This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/cwK1oTMqHeWuufTdF2FowfL1ogw.asa File: cwK1oTMqHeWuufTdF2FowfL1ogw.asa (raw, json) Hash identifier: pm/Dfj8iYXq7lxGmzXb0fegEvMVKmOFBxrnejfUXAtQ= Subject key identifier: 73:02:B5:A1:33:2A:1D:E5:AE:B9:F4:DD:17:61:68:C1:F2:F5:A2:0C Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b Certificate serial: 019B9FD7B38545DA99A5030B5C16736822FD Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/cwK1oTMqHeWuufTdF2FowfL1ogw.asa Signing time: Thu 08 Jan 2026 23:01:12 +0000 ASPA not before: Thu 08 Jan 2026 23:01:12 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 50683 Providers: AS: 50989 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:d7:b3:85:45:da:99:a5:03:0b:5c:16:73:68:22:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b Validity Not Before: Jan 8 23:01:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7302b5a1332a1de5aeb9f4dd176168c1f2f5a20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:13:d9:00:3e:dc:6c:e2:bf:94:e2:00:0c: 85:b6:30:11:90:5d:0f:e7:58:3f:7b:5d:e0:54:71: 69:5f:04:76:e6:82:d8:79:75:08:17:e8:ab:06:df: c7:b8:4a:fd:59:37:45:54:df:24:8b:5b:65:31:6a: 0f:85:9a:51:09:69:1e:48:13:d4:7f:49:40:2a:76: 66:47:75:5f:25:67:b3:89:cf:8a:01:22:5c:76:60: 4f:c6:57:11:02:29:97:ec:cd:d9:99:5d:82:2e:bf: fc:02:d3:60:44:32:da:2e:72:8d:4a:fa:3e:93:87: a5:4a:6e:48:29:64:1d:ff:52:a4:8c:57:f2:41:6d: 93:d1:5d:84:06:cb:92:76:32:10:a5:5d:33:8b:52: 16:02:2c:b8:40:79:6f:16:02:07:f6:f7:5e:b8:65: 04:55:53:d1:d6:53:25:2b:98:16:9a:72:09:8f:b8: ec:f2:33:67:ae:f9:e9:11:35:e6:84:6b:1f:68:2f: 9b:ac:8c:e7:0c:10:e6:c1:97:4e:07:4f:d8:f0:01: 4a:74:15:8b:56:b3:a8:97:9e:30:3f:d1:34:c6:ec: 4a:f5:f7:c6:b1:0b:ff:b9:e3:eb:ed:34:51:f4:3b: c8:56:65:32:38:49:cb:6d:11:d7:0d:4b:13:f3:c4: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:02:B5:A1:33:2A:1D:E5:AE:B9:F4:DD:17:61:68:C1:F2:F5:A2:0C X509v3 Authority Key Identifier: keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/cwK1oTMqHeWuufTdF2FowfL1ogw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50683 Signature Algorithm: sha256WithRSAEncryption 3b:f4:b0:66:b8:b0:b9:c6:3d:7b:9d:24:61:2a:e9:f5:2f:e9: 1f:e1:b1:82:b4:8f:04:7e:f6:e7:77:2b:5e:d6:cf:24:85:00: 2a:c2:75:a9:fd:8a:1e:f2:3c:48:cd:93:f1:6a:30:b1:84:9c: fb:8b:89:9e:ee:71:40:b8:a0:ac:67:b0:b3:70:f0:29:3e:6d: 58:53:69:6d:33:18:b6:e8:d2:4f:5c:21:d3:2a:11:a4:f6:c8: f7:77:d3:8a:f5:31:f4:13:45:3a:43:3e:c3:f1:52:20:3b:2c: 11:c2:fc:9b:0d:c0:37:2b:f1:07:b1:bf:50:42:28:0f:79:7a: 3f:e2:6b:c6:40:b0:db:f5:be:b1:7c:cd:be:da:76:9d:29:81: c0:97:88:ef:cd:2d:7c:b6:50:e8:8c:b2:86:fb:1e:3f:22:cc: 61:e4:80:d8:80:1c:10:e3:51:e0:b2:7e:2e:d7:01:28:8e:3d: e3:e8:53:c3:42:6a:d4:ea:3a:72:06:81:b5:56:ee:e7:94:f2: c6:07:7e:e3:1e:06:02:f5:ef:72:f1:3e:07:60:60:cc:d4:37: 7f:e2:67:ed:43:57:51:3a:e1:c8:65:cf:4c:a2:7d:01:3e:1d: 2e:37:d0:af:99:10:1e:33:97:d8:05:bd:93:44:23:94:d5:ba: 6f:19:86:43 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZuf17OFRdqZpQMLXBZzaCL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGE1YmFhMDU4YzQwOTU2NWZmMmFjODc2YTIyZWU2Mzc3 YjUwM2IwHhcNMjYwMTA4MjMwMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzAyYjVhMTMzMmExZGU1YWViOWY0ZGQxNzYxNjhjMWYyZjVhMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7UT2QA+3Gziv5TiAAyFtjARkF0P 51g/e13gVHFpXwR25oLYeXUIF+irBt/HuEr9WTdFVN8ki1tlMWoPhZpRCWkeSBPU f0lAKnZmR3VfJWezic+KASJcdmBPxlcRAimX7M3ZmV2CLr/8AtNgRDLaLnKNSvo+ k4elSm5IKWQd/1KkjFfyQW2T0V2EBsuSdjIQpV0zi1IWAiy4QHlvFgIH9vdeuGUE VVPR1lMlK5gWmnIJj7js8jNnrvnpETXmhGsfaC+brIznDBDmwZdOB0/Y8AFKdBWL VrOol54wP9E0xuxK9ffGsQv/uePr7TRR9DvIVmUyOEnLbRHXDUsT88QoOwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHMCtaEzKh3lrrn03RdhaMHy9aIMMB8GA1UdIwQY MBaAFDraW6oFjECVZf8qyHaiLuY3e1A7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0Yzkt OWMxYjJhZDU1OWFiLzEvY3dLMW9UTXFIZVd1dWZUZEYyRm93Zkwxb2d3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lNjYzZGQtM2Y4Zi00ZWFkLWI0YzktOWMxYjJhZDU1OWFi LzEvT3RwYnFnV01RSlZsX3lySWRxSXU1amQ3VURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDF+zANBgkqhkiG 9w0BAQsFAAOCAQEAO/SwZriwucY9e50kYSrp9S/pH+GxgrSPBH7253crXtbPJIUA KsJ1qf2KHvI8SM2T8WowsYSc+4uJnu5xQLigrGews3DwKT5tWFNpbTMYtujST1wh 0yoRpPbI93fTivUx9BNFOkM+w/FSIDssEcL8mw3ANyvxB7G/UEIoD3l6P+JrxkCw 2/W+sXzNvtp2nSmBwJeI780tfLZQ6IyyhvsePyLMYeSA2IAcEONR4LJ+LtcBKI49 4+hTw0Jq1Oo6cgaBtVbu55Tyxgd+4x4GAvXvcvE+B2BgzNQ3f+Jn7UNXUTrhyGXP TKJ9AT4dLjfQr5kQHjOX2AW9k0QjlNW6bxmGQw== -----END CERTIFICATE-----Generated at Mon Feb 2 04:40:53 2026 by rpki-client