This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa File: qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa (raw, json) Hash identifier: +Jw2Q4FKG2QkwU/uXp8CWjul2mV/WblFFkYVNeXAnL8= Subject key identifier: A8:E2:89:CC:4B:6A:D8:85:8A:38:A7:20:17:A4:A9:7B:D9:03:38:89 Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Certificate serial: 019BB2E81AD905C60F0244DB3DC8A1886A6F Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa Signing time: Mon 12 Jan 2026 15:51:54 +0000 ASPA not before: Mon 12 Jan 2026 15:51:54 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 208437 Providers: AS: 9002 AS: 41720 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:e8:1a:d9:05:c6:0f:02:44:db:3d:c8:a1:88:6a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Validity Not Before: Jan 12 15:51:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e289cc4b6ad8858a38a72017a4a97bd9033889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:48:d8:e5:bf:a6:25:5b:c5:3e:ad:04:26: 22:9b:f8:0f:03:d9:10:58:32:43:6e:af:bb:16:f6: 57:65:f1:11:45:82:70:cc:08:0c:a6:5d:3a:53:40: 17:8f:7c:81:aa:ce:8f:e3:b0:c3:9c:b4:5b:ae:92: 50:33:9a:6b:bf:23:95:84:67:8c:a2:f2:df:89:0b: 6b:03:11:2d:92:81:1e:c0:0e:3d:83:ca:f1:2f:d2: f4:8f:6f:8b:8c:4e:2e:9f:a8:88:36:c8:e0:08:b9: 75:28:8e:be:90:13:19:13:f7:d1:34:ef:eb:ef:c7: fb:af:5a:dc:29:45:c9:cf:dd:dc:a4:f2:15:89:73: ca:b5:47:4c:0b:df:8f:54:2c:85:38:5f:07:06:74: ff:c7:1a:ff:49:a5:1c:dc:46:82:04:e9:28:08:8f: 87:e7:b1:22:b1:df:0d:75:35:73:2d:69:83:c4:cc: 9f:18:96:41:0f:a1:60:14:60:2e:3c:15:d7:5d:11: 2c:8d:ae:a2:48:bd:13:43:32:96:66:da:d6:78:6c: 01:3a:24:8a:74:a6:8a:5a:dd:74:21:ff:4b:4f:f1: 20:77:4d:ac:35:83:8b:6d:6e:06:08:bc:93:0b:68: 66:af:91:fc:77:a0:8d:57:6b:d4:8f:95:05:da:89: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:89:CC:4B:6A:D8:85:8A:38:A7:20:17:A4:A9:7B:D9:03:38:89 X509v3 Authority Key Identifier: keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208437 Signature Algorithm: sha256WithRSAEncryption b0:2a:17:94:1c:eb:28:68:ea:69:ec:18:5c:04:48:e7:e5:f5: 3c:07:1e:94:7f:ab:02:53:65:22:81:d7:51:7c:6d:fd:c9:36: cf:7a:76:56:0a:7c:a3:9f:67:e1:1e:b9:ca:ba:7e:69:35:25: b2:59:b9:03:dd:ff:71:7d:9f:b0:25:ca:b7:75:73:8e:b2:4d: f8:c3:fd:05:05:a3:44:0e:8c:83:55:cd:f4:be:d1:b2:4f:7c: 38:bf:8c:e8:47:21:66:3b:22:03:4f:3a:bf:f0:67:70:9f:28: 5a:4a:9e:01:d5:80:df:c0:fc:7d:16:ef:33:0f:6c:48:62:b4: 0b:40:4d:86:ff:c4:1b:2a:7a:55:88:8b:b6:f7:fe:2b:22:37: 63:70:8b:93:f1:ca:d2:28:0a:c8:0a:02:db:83:c6:a0:61:b3: 46:35:40:f1:3d:bb:ee:26:53:93:7c:cf:cc:6e:74:14:ff:c6: 37:e0:9c:e8:b6:b3:39:3d:36:9e:8c:30:c1:8f:74:54:24:fe: 69:dd:ab:56:ee:82:1e:df:84:bf:56:2d:55:25:50:e3:eb:f6: 87:e8:45:c0:9d:76:ed:b4:19:48:07:bd:62:26:18:cc:48:37: b4:a1:83:e7:db:77:5c:b0:1e:d2:15:22:22:64:30:8b:8a:ef: 44:40:12:3b -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZuy6BrZBcYPAkTbPcihiGpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYWM1MGIzNGIyYmFmZGM0NmRjNWI3NWQzOWJjMGRkODlh NjhmMmMwHhcNMjYwMTEyMTU1MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGUyODljYzRiNmFkODg1OGEzOGE3MjAxN2E0YTk3YmQ5MDMzODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TNI2OW/piVbxT6tBCYim/gPA9kQ WDJDbq+7FvZXZfERRYJwzAgMpl06U0AXj3yBqs6P47DDnLRbrpJQM5prvyOVhGeM ovLfiQtrAxEtkoEewA49g8rxL9L0j2+LjE4un6iINsjgCLl1KI6+kBMZE/fRNO/r 78f7r1rcKUXJz93cpPIViXPKtUdMC9+PVCyFOF8HBnT/xxr/SaUc3EaCBOkoCI+H 57Eisd8NdTVzLWmDxMyfGJZBD6FgFGAuPBXXXREsja6iSL0TQzKWZtrWeGwBOiSK dKaKWt10If9LT/Egd02sNYOLbW4GCLyTC2hmr5H8d6CNV2vUj5UF2omI0QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKjiicxLatiFijinIBekqXvZAziJMB8GA1UdIwQY MBaAFF6sULNLK6/cRtxbddObwN2Jpo8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYt NzA1OGYxMWZhYzgyLzEvcU9LSnpFdHEySVdLT0tjZ0Y2U3BlOWtET0lrLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYtNzA1OGYxMWZhYzgy LzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuNTANBgkqhkiG 9w0BAQsFAAOCAQEAsCoXlBzrKGjqaewYXARI5+X1PAcelH+rAlNlIoHXUXxt/ck2 z3p2Vgp8o59n4R65yrp+aTUlslm5A93/cX2fsCXKt3VzjrJN+MP9BQWjRA6Mg1XN 9L7Rsk98OL+M6EchZjsiA086v/BncJ8oWkqeAdWA38D8fRbvMw9sSGK0C0BNhv/E Gyp6VYiLtvf+KyI3Y3CLk/HK0igKyAoC24PGoGGzRjVA8T277iZTk3zPzG50FP/G N+Cc6LazOT02nowwwY90VCT+ad2rVu6CHt+Ev1YtVSVQ4+v2h+hFwJ127bQZSAe9 YiYYzEg3tKGD59t3XLAe0hUiImQwi4rvREASOw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:54 2026 by rpki-client