This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/cLTBY0x98iSs-6Cq3vbECPm_74w.asa File: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (raw, json) Hash identifier: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc= Subject key identifier: 70:B4:C1:63:4C:7D:F2:24:AC:FB:A0:AA:DE:F6:C4:08:F9:BF:EF:8C Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63 Certificate serial: 019BFAC90B199FD9A38436128BBE36CDE080 Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/cLTBY0x98iSs-6Cq3vbECPm_74w.asa Signing time: Mon 26 Jan 2026 14:50:38 +0000 ASPA not before: Mon 26 Jan 2026 14:50:38 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 200455 Providers: AS: 3204 AS: 6939 AS: 38074 AS: 41051 AS: 44324 AS: 142064 AS: 212271 AS: 212895 AS: 215172 AS: 400304 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:c9:0b:19:9f:d9:a3:84:36:12:8b:be:36:cd:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63 Validity Not Before: Jan 26 14:50:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70b4c1634c7df224acfba0aadef6c408f9bfef8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:95:49:75:bd:d8:0f:0e:ad:b1:48:2d:50:4b: e7:e7:9f:97:2d:08:ab:a9:7d:86:4d:ac:b7:6d:53: 17:2e:42:bf:e3:1c:df:66:70:74:2d:18:35:61:97: 20:25:a9:9a:bf:ca:7b:6c:09:41:3e:5a:fb:d9:57: 5f:cf:d5:96:6c:b0:5c:cc:44:fe:ce:6b:58:af:13: 36:d2:f8:72:3a:17:87:db:2a:c9:e8:e5:1d:ee:0b: d9:cb:06:6d:4f:3c:09:b5:52:db:18:c0:d2:32:8d: 4e:c8:1b:b9:5c:28:76:16:03:15:64:bf:c9:ae:ff: b7:9f:d6:6d:9f:28:37:15:43:c3:8c:ee:e0:0d:33: d4:a1:ae:36:8b:09:c1:8f:4f:34:99:cc:b1:d1:d7: 0f:1a:bd:d3:0c:e8:ae:fa:62:20:d0:3a:c0:89:60: 24:a4:eb:2e:ec:cd:a7:8d:fc:77:6e:65:73:01:e9: 2d:f6:1d:b2:5a:89:4f:20:f9:b8:51:18:5f:18:d5: 18:d3:7f:eb:48:fe:aa:48:e7:24:85:9a:93:d6:0b: 95:ba:77:19:b2:79:33:e6:d2:5e:ec:f1:c7:87:ef: 14:0c:20:06:38:78:0b:98:02:c1:10:12:82:93:32: 3e:32:c4:7f:6d:b6:f0:7a:a8:96:79:53:95:5c:fb: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:C1:63:4C:7D:F2:24:AC:FB:A0:AA:DE:F6:C4:08:F9:BF:EF:8C X509v3 Authority Key Identifier: keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/cLTBY0x98iSs-6Cq3vbECPm_74w.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 200455 Signature Algorithm: sha256WithRSAEncryption 82:07:51:bc:2f:14:71:f5:a5:ad:f6:69:9f:b4:73:b4:e1:22: 09:62:c7:34:7b:f8:e2:7b:97:22:9f:4d:96:69:f0:6b:99:30: e6:78:6c:b5:0e:bf:b5:b1:2e:fa:0e:0c:2b:23:48:30:41:da: 3e:b1:6f:bf:81:cd:d5:75:53:48:6a:8d:78:06:0b:0d:69:2e: 46:98:a3:3f:4d:3c:a3:1f:f5:d2:2d:c7:31:e3:da:57:18:33: c9:d9:07:b7:95:de:f9:91:3e:63:e9:e6:6f:57:9b:cf:b0:6b: 4a:49:34:f5:ee:70:06:91:ed:a5:78:8c:96:b0:d3:81:99:79: 1d:26:a1:e0:41:3c:2b:17:c5:27:c8:a7:4a:5d:7b:21:86:ca: d5:58:94:0f:26:13:07:95:61:f4:91:93:96:86:71:e1:f3:8a: 2a:54:6d:94:6a:52:6a:c4:49:9e:e3:35:4f:87:0f:ba:bf:53: 8d:26:40:29:88:03:f0:c1:9b:42:19:5e:97:78:d0:f7:f5:97: 59:82:8f:97:4d:2e:14:a6:3c:bd:ff:84:39:eb:a0:3f:56:e7: 63:14:aa:a9:0e:00:f7:95:3a:22:8d:98:e2:e5:a2:fd:99:31: 28:5d:bb:d1:c7:a2:fe:7b:ea:ad:7b:b0:42:bb:e5:5e:9d:9a: fc:b7:68:61 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZv6yQsZn9mjhDYSi742zeCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWFhYTM2MTUwZWUxNTVjM2I1MWFkOWM3MDdmNmM0M2Jm MmJlNjMwHhcNMjYwMTI2MTQ1MDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGI0YzE2MzRjN2RmMjI0YWNmYmEwYWFkZWY2YzQwOGY5YmZlZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25VJdb3YDw6tsUgtUEvn55+XLQir qX2GTay3bVMXLkK/4xzfZnB0LRg1YZcgJamav8p7bAlBPlr72Vdfz9WWbLBczET+ zmtYrxM20vhyOheH2yrJ6OUd7gvZywZtTzwJtVLbGMDSMo1OyBu5XCh2FgMVZL/J rv+3n9Ztnyg3FUPDjO7gDTPUoa42iwnBj080mcyx0dcPGr3TDOiu+mIg0DrAiWAk pOsu7M2njfx3bmVzAekt9h2yWolPIPm4URhfGNUY03/rSP6qSOckhZqT1guVuncZ snkz5tJe7PHHh+8UDCAGOHgLmALBEBKCkzI+MsR/bbbweqiWeVOVXPtugQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHC0wWNMffIkrPugqt72xAj5v++MMB8GA1UdIwQY MBaAFHWaqjYVDuFVw7Ua2ccH9sQ78r5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUt NzNkMTBkNWI5ZmVjLzEvY0xUQlkweDk4aVNzLTZDcTN2YkVDUG1fNzR3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUtNzNkMTBkNWI5ZmVj LzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPBzANBgkqhkiG 9w0BAQsFAAOCAQEAggdRvC8UcfWlrfZpn7RztOEiCWLHNHv44nuXIp9Nlmnwa5kw 5nhstQ6/tbEu+g4MKyNIMEHaPrFvv4HN1XVTSGqNeAYLDWkuRpijP008ox/10i3H MePaVxgzydkHt5Xe+ZE+Y+nmb1ebz7BrSkk09e5wBpHtpXiMlrDTgZl5HSah4EE8 KxfFJ8inSl17IYbK1ViUDyYTB5Vh9JGTloZx4fOKKlRtlGpSasRJnuM1T4cPur9T jSZAKYgD8MGbQhlel3jQ9/WXWYKPl00uFKY8vf+EOeugP1bnYxSqqQ4A95U6Io2Y 4uWi/ZkxKF270cei/nvqrXuwQrvlXp2a/LdoYQ== -----END CERTIFICATE-----Generated at Thu Jan 29 03:47:04 2026 by rpki-client