This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/WRzFAQD96PiFm7zmXWmL1m9WLI4.asa File: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (raw, json) Hash identifier: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA= Subject key identifier: 59:1C:C5:01:00:FD:E8:F8:85:9B:BC:E6:5D:69:8B:D6:6F:56:2C:8E Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b Certificate serial: 019AFA675D867F66FD48579EFBE6AC4C2F52 Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/WRzFAQD96PiFm7zmXWmL1m9WLI4.asa Signing time: Sun 07 Dec 2025 20:01:09 +0000 ASPA not before: Sun 07 Dec 2025 20:01:09 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 35489 Providers: AS: 15669 AS: 35761 AS: 39505 AS: 44814 AS: 199230 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:67:5d:86:7f:66:fd:48:57:9e:fb:e6:ac:4c:2f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b Validity Not Before: Dec 7 20:01:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=591cc50100fde8f8859bbce65d698bd66f562c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:db:4c:df:65:ed:a4:ae:4a:46:49:4c:af:89: 26:ab:6e:b3:2c:7e:ac:99:e7:dd:4b:4b:21:e3:13: 26:a6:b6:c5:5d:56:71:0a:ed:ba:ec:bf:10:ff:56: 81:8d:e7:c2:c4:69:4c:a8:71:60:05:e4:f3:95:e2: c6:51:56:8f:d7:2b:54:5d:e7:6b:c7:f9:1e:08:65: 15:66:d2:03:75:d9:e2:3c:5c:a1:f2:97:1e:b8:bc: dc:2f:1d:60:43:91:a3:fd:ef:53:a2:da:33:64:3c: 95:80:d7:8b:72:99:fe:42:b3:97:88:0a:d3:4c:11: 60:ed:8d:69:95:24:44:2a:5d:9f:9c:89:93:23:e5: 59:66:6b:a4:75:f9:fd:9a:fc:08:b8:93:5a:16:dd: 3c:38:3e:1c:44:51:0a:6c:8c:f7:f2:ab:37:35:17: eb:1b:f2:f2:3f:63:ca:9c:60:2a:26:25:aa:0d:f9: 64:b6:46:36:5f:5c:45:92:f9:99:3c:a3:bb:5f:dd: c3:ee:65:3e:03:95:df:cf:11:a1:24:12:6e:4b:e2: 19:7c:c1:51:81:8a:7d:ef:92:2d:20:03:be:40:b5: 0a:33:88:dd:ae:c8:7d:59:ae:60:bd:4b:1a:00:13: f8:ae:8a:b3:cb:fa:1d:11:29:f9:2f:b7:94:3d:e3: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1C:C5:01:00:FD:E8:F8:85:9B:BC:E6:5D:69:8B:D6:6F:56:2C:8E X509v3 Authority Key Identifier: keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/WRzFAQD96PiFm7zmXWmL1m9WLI4.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 35489 Signature Algorithm: sha256WithRSAEncryption 11:04:92:4f:25:7b:c4:bf:f5:d4:d2:73:8f:76:e6:20:5d:0a: a6:02:5a:01:d4:bc:98:d8:c1:97:b5:04:c7:c3:b5:f4:db:9d: 6d:ec:54:cb:cf:aa:f5:06:df:7d:8c:36:0a:28:8f:80:dc:1c: 12:2e:87:4a:8e:7c:7a:2a:66:6a:36:04:ee:01:0d:67:3e:8c: 12:f7:eb:9a:9c:52:8d:1c:06:6a:e2:5b:40:ac:50:50:90:18: 7c:be:d6:83:34:d4:3b:af:e0:3b:86:23:e2:76:67:c7:52:af: ce:eb:58:74:56:d2:e8:7e:ea:a3:8b:7b:f7:86:1d:c3:bc:7d: 96:92:0b:13:a5:15:47:f6:01:8b:73:c2:54:71:f3:b8:37:0f: a4:8a:8f:f6:a1:bd:cf:b5:9c:36:84:3f:2b:e7:33:f4:2b:d9: 3e:bb:35:75:ec:21:28:79:77:86:b8:57:ad:08:85:b0:fc:9d: e8:79:75:c3:6c:bc:24:b7:4c:f2:09:83:57:b8:64:7f:f4:bc: 34:f3:76:99:69:45:d5:8e:cc:a8:21:7e:a4:02:d3:6d:25:e8: 3a:2c:7b:08:76:c1:d3:17:86:99:7d:cd:41:18:01:ac:fa:f4: 25:83:4f:bc:86:25:5c:34:25:df:83:20:76:fe:0d:c1:23:15: d3:f9:83:14 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr6Z12Gf2b9SFee++asTC9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw Mjk1MGIwHhcNMjUxMjA3MjAwMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTFjYzUwMTAwZmRlOGY4ODU5YmJjZTY1ZDY5OGJkNjZmNTYyYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dtM32XtpK5KRklMr4kmq26zLH6s mefdS0sh4xMmprbFXVZxCu267L8Q/1aBjefCxGlMqHFgBeTzleLGUVaP1ytUXedr x/keCGUVZtIDddniPFyh8pceuLzcLx1gQ5Gj/e9TotozZDyVgNeLcpn+QrOXiArT TBFg7Y1plSREKl2fnImTI+VZZmukdfn9mvwIuJNaFt08OD4cRFEKbIz38qs3NRfr G/LyP2PKnGAqJiWqDflktkY2X1xFkvmZPKO7X93D7mU+A5XfzxGhJBJuS+IZfMFR gYp975ItIAO+QLUKM4jdrsh9Wa5gvUsaABP4roqzy/odESn5L7eUPeNrCwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFFkcxQEA/ej4hZu85l1pi9ZvViyOMB8GA1UdIwQY MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt MjI4OTRkZTE0Y2JiLzEvV1J6RkFRRDk2UGlGbTd6bVhXbUwxbTlXTEk0LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCKoTANBgkqhkiG 9w0BAQsFAAOCAQEAEQSSTyV7xL/11NJzj3bmIF0KpgJaAdS8mNjBl7UEx8O19Nud bexUy8+q9QbffYw2CiiPgNwcEi6HSo58eipmajYE7gENZz6MEvfrmpxSjRwGauJb QKxQUJAYfL7WgzTUO6/gO4Yj4nZnx1KvzutYdFbS6H7qo4t794Ydw7x9lpILE6UV R/YBi3PCVHHzuDcPpIqP9qG9z7WcNoQ/K+cz9CvZPrs1dewhKHl3hrhXrQiFsPyd 6Hl1w2y8JLdM8gmDV7hkf/S8NPN2mWlF1Y7MqCF+pALTbSXoOix7CHbB0xeGmX3N QRgBrPr0JYNPvIYlXDQl34Mgdv4NwSMV0/mDFA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:42:13 2025 by rpki-client