This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/XnLaG9PYNz8rUVpjon2kQr4cuFs.asa File: XnLaG9PYNz8rUVpjon2kQr4cuFs.asa (raw, json) Hash identifier: JI7fzzmhznUk8hukgTd4y7R4XLhGL1pr/tYt5yPOjXs= Subject key identifier: 5E:72:DA:1B:D3:D8:37:3F:2B:51:5A:63:A2:7D:A4:42:BE:1C:B8:5B Certificate issuer: /CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6 Certificate serial: 019B3B33325A61409B8E8C62B72763094933 Authority key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/XnLaG9PYNz8rUVpjon2kQr4cuFs.asa Signing time: Sat 20 Dec 2025 09:59:29 +0000 ASPA not before: Sat 20 Dec 2025 09:59:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 202532 Providers: AS: 34872 AS: 213640 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:33:32:5a:61:40:9b:8e:8c:62:b7:27:63:09:49:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6 Validity Not Before: Dec 20 09:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e72da1bd3d8373f2b515a63a27da442be1cb85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:4f:8f:d1:33:3f:b9:35:fd:7a:2f:a7:5d: 60:a3:6b:3c:c4:54:9e:24:e2:88:8e:a7:06:9b:1b: fa:4e:01:2c:99:4f:a8:12:9e:85:c3:0e:ee:a5:25: 0a:04:6d:f0:9e:d4:5e:1e:0f:55:9d:9b:78:37:e6: a3:59:cc:df:8c:4a:eb:cd:f1:99:8a:2d:b6:46:b2: ca:cb:7d:c0:47:e1:6d:b8:c0:f4:00:9b:8e:b3:fe: b3:67:5c:68:ec:55:02:17:c4:a5:68:a5:70:26:99: 33:04:97:e9:6e:40:7e:f3:9f:1d:18:b4:d4:a0:98: 4a:d5:5f:93:50:c7:79:68:e5:26:5a:9e:57:5d:62: da:da:26:d1:3e:ce:0c:eb:5d:48:79:0e:cd:af:13: e3:3b:73:bf:ad:0b:71:14:0c:2b:22:14:60:34:81: e3:43:09:fb:99:ba:4d:ea:51:41:b9:69:fd:d0:07: c5:0f:0b:26:1b:cb:c7:07:3d:f8:41:0c:68:21:e0: e6:64:87:9c:ac:90:50:5f:b8:d3:d4:ce:8c:42:51: 57:6f:41:24:5d:37:14:3a:41:77:db:ad:37:a0:cc: f0:cd:37:41:5a:1d:72:05:5e:be:73:a2:e3:fa:12: 33:64:9d:ba:63:74:aa:d9:66:78:85:62:b8:ae:f4: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:DA:1B:D3:D8:37:3F:2B:51:5A:63:A2:7D:A4:42:BE:1C:B8:5B X509v3 Authority Key Identifier: keyid:F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/XnLaG9PYNz8rUVpjon2kQr4cuFs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202532 Signature Algorithm: sha256WithRSAEncryption 38:00:be:f4:a2:73:76:8d:68:23:91:4c:80:9f:8c:ce:54:92: 82:19:71:4e:cb:ad:c6:17:d0:ad:8c:38:98:52:4d:30:27:2a: 58:c0:ca:17:ba:d4:8f:8e:30:46:27:fa:4c:05:80:ca:1e:87: b0:7b:4f:85:a4:37:56:80:55:7e:b7:ce:60:a5:c1:ab:97:ae: 36:a4:22:88:59:55:29:21:03:9d:a4:b7:f0:57:22:a3:b1:db: f0:21:d7:26:af:47:ef:fb:7a:4b:0a:cd:7c:03:ba:eb:91:f3: e0:33:81:ee:c5:f1:a5:f1:79:ae:9d:12:b2:03:e6:00:d1:3b: 72:7f:a7:de:78:6d:40:c8:7f:c4:e1:10:da:70:d8:bc:6c:e0: a5:fc:91:44:77:54:77:2e:ea:c2:db:c8:fe:53:36:98:30:af: 24:b5:3a:f8:14:72:e8:fb:8a:70:85:0f:19:87:4f:bb:f7:e4: 08:63:90:57:2c:63:76:32:77:bc:20:db:d8:a4:4e:b1:1a:c7: 77:c6:53:84:1e:dc:53:49:3c:f6:49:77:1b:55:22:84:18:03: 08:e3:bb:f0:e6:44:72:03:7a:0c:01:fe:0d:17:c9:1a:b6:45: cf:95:11:77:d3:16:4c:f8:8d:a1:d9:b8:63:4e:1b:d1:90:25: 03:68:ff:b4 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZs7MzJaYUCbjoxitydjCUkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmI3ZWI5N2M4MTMwZjg4N2RiZTY5NmI1Nzk2NjJjZjlh YTA2YTYwHhcNMjUxMjIwMDk1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTcyZGExYmQzZDgzNzNmMmI1MTVhNjNhMjdkYTQ0MmJlMWNiODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgRPj9EzP7k1/Xovp11go2s8xFSe JOKIjqcGmxv6TgEsmU+oEp6Fww7upSUKBG3wntReHg9VnZt4N+ajWczfjErrzfGZ ii22RrLKy33AR+FtuMD0AJuOs/6zZ1xo7FUCF8SlaKVwJpkzBJfpbkB+858dGLTU oJhK1V+TUMd5aOUmWp5XXWLa2ibRPs4M611IeQ7NrxPjO3O/rQtxFAwrIhRgNIHj Qwn7mbpN6lFBuWn90AfFDwsmG8vHBz34QQxoIeDmZIecrJBQX7jT1M6MQlFXb0Ek XTcUOkF32603oMzwzTdBWh1yBV6+c6Lj+hIzZJ26Y3Sq2WZ4hWK4rvRVgQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFF5y2hvT2Dc/K1FaY6J9pEK+HLhbMB8GA1UdIwQY MBaAFPK7frl8gTD4h9vmlrV5Ziz5qgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJ0LXVYeUJNUGlIMi1hV3RYbG1MUG1xQnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xNjZhZTQtMDljZS00NjYwLWI2OWIt ODM2YzkyOTYzMDM3LzEvWG5MYUc5UFlOejhyVVZwam9uMmtRcjRjdUZzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xNjZhZTQtMDljZS00NjYwLWI2OWItODM2YzkyOTYzMDM3 LzEvOHJ0LXVYeUJNUGlIMi1hV3RYbG1MUG1xQnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXJDANBgkqhkiG 9w0BAQsFAAOCAQEAOAC+9KJzdo1oI5FMgJ+MzlSSghlxTsutxhfQrYw4mFJNMCcq WMDKF7rUj44wRif6TAWAyh6HsHtPhaQ3VoBVfrfOYKXBq5euNqQiiFlVKSEDnaS3 8Fcio7Hb8CHXJq9H7/t6SwrNfAO665Hz4DOB7sXxpfF5rp0SsgPmANE7cn+n3nht QMh/xOEQ2nDYvGzgpfyRRHdUdy7qwtvI/lM2mDCvJLU6+BRy6PuKcIUPGYdPu/fk CGOQVyxjdjJ3vCDb2KROsRrHd8ZThB7cU0k89kl3G1UihBgDCOO78OZEcgN6DAH+ DRfJGrZFz5URd9MWTPiNodm4Y04b0ZAlA2j/tA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:24:52 2025 by rpki-client