This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/867F4OQuQLWhRY4aKxKeoxD01B4.asa File: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (raw, json) Hash identifier: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280= Subject key identifier: F3:AE:C5:E0:E4:2E:40:B5:A1:45:8E:1A:2B:12:9E:A3:10:F4:D4:1E Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8 Certificate serial: 019C1B3A969636AA1FBCEFD5C3B4AD79210C Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/867F4OQuQLWhRY4aKxKeoxD01B4.asa Signing time: Sun 01 Feb 2026 22:02:30 +0000 ASPA not before: Sun 01 Feb 2026 22:02:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 62000 Providers: AS: 174 AS: 3257 AS: 5511 AS: 6204 AS: 6453 AS: 6461 AS: 9002 AS: 31561 AS: 39801 AS: 50263 AS: 50952 AS: 51706 AS: 137409 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:3a:96:96:36:aa:1f:bc:ef:d5:c3:b4:ad:79:21:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8 Validity Not Before: Feb 1 22:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3aec5e0e42e40b5a1458e1a2b129ea310f4d41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:dc:a9:ec:8f:1e:23:56:f9:a3:dc:19:64: 61:91:47:b9:63:77:19:28:14:88:09:6e:f4:e0:aa: f6:cf:39:2c:12:39:fc:73:01:b4:59:5a:00:3b:5c: 7a:d4:84:ec:e6:7e:66:c2:d1:b0:32:65:da:e8:9d: 7a:03:6c:67:07:a2:78:ad:c7:4d:b0:e7:e3:ba:c6: da:7f:6d:7a:ef:36:13:e6:7a:57:68:c0:60:5b:84: f5:d4:e3:96:9c:fa:67:87:21:07:c0:35:a5:53:4f: fe:70:47:53:fb:88:59:34:60:1e:bf:a1:19:99:45: ec:99:84:e4:90:f1:28:51:31:89:ad:43:d2:95:e0: b8:e0:18:b3:c4:1f:4a:89:e9:e3:33:2e:10:ab:0d: 8f:48:77:dd:d5:aa:5a:86:e1:aa:31:ea:79:a1:30: 75:73:74:9f:77:e8:de:2f:09:e4:b6:0f:3a:0d:72: 69:3d:ce:f8:88:01:b3:77:02:7f:4b:e9:df:65:6b: 06:26:a2:85:5d:99:c5:08:36:04:6f:5c:23:98:e0: 5f:cb:c2:b2:60:61:0f:9f:d5:37:a3:8d:57:d7:f5: 26:ab:c5:23:9a:0a:d2:a0:1a:20:7e:d7:d7:16:f9: 15:0d:f9:1c:b9:ef:ac:ac:24:99:fc:6e:71:d6:5f: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AE:C5:E0:E4:2E:40:B5:A1:45:8E:1A:2B:12:9E:A3:10:F4:D4:1E X509v3 Authority Key Identifier: keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/867F4OQuQLWhRY4aKxKeoxD01B4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 62000 Signature Algorithm: sha256WithRSAEncryption a4:61:94:3c:d0:6c:8f:97:e2:96:99:64:46:ff:2f:00:e0:da: 03:39:5f:a2:92:88:c7:a8:8c:77:d8:e5:d9:4a:a4:67:d1:bc: c4:f6:85:28:9e:67:16:f8:ba:98:19:a0:44:02:51:05:50:28: 18:81:ff:6d:1f:59:74:f8:1b:b3:d7:fd:f6:94:07:c1:c9:0b: aa:5b:c9:20:8f:28:65:42:00:31:fb:40:1c:e9:4d:36:d1:82: 07:4b:a6:3d:0f:46:21:c9:ea:ec:f1:08:1c:c1:d6:d6:f0:c4: dd:d2:f3:d8:1e:4c:b4:da:80:1a:53:0a:03:d4:20:28:55:3c: 60:9d:35:4f:65:9e:a8:3a:c1:a0:6b:a3:73:57:50:7c:10:35: 13:0f:16:fc:d9:37:f1:cb:13:bf:ff:10:e2:99:b5:a2:cc:20: 13:b2:6b:76:eb:47:c6:e7:e6:4b:4a:6e:09:e4:a9:21:15:0b: 2c:4a:64:5c:c7:a5:33:84:d7:4c:98:2c:e3:17:dd:0d:cd:30: 72:8f:3d:e7:0c:55:5f:88:46:38:57:d3:2f:42:a2:d0:57:60: d0:45:37:ef:26:12:4e:65:2e:4f:1b:c4:77:83:34:30:b1:49: 45:69:eb:ab:5b:3e:10:02:16:23:24:cd:3c:a7:f5:25:c7:6d: 8a:03:12:e8 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwbOpaWNqofvO/Vw7SteSEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZTE0MjlhNTNlNjQ2M2IzYzc0ZjVhM2YxN2M1ZDRhNTFl YmQwYjgwHhcNMjYwMjAxMjIwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2FlYzVlMGU0MmU0MGI1YTE0NThlMWEyYjEyOWVhMzEwZjRkNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WncqeyPHiNW+aPcGWRhkUe5Y3cZ KBSICW704Kr2zzksEjn8cwG0WVoAO1x61ITs5n5mwtGwMmXa6J16A2xnB6J4rcdN sOfjusbaf2167zYT5npXaMBgW4T11OOWnPpnhyEHwDWlU0/+cEdT+4hZNGAev6EZ mUXsmYTkkPEoUTGJrUPSleC44BizxB9KienjMy4Qqw2PSHfd1apahuGqMep5oTB1 c3Sfd+jeLwnktg86DXJpPc74iAGzdwJ/S+nfZWsGJqKFXZnFCDYEb1wjmOBfy8Ky YGEPn9U3o41X1/Umq8UjmgrSoBogftfXFvkVDfkcue+srCSZ/G5x1l+ZDQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFPOuxeDkLkC1oUWOGisSnqMQ9NQeMB8GA1UdIwQY MBaAFIThQppT5kY7PHT1o/F8XUpR69C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYt YzQxZGNjYThiNzc1LzEvODY3RjRPUXVRTFdoUlk0YUt4S2VveEQwMUI0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYtYzQxZGNjYThiNzc1 LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyMDANBgkqhkiG 9w0BAQsFAAOCAQEApGGUPNBsj5filplkRv8vAODaAzlfopKIx6iMd9jl2UqkZ9G8 xPaFKJ5nFvi6mBmgRAJRBVAoGIH/bR9ZdPgbs9f99pQHwckLqlvJII8oZUIAMftA HOlNNtGCB0umPQ9GIcnq7PEIHMHW1vDE3dLz2B5MtNqAGlMKA9QgKFU8YJ01T2We qDrBoGujc1dQfBA1Ew8W/Nk38csTv/8Q4pm1oswgE7JrdutHxufmS0puCeSpIRUL LEpkXMelM4TXTJgs4xfdDc0wco895wxVX4hGOFfTL0Ki0Fdg0EU37yYSTmUuTxvE d4M0MLFJRWnrq1s+EAIWIyTNPKf1JcdtigMS6A== -----END CERTIFICATE-----Generated at Mon Feb 2 04:40:55 2026 by rpki-client