This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/2vfd_kX6R8_1pSce-qH7ueF_CFI.asa File: 2vfd_kX6R8_1pSce-qH7ueF_CFI.asa (raw, json) Hash identifier: gyU2q6SGexsT0na8dPH6q8my1zwHUMQLEgtgSUYyBL0= Subject key identifier: DA:F7:DD:FE:45:FA:47:CF:F5:A5:27:1E:FA:A1:FB:B9:E1:7F:08:52 Certificate issuer: /CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc Certificate serial: 019C0532EB18D502A94103CC7352C83C533E Authority key identifier: C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/2vfd_kX6R8_1pSce-qH7ueF_CFI.asa Signing time: Wed 28 Jan 2026 15:22:28 +0000 ASPA not before: Wed 28 Jan 2026 15:22:28 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 208038 Providers: AS: 3255 AS: 15895 AS: 21497 AS: 211509 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.mft rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:32:eb:18:d5:02:a9:41:03:cc:73:52:c8:3c:53:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9bb2c148ef0ee00ff5a221af1bc61c7e18aa4bc Validity Not Before: Jan 28 15:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=daf7ddfe45fa47cff5a5271efaa1fbb9e17f0852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c1:51:a1:06:17:dd:aa:d0:fa:63:37:e0:7b: 1c:12:4e:e4:64:ef:da:14:99:58:81:9c:31:e1:37: ec:90:55:e6:0a:09:46:a4:8b:e5:ea:72:23:93:9f: 89:9f:44:7f:70:18:b5:2d:56:61:c2:be:13:f6:84: f6:b4:13:d5:03:1a:37:21:53:5a:c9:6c:b6:34:e7: b4:7b:42:4a:4e:b9:42:5d:7b:9f:4b:57:1f:4a:b8: 88:1a:1d:7f:6d:52:cf:1b:d1:54:1c:8e:df:71:3e: 88:81:fb:fc:bb:72:19:bb:79:9e:38:b7:c2:e5:82: 85:78:a6:5e:26:ca:69:b0:af:be:56:fc:f1:51:49: df:8d:c9:a1:68:f2:44:92:fb:cf:fe:95:73:24:27: be:ad:e5:7f:36:f0:fa:25:1c:0d:b1:c0:f3:9e:3d: 29:66:b7:3a:1a:b9:56:9d:0b:cb:89:3f:13:56:c5: 49:ad:89:0b:9a:e2:1d:18:98:48:21:43:69:ff:15: b5:b6:96:29:a8:79:3f:52:da:25:e5:3a:42:c7:bc: 2b:5e:51:33:11:26:d5:43:6c:b6:27:b2:3b:be:ed: a4:3d:7a:7e:02:2d:67:4b:65:be:92:33:ec:65:f8: ff:34:20:0f:dd:03:10:23:d4:94:36:78:34:4d:27: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F7:DD:FE:45:FA:47:CF:F5:A5:27:1E:FA:A1:FB:B9:E1:7F:08:52 X509v3 Authority Key Identifier: keyid:C9:BB:2C:14:8E:F0:EE:00:FF:5A:22:1A:F1:BC:61:C7:E1:8A:A4:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybssFI7w7gD_WiIa8bxhx-GKpLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/2vfd_kX6R8_1pSce-qH7ueF_CFI.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c796-9d24-405a-9d75-2ea7098fe885/1/ybssFI7w7gD_WiIa8bxhx-GKpLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208038 Signature Algorithm: sha256WithRSAEncryption c1:ff:76:14:e6:48:15:c0:bb:a1:5a:07:8c:1e:ab:57:da:7c: 59:54:87:db:be:39:52:f7:2e:30:b7:09:9f:a0:2f:6a:27:54: 0f:1f:f8:aa:11:9d:e6:de:7d:6c:2c:6b:06:82:f5:e4:92:27: 7d:1f:86:3b:39:3f:12:1e:98:9b:97:eb:7c:db:c4:e7:64:8c: de:9a:6d:b1:93:c5:a8:c2:2b:6f:22:33:9d:60:e9:b8:a3:04: cc:69:c8:14:07:3d:8e:3e:d4:c1:30:98:de:b9:11:aa:3b:91: 37:bf:81:56:c6:b8:5d:b7:37:aa:87:bc:5f:ca:b5:11:27:8b: 2a:0b:ab:a0:6e:d2:75:c2:ff:30:f8:fa:8a:c9:a0:43:b2:d1: b4:ba:c2:9c:c4:ac:02:26:4a:21:3e:87:79:f6:ee:9c:4a:60: f6:e1:b3:ce:9b:ee:64:70:52:c6:ce:30:6f:6a:65:bb:09:08: 0f:c9:96:65:d9:6d:6c:ed:0a:26:ad:af:0f:70:2c:5e:34:3b: 48:4e:c5:51:2d:73:54:30:db:09:31:0a:e8:f0:67:81:39:aa: be:c5:a7:03:41:5e:68:a1:1d:4f:f4:61:65:90:cd:a5:cc:3c: 81:78:20:cd:26:01:28:9c:4d:4a:92:fe:c8:b1:3d:e9:95:28: 1d:1a:bc:ec -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwFMusY1QKpQQPMc1LIPFM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YmIyYzE0OGVmMGVlMDBmZjVhMjIxYWYxYmM2MWM3ZTE4 YWE0YmMwHhcNMjYwMTI4MTUyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWY3ZGRmZTQ1ZmE0N2NmZjVhNTI3MWVmYWExZmJiOWUxN2YwODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsFRoQYX3arQ+mM34HscEk7kZO/a FJlYgZwx4TfskFXmCglGpIvl6nIjk5+Jn0R/cBi1LVZhwr4T9oT2tBPVAxo3IVNa yWy2NOe0e0JKTrlCXXufS1cfSriIGh1/bVLPG9FUHI7fcT6Igfv8u3IZu3meOLfC 5YKFeKZeJsppsK++VvzxUUnfjcmhaPJEkvvP/pVzJCe+reV/NvD6JRwNscDznj0p Zrc6GrlWnQvLiT8TVsVJrYkLmuIdGJhIIUNp/xW1tpYpqHk/Utol5TpCx7wrXlEz ESbVQ2y2J7I7vu2kPXp+Ai1nS2W+kjPsZfj/NCAP3QMQI9SUNng0TScYcwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNr33f5F+kfP9aUnHvqh+7nhfwhSMB8GA1UdIwQY MBaAFMm7LBSO8O4A/1oiGvG8YcfhiqS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUt MmVhNzA5OGZlODg1LzEvMnZmZF9rWDZSOF8xcFNjZS1xSDd1ZUZfQ0ZJLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zMGM3OTYtOWQyNC00MDVhLTlkNzUtMmVhNzA5OGZlODg1 LzEveWJzc0ZJN3c3Z0RfV2lJYThieGh4LUdLcEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMspjANBgkqhkiG 9w0BAQsFAAOCAQEAwf92FOZIFcC7oVoHjB6rV9p8WVSH2745UvcuMLcJn6AvaidU Dx/4qhGd5t59bCxrBoL15JInfR+GOzk/Eh6Ym5frfNvE52SM3pptsZPFqMIrbyIz nWDpuKMEzGnIFAc9jj7UwTCY3rkRqjuRN7+BVsa4Xbc3qoe8X8q1ESeLKguroG7S dcL/MPj6ismgQ7LRtLrCnMSsAiZKIT6HefbunEpg9uGzzpvuZHBSxs4wb2pluwkI D8mWZdltbO0KJq2vD3AsXjQ7SE7FUS1zVDDbCTEK6PBngTmqvsWnA0FeaKEdT/Rh ZZDNpcw8gXggzSYBKJxNSpL+yLE96ZUoHRq87A== -----END CERTIFICATE-----Generated at Mon Feb 2 04:41:45 2026 by rpki-client