This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/wKJrG3TzhAwbybBcB8HtZYod-Cw.asa File: wKJrG3TzhAwbybBcB8HtZYod-Cw.asa (raw, json) Hash identifier: 6ZWEWX50h36ZRdrhsUv174jWGFDg5H8Fr4bktK/9hRQ= Subject key identifier: C0:A2:6B:1B:74:F3:84:0C:1B:C9:B0:5C:07:C1:ED:65:8A:1D:F8:2C Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Certificate serial: 019B5706006AAA301108B855CA3B578B3F93 Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/wKJrG3TzhAwbybBcB8HtZYod-Cw.asa Signing time: Thu 25 Dec 2025 19:39:29 +0000 ASPA not before: Thu 25 Dec 2025 19:39:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214205 Providers: AS: 6939 AS: 34927 AS: 52025 AS: 205941 AS: 209533 AS: 212895 AS: 213413 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:06:00:6a:aa:30:11:08:b8:55:ca:3b:57:8b:3f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Validity Not Before: Dec 25 19:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0a26b1b74f3840c1bc9b05c07c1ed658a1df82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:b0:c7:f9:d0:76:16:a1:82:82:4f:c6:7b: 4f:bc:5d:5e:e2:4a:98:13:7c:48:ef:65:84:a0:1f: ea:43:b6:da:b9:08:1e:be:9a:1e:e4:71:49:c8:4d: fa:a0:a6:c6:0a:fb:ef:4c:65:62:c3:b5:8d:a9:54: 50:58:09:1c:78:a9:da:46:7e:82:0d:ef:29:c4:30: f8:b5:e5:fd:ff:a7:d8:dd:a1:e7:81:a5:47:05:a0: 7a:77:74:01:27:a1:db:69:4e:a8:b3:bc:82:86:54: b6:53:10:82:e7:44:d5:57:20:2f:ac:2e:1e:98:33: 76:b3:04:bc:63:93:7b:eb:27:24:1b:10:5b:48:f2: 5d:0a:f2:40:49:2c:c5:d2:8e:ea:7e:1b:c6:f4:7f: e3:72:69:b6:02:97:5b:b4:a3:48:4c:8b:39:0c:99: ee:d2:05:41:b9:3a:08:c5:35:e5:ef:e9:08:70:96: dc:32:33:10:95:ca:32:fd:43:a9:83:fb:19:e3:15: 2b:68:09:8b:41:af:2e:82:b7:95:c3:2e:8e:9f:6f: 13:69:c5:9c:ba:34:df:15:59:75:23:5f:14:5f:83: 2d:43:ea:a7:b8:18:aa:13:72:27:f7:7f:0a:4a:ff: 0a:75:81:09:84:e2:50:73:ae:9a:b2:3f:bf:2f:01: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:6B:1B:74:F3:84:0C:1B:C9:B0:5C:07:C1:ED:65:8A:1D:F8:2C X509v3 Authority Key Identifier: keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/wKJrG3TzhAwbybBcB8HtZYod-Cw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214205 Signature Algorithm: sha256WithRSAEncryption 9c:4e:b9:82:a0:e6:ef:38:e4:6f:5b:c8:e9:af:cb:eb:4e:c6: cd:b3:4b:92:ac:72:f5:d5:98:e2:19:2e:36:cf:d8:14:f9:76: 6d:55:2b:e2:77:cd:dd:66:53:61:80:3e:e8:5d:a0:49:c8:ec: e8:4c:36:81:c0:f4:08:cc:35:5f:a8:15:b3:f6:42:65:cc:17: 04:3b:5a:ed:15:8e:f5:a5:65:ee:a4:20:6b:6a:50:fa:e5:3c: da:e8:32:0e:db:2a:2f:88:75:e3:ea:ba:f0:03:20:4c:c4:b9: 5f:50:57:fa:2e:ad:19:53:d6:01:49:4f:91:26:a7:12:b2:46: 8f:8d:8b:d5:a5:98:0c:5f:4c:18:c2:47:3e:85:6f:1c:c0:89: 09:cd:58:86:dc:51:b1:8a:39:b1:db:90:fb:6f:17:69:7d:d4: bb:78:1c:3b:9d:33:cf:85:ed:d7:3b:6e:7d:d9:48:21:c8:76: d7:64:36:2d:c0:68:a2:16:69:d6:f5:17:f5:54:28:15:bf:62: 84:98:59:bd:9c:e3:61:5d:5a:53:dc:30:1d:a5:35:d7:60:64: ae:a1:54:55:7b:01:58:74:b6:87:53:9d:de:a6:e2:b0:7f:80: f3:29:0a:57:5a:be:2c:40:55:6b:e0:d0:f2:cb:25:8a:91:e5: 27:36:1a:b6 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtXBgBqqjARCLhVyjtXiz+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZjE3YWU1NDdiOWYyNjQxZTYwNTc3ZmU1NTNkZGI2Zjc0 OWEwODcwHhcNMjUxMjI1MTkzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGEyNmIxYjc0ZjM4NDBjMWJjOWIwNWMwN2MxZWQ2NThhMWRmODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh+wx/nQdhahgoJPxntPvF1e4kqY E3xI72WEoB/qQ7bauQgevpoe5HFJyE36oKbGCvvvTGViw7WNqVRQWAkceKnaRn6C De8pxDD4teX9/6fY3aHngaVHBaB6d3QBJ6HbaU6os7yChlS2UxCC50TVVyAvrC4e mDN2swS8Y5N76yckGxBbSPJdCvJASSzF0o7qfhvG9H/jcmm2ApdbtKNITIs5DJnu 0gVBuToIxTXl7+kIcJbcMjMQlcoy/UOpg/sZ4xUraAmLQa8ugreVwy6On28TacWc ujTfFVl1I18UX4MtQ+qnuBiqE3In938KSv8KdYEJhOJQc66asj+/LwHs5QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMCiaxt084QMG8mwXAfB7WWKHfgsMB8GA1UdIwQY MBaAFH/xeuVHufJkHmBXf+VT3bb3SaCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQt YTQzZmYyNWQ0NDdkLzEvd0tKckczVHpoQXdieWJCY0I4SHRaWW9kLUN3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQtYTQzZmYyNWQ0NDdk LzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNEvTANBgkqhkiG 9w0BAQsFAAOCAQEAnE65gqDm7zjkb1vI6a/L607GzbNLkqxy9dWY4hkuNs/YFPl2 bVUr4nfN3WZTYYA+6F2gScjs6Ew2gcD0CMw1X6gVs/ZCZcwXBDta7RWO9aVl7qQg a2pQ+uU82ugyDtsqL4h14+q68AMgTMS5X1BX+i6tGVPWAUlPkSanErJGj42L1aWY DF9MGMJHPoVvHMCJCc1YhtxRsYo5sduQ+28XaX3Uu3gcO50zz4Xt1ztufdlIIch2 12Q2LcBoohZp1vUX9VQoFb9ihJhZvZzjYV1aU9wwHaU112BkrqFUVXsBWHS2h1Od 3qbisH+A8ykKV1q+LEBVa+DQ8sslipHlJzYatg== -----END CERTIFICATE-----Generated at Wed Jan 21 08:17:23 2026 by rpki-client