This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/qPYgVakLNDaEGc5ONkGmhqVYYy0.asa File: qPYgVakLNDaEGc5ONkGmhqVYYy0.asa (raw, json) Hash identifier: Q6ggqq2IBO+TwQuRQrQoJwyiBwBG7kWAAk+owOZubuA= Subject key identifier: A8:F6:20:55:A9:0B:34:36:84:19:CE:4E:36:41:A6:86:A5:58:63:2D Certificate issuer: /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Certificate serial: 019AF4141B3C0FF4EF3A007491C064CF872C Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/qPYgVakLNDaEGc5ONkGmhqVYYy0.asa Signing time: Sat 06 Dec 2025 14:32:29 +0000 ASPA not before: Sat 06 Dec 2025 14:32:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 50338 Providers: AS: 16019 AS: 47232 AS: 60068 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:14:1b:3c:0f:f4:ef:3a:00:74:91:c0:64:cf:87:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7 Validity Not Before: Dec 6 14:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8f62055a90b34368419ce4e3641a686a558632d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:97:44:35:5f:62:1a:90:47:de:9a:02:9f: c4:1f:3d:d5:40:6f:d0:53:f4:5a:16:6f:5f:ac:91: d7:2e:21:30:e9:2d:9e:68:20:7d:bf:bc:1d:e4:6d: a6:1f:30:0f:a5:e9:22:ab:77:55:46:a6:f3:7f:23: 72:4a:a4:55:7f:de:a1:77:f8:3f:3f:c1:2a:9e:15: a7:a7:4f:35:6e:ee:c3:9d:20:85:a7:10:ed:fd:88: 8c:f6:e4:26:1d:05:fd:34:7d:92:32:50:08:5a:f6: 36:87:44:05:c4:bf:b7:ed:87:f8:1b:93:d9:f8:43: df:ad:0e:3a:d9:2a:e2:14:3b:78:36:35:dc:1c:ea: bd:8f:9b:10:0d:bc:08:99:0d:b0:6a:3c:a0:99:5f: 3f:a5:c4:70:03:92:14:a6:c1:b6:12:c9:4f:a0:70: 05:d8:e2:77:46:24:44:4a:63:4b:1f:bb:ed:c7:7b: d3:b7:d0:31:6e:ac:89:cf:97:40:f6:97:79:dc:e1: 94:5b:db:36:82:da:d8:c5:d4:d1:a6:98:a3:c5:b1: d3:b8:cc:5a:e2:64:78:e6:fb:a9:84:e4:86:94:18: e5:8d:91:84:28:ac:72:ac:0d:ff:a0:b6:bf:24:26: b7:b6:ef:15:86:7b:79:15:fc:23:3e:93:10:78:60: a7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:20:55:A9:0B:34:36:84:19:CE:4E:36:41:A6:86:A5:58:63:2D X509v3 Authority Key Identifier: keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/qPYgVakLNDaEGc5ONkGmhqVYYy0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50338 Signature Algorithm: sha256WithRSAEncryption 11:12:fc:ad:5c:91:7c:0f:d9:b3:53:30:f9:b5:21:5e:3b:d1: ee:7a:55:43:07:0b:d2:07:0d:8c:5f:d3:66:70:56:68:ad:2f: 56:d6:ae:f3:d5:88:42:3c:68:85:f6:f0:d9:bf:27:2a:97:5f: 0b:5f:cb:cb:dc:d5:57:29:67:2f:a7:9e:aa:f7:16:0b:73:70: 61:3a:1b:7d:fa:31:20:48:17:93:8c:a5:04:b3:f9:0e:b8:64: b6:30:48:70:59:16:7a:cf:85:e7:c3:c5:ab:7e:4d:1b:18:44: e6:d0:e1:8c:62:25:7c:f7:c2:3d:b3:47:cb:f8:02:c3:81:06: ae:6f:0c:60:38:b3:fc:3b:78:a9:1a:e4:b1:9d:b5:d8:42:05: 3e:b7:c5:4b:55:f4:80:2e:06:f2:99:8c:8d:c8:c0:be:64:15: 89:ee:76:76:7e:2c:4d:df:da:38:7b:6f:b5:42:66:21:04:a9: 0b:f7:f4:7c:4e:05:25:57:d7:05:a7:c2:b6:b0:84:f8:6a:9c: 69:88:86:fc:ca:bc:86:3a:84:a3:93:48:a9:33:ba:41:39:6e: da:39:f9:6f:c7:fb:ad:e9:e4:3f:1f:54:64:3d:71:28:4a:66: 27:68:ad:71:c9:36:cb:b5:85:2c:7a:04:4e:20:f5:9f:4e:3e: 7d:71:37:c5 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr0FBs8D/TvOgB0kcBkz4csMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYmM0ZGFmNjBjN2Q0NGU5NWQ2Y2I5MjA3YTlkZGVjNTlh NDRiZjcwHhcNMjUxMjA2MTQzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGY2MjA1NWE5MGIzNDM2ODQxOWNlNGUzNjQxYTY4NmE1NTg2MzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDKXRDVfYhqQR96aAp/EHz3VQG/Q U/RaFm9frJHXLiEw6S2eaCB9v7wd5G2mHzAPpekiq3dVRqbzfyNySqRVf96hd/g/ P8EqnhWnp081bu7DnSCFpxDt/YiM9uQmHQX9NH2SMlAIWvY2h0QFxL+37Yf4G5PZ +EPfrQ462SriFDt4NjXcHOq9j5sQDbwImQ2wajygmV8/pcRwA5IUpsG2EslPoHAF 2OJ3RiRESmNLH7vtx3vTt9AxbqyJz5dA9pd53OGUW9s2gtrYxdTRppijxbHTuMxa 4mR45vuphOSGlBjljZGEKKxyrA3/oLa/JCa3tu8Vhnt5FfwjPpMQeGCnBQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKj2IFWpCzQ2hBnOTjZBpoalWGMtMB8GA1UdIwQY MBaAFDy8Ta9gx9ROldbLkgep3exZpEv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYt YmY0OWE2ZDdiZTdjLzEvcVBZZ1Zha0xORGFFR2M1T05rR21ocVZZWXkwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWZkNGItZGY2Mi00YmE0LWFkNzYtYmY0OWE2ZDdiZTdj LzEvUEx4TnIyREgxRTZWMXN1U0I2bmQ3Rm1rU19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEojANBgkqhkiG 9w0BAQsFAAOCAQEAERL8rVyRfA/Zs1Mw+bUhXjvR7npVQwcL0gcNjF/TZnBWaK0v Vtau89WIQjxohfbw2b8nKpdfC1/Ly9zVVylnL6eeqvcWC3NwYTobffoxIEgXk4yl BLP5DrhktjBIcFkWes+F58PFq35NGxhE5tDhjGIlfPfCPbNHy/gCw4EGrm8MYDiz /Dt4qRrksZ212EIFPrfFS1X0gC4G8pmMjcjAvmQVie52dn4sTd/aOHtvtUJmIQSp C/f0fE4FJVfXBafCtrCE+GqcaYiG/Mq8hjqEo5NIqTO6QTlu2jn5b8f7renkPx9U ZD1xKEpmJ2itcck2y7WFLHoETiD1n04+fXE3xQ== -----END CERTIFICATE-----Generated at Sun Dec 7 09:40:51 2025 by rpki-client