This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa File: YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa (raw, json) Hash identifier: BRgXVBcV8E1flieZOrUO66c4KxWhFECdnyVZ6NuuWi0= Subject key identifier: 60:E7:CE:89:5B:5B:14:F8:EF:E6:A9:71:19:80:F9:84:C6:B9:A6:F8 Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Certificate serial: 019C2962AEA8E6EAD0162012AD9812CB2CD8 Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa Signing time: Wed 04 Feb 2026 16:00:59 +0000 ASPA not before: Wed 04 Feb 2026 16:00:59 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 35328 Providers: AS: 31117 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:62:ae:a8:e6:ea:d0:16:20:12:ad:98:12:cb:2c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988 Validity Not Before: Feb 4 16:00:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=60e7ce895b5b14f8efe6a9711980f984c6b9a6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:eb:02:20:31:82:34:3d:6f:d5:ce:4b:67: 19:9d:dd:89:b9:76:7c:4a:64:61:46:53:ad:25:af: 50:8d:79:5b:94:4c:b6:a7:2d:5c:30:4b:6e:41:68: ea:63:05:77:15:bb:f2:19:ee:f6:0e:fc:e6:ef:24: 1b:eb:cc:63:4d:ff:4d:7b:dc:b5:fc:17:af:9a:d1: 62:8a:2e:13:dd:83:2f:91:7a:b6:85:31:e5:33:70: 89:b7:42:12:f9:9c:c8:8c:33:6c:dd:e5:86:f1:ed: a9:a7:11:16:ea:3f:f9:c0:75:30:77:b9:a1:ef:8d: 03:35:8a:22:2a:03:41:66:5c:b0:b2:7a:d6:63:df: f4:48:b2:78:32:9b:82:eb:ec:85:f3:61:a0:62:8b: fa:96:b1:c6:8c:5f:fe:13:64:d9:03:00:b8:e1:51: 3d:d5:98:3a:01:5d:16:ae:a3:06:1d:fd:c1:e9:61: 26:9a:80:a5:b8:fd:ca:de:9c:2d:a9:95:58:6b:ab: 92:31:81:3f:e1:22:95:72:10:bd:9c:c0:cd:70:ff: 34:18:16:67:99:0f:a7:ef:d5:50:b2:e1:a6:1f:22: 59:b8:41:19:85:35:79:1b:3d:fd:2b:63:2f:45:29: 24:77:6a:0a:1d:39:16:f7:5c:af:b2:b9:45:9c:5d: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E7:CE:89:5B:5B:14:F8:EF:E6:A9:71:19:80:F9:84:C6:B9:A6:F8 X509v3 Authority Key Identifier: keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 35328 Signature Algorithm: sha256WithRSAEncryption 71:69:c1:2d:57:56:3a:2d:21:45:4b:b5:26:8b:04:c0:01:cb: 87:f2:87:59:17:9e:78:f2:37:f7:df:d7:21:ee:9f:83:4d:cf: 30:03:07:c6:a9:21:e7:4a:30:d3:86:83:d1:b4:a5:bd:d5:69: c2:4b:0b:f7:24:48:b8:39:60:e4:72:4a:50:98:24:b7:8c:4d: 1f:e1:2b:84:a0:f9:7a:fd:20:3a:a7:23:79:b7:62:a7:74:fd: f3:47:b2:3a:ee:d4:f8:83:c4:08:65:90:f9:70:c2:71:35:ee: df:88:85:db:25:65:d9:fa:15:d8:0d:2c:b4:88:94:a7:81:4d: 95:db:47:43:2b:e8:b1:3b:7d:55:f7:3d:b4:c8:e4:d0:ba:a2: 55:00:eb:c3:d5:d8:df:a7:17:8a:5d:fc:50:17:82:a2:38:3c: 01:68:a0:0e:b6:7e:13:ac:7f:86:2a:04:b8:56:84:82:05:81: 5a:c9:e0:b7:92:9c:37:c9:3f:34:96:49:06:59:c3:ed:fb:df: c7:af:85:bd:bd:79:6a:d7:51:b0:30:3a:28:c9:42:6d:8e:09: 24:6a:32:09:6c:75:92:6f:a6:59:7e:76:bd:eb:86:ea:9a:fc: 8c:7e:90:14:f5:c7:c2:cb:67:20:d2:90:1e:80:30:48:3d:32: 96:1d:63:cf -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwpYq6o5urQFiASrZgSyyzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWRiZGZlMDFlOWEzZjk2ZDUwMDIyYzNjZGFmZGMzZTFh OGQ5ODgwHhcNMjYwMjA0MTYwMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MGU3Y2U4OTViNWIxNGY4ZWZlNmE5NzExOTgwZjk4NGM2YjlhNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0/rAiAxgjQ9b9XOS2cZnd2JuXZ8 SmRhRlOtJa9QjXlblEy2py1cMEtuQWjqYwV3FbvyGe72Dvzm7yQb68xjTf9Ne9y1 /BevmtFiii4T3YMvkXq2hTHlM3CJt0IS+ZzIjDNs3eWG8e2ppxEW6j/5wHUwd7mh 740DNYoiKgNBZlywsnrWY9/0SLJ4MpuC6+yF82GgYov6lrHGjF/+E2TZAwC44VE9 1Zg6AV0WrqMGHf3B6WEmmoCluP3K3pwtqZVYa6uSMYE/4SKVchC9nMDNcP80GBZn mQ+n79VQsuGmHyJZuEEZhTV5Gz39K2MvRSkkd2oKHTkW91yvsrlFnF364wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFGDnzolbWxT47+apcRmA+YTGuab4MB8GA1UdIwQY MBaAFMGtvf4B6aP5bVACLDza/cPhqNmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYt NDM5NDA1MmNkNjVlLzEvWU9mT2lWdGJGUGp2NXFseEdZRDVoTWE1cHZnLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hNGM2ZjEtN2M5My00NWVlLThlYWYtNDM5NDA1MmNkNjVl LzEvd2EyOV9nSHBvX2x0VUFJc1BOcjl3LUdvMllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCKADANBgkqhkiG 9w0BAQsFAAOCAQEAcWnBLVdWOi0hRUu1JosEwAHLh/KHWReeePI399/XIe6fg03P MAMHxqkh50ow04aD0bSlvdVpwksL9yRIuDlg5HJKUJgkt4xNH+ErhKD5ev0gOqcj ebdip3T980eyOu7U+IPECGWQ+XDCcTXu34iF2yVl2foV2A0stIiUp4FNldtHQyvo sTt9Vfc9tMjk0LqiVQDrw9XY36cXil38UBeCojg8AWigDrZ+E6x/hioEuFaEggWB Wsngt5KcN8k/NJZJBlnD7fvfx6+Fvb15atdRsDA6KMlCbY4JJGoyCWx1km+mWX52 veuG6pr8jH6QFPXHwstnINKQHoAwSD0ylh1jzw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:08 2026 by rpki-client