This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/M8dYp-L4dw1v-tRfvEaBeetOZDM.asa File: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (raw, json) Hash identifier: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI= Subject key identifier: 33:C7:58:A7:E2:F8:77:0D:6F:FA:D4:5F:BC:46:81:79:EB:4E:64:33 Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019AFE5D29A296004F88F2A7AD85933FF89F Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/M8dYp-L4dw1v-tRfvEaBeetOZDM.asa Signing time: Mon 08 Dec 2025 14:28:29 +0000 ASPA not before: Mon 08 Dec 2025 14:28:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 553 Providers: AS: 174 AS: 559 AS: 680 AS: 1299 AS: 2914 AS: 3320 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:5d:29:a2:96:00:4f:88:f2:a7:ad:85:93:3f:f8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Dec 8 14:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=33c758a7e2f8770d6ffad45fbc468179eb4e6433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:38:48:df:28:f6:6d:df:cc:12:c4:2e:6b: 17:dd:8c:7e:eb:f6:90:e6:95:ae:05:8b:2d:e3:52: dd:bd:6d:65:0b:25:7c:fb:29:b2:4e:db:93:1a:f7: 3a:3b:4a:72:44:da:f3:02:3c:08:1a:72:ad:c8:7d: 9f:14:a1:6e:84:b7:4c:0b:1d:e0:43:12:b7:e9:c7: 3d:b8:2c:37:5b:28:2b:ec:fb:14:b5:24:8c:6f:f7: 09:0e:29:8b:c1:9c:9c:e1:1e:86:79:2a:f5:cb:ad: 6d:be:9c:8f:7b:c0:16:57:ed:e8:a8:c7:19:95:ae: 84:c4:2d:71:3f:fc:d4:aa:43:53:2b:fe:e2:a6:df: ae:97:60:ee:04:2d:6b:e3:9a:35:58:2e:ba:c5:5e: 95:19:e7:35:97:00:f2:b4:57:9c:fe:81:c0:32:07: 32:5c:0c:3c:93:94:c5:42:71:b3:07:23:77:95:e1: 0f:18:d7:d5:8e:c7:a2:a9:38:de:af:78:db:ec:64: a4:7e:f9:e9:cb:21:92:f4:f0:d1:d5:7b:09:c2:17: 43:cd:a5:f4:93:96:35:1e:61:3f:4a:d3:ce:0c:bd: 38:36:03:80:e9:f7:9b:f6:23:59:d0:ee:f6:7b:4b: 60:cb:f5:59:64:23:b1:3f:ad:26:48:ec:fa:a0:89: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C7:58:A7:E2:F8:77:0D:6F:FA:D4:5F:BC:46:81:79:EB:4E:64:33 X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/M8dYp-L4dw1v-tRfvEaBeetOZDM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 553 Signature Algorithm: sha256WithRSAEncryption 31:37:51:54:94:06:d4:90:fd:27:17:a9:50:61:cc:69:d7:14: ca:ca:ab:07:68:42:5f:ba:b0:a5:07:85:c2:83:de:08:58:3b: d5:37:f7:13:a3:71:f6:56:72:9a:dd:2d:5a:11:19:fa:75:d0: 2c:02:0a:f2:73:42:b3:df:9a:af:2b:ea:41:32:77:1e:f5:a1: 01:07:ae:e1:37:a5:c4:97:70:f6:a2:cf:9b:6a:4f:75:17:09: 33:f5:28:78:5f:89:0c:a7:6f:7b:2a:1c:06:6d:b4:24:bd:42: 86:62:76:0e:9d:c3:a2:12:06:cc:36:d9:f1:42:cb:08:90:e3: fd:a4:df:b4:2a:31:f3:ff:cd:63:84:2a:c8:09:71:a2:08:b5: b6:01:7a:02:07:02:db:cc:b8:ce:9b:95:d3:46:82:08:0a:3d: 23:90:3f:a8:fe:22:dc:c8:a9:cd:b7:e0:ad:22:e9:37:4b:07: 31:cf:ac:b4:8e:6b:d1:4e:e4:bd:66:9e:eb:7b:be:57:d2:a7: ee:f4:93:79:29:f3:bd:29:f0:a2:d4:46:82:9a:41:45:9d:ff: 04:68:89:a1:a7:c0:91:a4:90:39:84:ad:bf:70:85:d9:1a:5d: 29:1d:0a:60:32:f2:19:dd:b9:42:14:da:e8:12:5d:74:01:36: 9e:af:0f:b3 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZr+XSmilgBPiPKnrYWTP/ifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjUxMjA4MTQyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2M3NThhN2UyZjg3NzBkNmZmYWQ0NWZiYzQ2ODE3OWViNGU2NDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1I4SN8o9m3fzBLELmsX3Yx+6/aQ 5pWuBYst41LdvW1lCyV8+ymyTtuTGvc6O0pyRNrzAjwIGnKtyH2fFKFuhLdMCx3g QxK36cc9uCw3Wygr7PsUtSSMb/cJDimLwZyc4R6GeSr1y61tvpyPe8AWV+3oqMcZ la6ExC1xP/zUqkNTK/7ipt+ul2DuBC1r45o1WC66xV6VGec1lwDytFec/oHAMgcy XAw8k5TFQnGzByN3leEPGNfVjseiqTjer3jb7GSkfvnpyyGS9PDR1XsJwhdDzaX0 k5Y1HmE/StPODL04NgOA6feb9iNZ0O72e0tgy/VZZCOxP60mSOz6oIkBIwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFDPHWKfi+HcNb/rUX7xGgXnrTmQzMB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvTThkWXAtTDRkdzF2LXRSZnZFYUJlZXRPWkRNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAgIpMA0GCSqGSIb3 DQEBCwUAA4IBAQAxN1FUlAbUkP0nF6lQYcxp1xTKyqsHaEJfurClB4XCg94IWDvV N/cTo3H2VnKa3S1aERn6ddAsAgryc0Kz35qvK+pBMnce9aEBB67hN6XEl3D2os+b ak91Fwkz9Sh4X4kMp297KhwGbbQkvUKGYnYOncOiEgbMNtnxQssIkOP9pN+0KjHz /81jhCrICXGiCLW2AXoCBwLbzLjOm5XTRoIICj0jkD+o/iLcyKnNt+CtIuk3Swcx z6y0jmvRTuS9Zp7re75X0qfu9JN5KfO9KfCi1EaCmkFFnf8EaImhp8CRpJA5hK2/ cIXZGl0pHQpgMvIZ3blCFNroEl10ATaerw+z -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:29 2025 by rpki-client