This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/6tfL7A5QJDSI_Y55TqUNwh3A628.asa File: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (raw, json) Hash identifier: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA= Subject key identifier: EA:D7:CB:EC:0E:50:24:34:88:FD:8E:79:4E:A5:0D:C2:1D:C0:EB:6F Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134 Certificate serial: 019BC65DDD83023EA120C83C937B6AC80BA8 Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/6tfL7A5QJDSI_Y55TqUNwh3A628.asa Signing time: Fri 16 Jan 2026 10:33:18 +0000 ASPA not before: Fri 16 Jan 2026 10:33:18 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 202649 Providers: AS: 55285 AS: 393905 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:5d:dd:83:02:3e:a1:20:c8:3c:93:7b:6a:c8:0b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134 Validity Not Before: Jan 16 10:33:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ead7cbec0e50243488fd8e794ea50dc21dc0eb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:71:09:80:bc:18:e3:2d:6d:8d:29:3b:7e:46: 7c:25:0f:8a:a4:a7:3e:bd:f7:ce:48:73:10:0a:42: 25:46:81:5b:78:b5:54:a6:46:72:8a:a8:4a:3e:4d: f7:56:23:02:9b:89:35:7c:83:82:b3:98:57:4f:de: e7:52:47:67:25:84:40:6f:b9:f1:02:0b:19:4c:2d: 35:0a:0d:2e:3e:e4:c5:2b:29:94:fa:c6:d5:d8:53: fe:43:5e:cf:ca:f0:63:74:3a:3e:49:3f:a7:36:6d: 48:bf:1e:4e:4b:f9:aa:1e:68:2a:c9:57:f6:0d:8c: d0:c7:7d:25:8e:8c:ea:0e:5b:26:b5:cb:4d:cf:6a: 17:e3:5f:b0:03:5b:ad:55:f2:0a:1b:27:1e:ab:6d: 37:46:a7:63:ef:60:0e:86:dd:ec:61:23:c7:86:93: 5b:38:43:07:22:8e:93:d7:0f:1b:ca:c3:ca:a7:52: 99:a7:46:63:cf:c0:28:67:1e:3c:f5:92:29:37:59: 2d:8c:0d:5c:bb:02:57:73:41:3a:c3:15:9e:9c:c4: a8:bc:b9:f9:8d:40:5a:ba:30:9a:0e:88:78:67:96: a4:b6:88:e1:e7:64:04:81:c1:41:73:5a:5a:da:69: 24:71:82:8b:f4:55:8c:9b:b5:94:ac:1c:1e:1a:e6: 56:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D7:CB:EC:0E:50:24:34:88:FD:8E:79:4E:A5:0D:C2:1D:C0:EB:6F X509v3 Authority Key Identifier: keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/6tfL7A5QJDSI_Y55TqUNwh3A628.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202649 Signature Algorithm: sha256WithRSAEncryption 8a:14:0d:0b:5f:cb:b4:95:a6:bd:f3:6e:15:c4:6d:c5:e9:6e: 4a:f4:c6:0e:2e:0d:73:a6:73:5a:da:f4:cf:42:8c:5c:5f:ac: bf:cb:97:db:59:92:57:d3:51:67:f3:38:36:d7:4c:17:d1:6a: 6c:ae:ea:c9:b1:60:18:27:7b:11:37:59:16:33:2e:23:78:b1: 99:28:6c:26:59:1f:81:7a:a7:b2:73:3b:0d:bc:e1:d2:5e:8a: c9:cb:b8:ce:94:97:a6:c6:80:56:40:bf:74:05:8d:ad:fc:d3: bd:1f:3f:3a:3f:62:b5:ad:56:b2:ca:b3:08:b0:5c:31:4d:95: 88:e7:da:a1:f2:7f:2c:3a:3f:1f:79:35:d8:1f:c3:15:fe:fd: 98:12:7d:94:df:a3:f0:00:e6:40:3c:6c:fe:e0:13:b3:8c:7d: 4b:fd:4d:ed:33:8d:eb:b9:79:a1:30:02:f4:60:2f:62:6a:50: bd:12:a2:b7:c2:78:cf:df:49:c8:5a:70:6d:f7:ff:b3:a6:4b: 80:6a:8a:72:b9:10:4e:0f:c4:65:83:80:e3:6f:9b:85:48:d2: da:5c:c6:b2:e7:3c:2a:90:c5:08:8c:b9:54:4f:13:19:44:39: a8:ae:02:7d:5e:39:b1:ff:e4:01:5b:d5:51:43:cf:15:c4:43: 49:fa:d4:d0 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvGXd2DAj6hIMg8k3tqyAuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmI5ZjQzYTQ2ZjA1OTgyN2E5ZGVjMzY2ZDE0OTZkNjYw ODkxMzQwHhcNMjYwMTE2MTAzMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWQ3Y2JlYzBlNTAyNDM0ODhmZDhlNzk0ZWE1MGRjMjFkYzBlYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XEJgLwY4y1tjSk7fkZ8JQ+KpKc+ vffOSHMQCkIlRoFbeLVUpkZyiqhKPk33ViMCm4k1fIOCs5hXT97nUkdnJYRAb7nx AgsZTC01Cg0uPuTFKymU+sbV2FP+Q17PyvBjdDo+ST+nNm1Ivx5OS/mqHmgqyVf2 DYzQx30ljozqDlsmtctNz2oX41+wA1utVfIKGyceq203Rqdj72AOht3sYSPHhpNb OEMHIo6T1w8bysPKp1KZp0Zjz8AoZx489ZIpN1ktjA1cuwJXc0E6wxWenMSovLn5 jUBaujCaDoh4Z5aktojh52QEgcFBc1pa2mkkcYKL9FWMm7WUrBweGuZWZQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFOrXy+wOUCQ0iP2OeU6lDcIdwOtvMB8GA1UdIwQY MBaAFDr7n0OkbwWYJ6new2bRSW1mCJE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUt NzE5M2UxYjA2NmMzLzEvNnRmTDdBNVFKRFNJX1k1NVRxVU53aDNBNjI4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80MjJlOTktYWY1ZS00MmQ3LTkwNWUtNzE5M2UxYjA2NmMz LzEvT3Z1ZlE2UnZCWmducWQ3RFp0RkpiV1lJa1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXmTANBgkqhkiG 9w0BAQsFAAOCAQEAihQNC1/LtJWmvfNuFcRtxeluSvTGDi4Nc6ZzWtr0z0KMXF+s v8uX21mSV9NRZ/M4NtdMF9FqbK7qybFgGCd7ETdZFjMuI3ixmShsJlkfgXqnsnM7 Dbzh0l6Kycu4zpSXpsaAVkC/dAWNrfzTvR8/Oj9ita1WssqzCLBcMU2ViOfaofJ/ LDo/H3k12B/DFf79mBJ9lN+j8ADmQDxs/uATs4x9S/1N7TON67l5oTAC9GAvYmpQ vRKit8J4z99JyFpwbff/s6ZLgGqKcrkQTg/EZYOA42+bhUjS2lzGsuc8KpDFCIy5 VE8TGUQ5qK4CfV45sf/kAVvVUUPPFcRDSfrU0A== -----END CERTIFICATE-----Generated at Mon Feb 2 04:41:44 2026 by rpki-client