:2c:c5:e9:b4:a9:4f:cf:be:b7:5e:d3:d8:14:b1:38:0d:55: 0c:d7:c3:83:35:76:40:eb:8c:d4:e0:2d:98:43:d4:e1:59:f8: 8e:94:9b:ec:ae:de:18:2a:64:82:56:58:61:41:26:eb:5a:66: cb:19:d5:e8:25:06:57:55:8f:ae:f5:38:05:97:32:c9:49:7c: 3c:33:6f:63:e5:d8:63:ee:c1:cc:63:b0:11:f9:0f:92:2d:2c: 23:dc:71:d7:b8:76:5b:69:f3:0f:dd:f6:be:d2:fc:8f:9e:57: e4:7d:4d:ac:7c:b8:2e:4f:18:bb:ea:99:74:5e:0c:76:d6:70: 49:f9:9b:bc:a2:25:b5:78:3b:93:27:d0:15:af:03:56:f2:72: 2e:35:4c:55 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtcgYGlhhmZ+1x8dodmpoQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjNkNGFjZTczNTYxM2VjYmM1OTFkZmZjMjk4NWYzNDE3 NjY3ZDMwHhcNMjUxMjI2MjExMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjUzYmYwMWU3MGQxMjY4ZjgwZmJmNjU5YTMwZWU3MTljZjA2NDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuORlKtSyLx4Y/3wy1oBJqngwPSsj oZ/7PkaPUA7eIRH4jPkdWw+K8QPONF63JnWEWGvcZ5Lo5djcBSeo26PhhRE5JFLl lPjYjSyRXzYF2rhLimAtUDRFGc2ixpIyE+rAoR5ps8ZaAvuLCqZu6uHHfDRoSfSi 1VPsV9vIx+swMK81sfaAwgW3mvO6/5oxMVbLV92K2jGp3WOGMRTLCjnJc8gk4hd8 g1x8uWR2mA4qVb0VnUwCyy4Avc7IM+eQAspD0V3lERNw1zvNSF50CF5QTWhy45T6 NBjzUH1Ex0CUis5IbKuVJR6ffGtEwtcAMrazXwISl52mB5hH3uKqOphJ5wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFIZTvwHnDRJo+A+/ZZow7nGc8GQeMB8GA1UdIwQY MBaAFLiz1KznNWE+y8WR3/wphfNBdmfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2Et NDQyY2MzNjQ5YmFjLzEvaGxPX0FlY05FbWo0RDc5bG1qRHVjWnp3WkI0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2EtNDQyY2MzNjQ5YmFj LzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLmDANBgkqhkiG 9w0BAQsFAAOCAQEAMqQD0uITujZ1mGjmfPL4r6xmGSo9icARxYknJ4r2215rQZGf 7H/ZkB7iSusMO1aCmXTXz2D5akViv+NLw2miOX19350PCcp+PYaebPnt55YxXR3R 2uQViPF00DppESC6pfAr8J1wWDtp6ai5UizF6bSpT8++t17T2BSxOA1VDNfDgzV2 QOuM1OAtmEPU4Vn4jpSb7K7eGCpkglZYYUEm61pmyxnV6CUGV1WPrvU4BZcyyUl8 PDNvY+XYY+7BzGOwEfkPki0sI9xx17h2W2nzD932vtL8j55X5H1NrHy4Lk8Yu+qZ dF4MdtZwSfmbvKIltXg7kyfQFa8DVvJyLjVMVQ== -----END CERTIFICATE-----Generated at Mon Feb 2 04:42:06 2026 by rpki-client