This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/cIXDfR-Jle5Jda3lToN6L1RqtVs.asa File: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (raw, json) Hash identifier: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4= Subject key identifier: 70:85:C3:7D:1F:89:95:EE:49:75:AD:E5:4E:83:7A:2F:54:6A:B5:5B Certificate issuer: /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f Certificate serial: 019B032AB74FA8469D6D61BA1C9A03667DA5 Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/cIXDfR-Jle5Jda3lToN6L1RqtVs.asa Signing time: Tue 09 Dec 2025 12:51:29 +0000 ASPA not before: Tue 09 Dec 2025 12:51:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 57399 Providers: AS: 47536 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:2a:b7:4f:a8:46:9d:6d:61:ba:1c:9a:03:66:7d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f Validity Not Before: Dec 9 12:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7085c37d1f8995ee4975ade54e837a2f546ab55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:46:32:bf:4d:f8:64:4c:19:8b:65:c3:99:69: 91:41:75:78:80:7a:6e:ea:b3:24:bd:47:0a:e2:26: 15:c5:8f:55:41:f4:96:cc:bd:d4:d3:34:7d:46:4f: ff:07:ae:2e:0c:ea:5d:11:59:87:83:d9:b1:7c:d5: 2a:e3:31:d4:21:4f:19:16:97:6c:a1:f6:d4:d9:2c: ae:40:d3:fb:8c:51:49:13:94:6c:d8:3b:b0:51:9d: 5c:40:26:58:fe:a6:fa:f9:6c:8e:85:81:77:57:51: d2:e5:1d:3c:4f:19:28:a8:9f:63:42:69:d4:8a:19: 0a:fb:1e:a3:a9:47:d9:12:7a:7f:85:2a:db:43:3d: 73:ee:07:82:7e:dd:10:16:50:34:06:80:8d:84:aa: d0:e5:1b:87:57:2b:38:e8:2e:03:dc:e2:98:a2:73: d2:94:f3:bf:28:e6:b6:6b:07:d3:7f:a0:ee:fc:b1: de:ca:e4:b3:ba:3f:0e:cc:3b:76:46:28:a4:f0:13: 5c:09:26:ad:b1:c8:bf:93:db:3c:48:a3:71:fb:b7: 6f:40:11:97:38:92:3c:65:b7:a8:55:34:99:2d:09: 90:09:9e:b7:35:be:7e:76:19:8d:19:6a:f5:d9:97: 09:45:c1:50:a4:db:be:df:dc:a4:28:81:5c:de:d9: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:C3:7D:1F:89:95:EE:49:75:AD:E5:4E:83:7A:2F:54:6A:B5:5B X509v3 Authority Key Identifier: keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/cIXDfR-Jle5Jda3lToN6L1RqtVs.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 57399 Signature Algorithm: sha256WithRSAEncryption 92:f7:79:1f:82:7f:1c:82:f8:da:cd:3d:ae:40:b9:e5:b1:c4: cd:20:43:62:78:e8:f0:b8:31:1e:b4:e4:8c:4a:f8:9c:f5:31: bb:30:da:cf:8c:b1:6a:aa:ad:3d:8d:7a:75:08:4a:74:02:35: 3e:81:46:7b:21:a9:aa:71:82:61:98:30:c2:69:55:e0:62:a1: 7a:2b:a2:37:c9:4a:ae:ba:9b:4e:a2:9c:c7:13:34:f9:b4:ed: 8c:9e:73:44:7e:8f:ae:0a:da:1e:97:ff:d7:0b:be:da:7b:57: fe:ff:af:7c:62:12:ec:b3:89:67:3e:28:c4:6b:b8:fb:3e:1a: 89:ec:1d:ea:39:3b:0e:55:36:08:74:b2:54:6c:f5:61:90:38: 5c:c8:c8:ea:49:62:ac:37:4f:2f:75:a8:59:9f:bb:fe:af:4d: a8:9c:cb:13:af:85:34:35:81:4a:4c:bf:e6:2b:90:f3:82:4b: 99:a9:90:7c:0b:ef:bb:65:65:05:2b:22:1b:e5:2c:a6:79:89: c9:92:07:90:a8:ad:06:ac:6a:83:b6:a0:e7:70:a9:61:cb:bf: 51:ee:9f:02:b2:ff:8e:e2:37:34:4c:9e:44:c4:93:6e:a2:1e: 3a:ef:50:af:44:ae:36:ed:69:f8:0a:bf:b6:ce:cf:2c:be:06: 51:1b:c7:99 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsDKrdPqEadbWG6HJoDZn2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWYwNjA4Mjk3ZTlmOTQzNzFhNzJkOTNhZDdiMTFmNzlj MWY4M2YwHhcNMjUxMjA5MTI1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDg1YzM3ZDFmODk5NWVlNDk3NWFkZTU0ZTgzN2EyZjU0NmFiNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EYyv034ZEwZi2XDmWmRQXV4gHpu 6rMkvUcK4iYVxY9VQfSWzL3U0zR9Rk//B64uDOpdEVmHg9mxfNUq4zHUIU8ZFpds ofbU2SyuQNP7jFFJE5Rs2DuwUZ1cQCZY/qb6+WyOhYF3V1HS5R08TxkoqJ9jQmnU ihkK+x6jqUfZEnp/hSrbQz1z7geCft0QFlA0BoCNhKrQ5RuHVys46C4D3OKYonPS lPO/KOa2awfTf6Du/LHeyuSzuj8OzDt2Riik8BNcCSatsci/k9s8SKNx+7dvQBGX OJI8ZbeoVTSZLQmQCZ63Nb5+dhmNGWr12ZcJRcFQpNu+39ykKIFc3tmWhwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHCFw30fiZXuSXWt5U6Dei9UarVbMB8GA1UdIwQY MBaAFMFfBggpfp+UNxpy2TrXsR95wfg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81OTBlNmEtYzRmYi00ZTRkLTlmZjQt NzE3Y2Y3ZDczNTg3LzEvY0lYRGZSLUpsZTVKZGEzbFRvTjZMMVJxdFZzLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81OTBlNmEtYzRmYi00ZTRkLTlmZjQtNzE3Y2Y3ZDczNTg3 LzEvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDgNzANBgkqhkiG 9w0BAQsFAAOCAQEAkvd5H4J/HIL42s09rkC55bHEzSBDYnjo8LgxHrTkjEr4nPUx uzDaz4yxaqqtPY16dQhKdAI1PoFGeyGpqnGCYZgwwmlV4GKheiuiN8lKrrqbTqKc xxM0+bTtjJ5zRH6PrgraHpf/1wu+2ntX/v+vfGIS7LOJZz4oxGu4+z4aiewd6jk7 DlU2CHSyVGz1YZA4XMjI6klirDdPL3WoWZ+7/q9NqJzLE6+FNDWBSky/5iuQ84JL mamQfAvvu2VlBSsiG+UspnmJyZIHkKitBqxqg7ag53CpYcu/Ue6fArL/juI3NEye RMSTbqIeOu9Qr0SuNu1p+Aq/ts7PLL4GURvHmQ== -----END CERTIFICATE-----Generated at Sun Dec 14 06:13:33 2025 by rpki-client