This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/3jTH1h5dUYotQ6HSif98N43DNuA.asa File: 3jTH1h5dUYotQ6HSif98N43DNuA.asa (raw, json) Hash identifier: sd2VnqkRw5U6ZlFZBJnlXiTwm3x3Tfojh0Hk8MPRlmE= Subject key identifier: DE:34:C7:D6:1E:5D:51:8A:2D:43:A1:D2:89:FF:7C:37:8D:C3:36:E0 Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b Certificate serial: 019AE5C7D9D17E2BEEC2D3790EF7F4D3FB86 Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/3jTH1h5dUYotQ6HSif98N43DNuA.asa Signing time: Wed 03 Dec 2025 19:54:31 +0000 ASPA not before: Wed 03 Dec 2025 19:54:31 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 208460 Providers: AS: 20473 AS: 209533 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:c7:d9:d1:7e:2b:ee:c2:d3:79:0e:f7:f4:d3:fb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b Validity Not Before: Dec 3 19:54:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de34c7d61e5d518a2d43a1d289ff7c378dc336e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7c:08:b8:ba:f8:ac:23:19:4f:11:60:a6:20: 3d:35:5f:8e:98:82:d4:e1:21:8e:e3:be:07:0c:ee: d0:ee:c4:5d:7f:47:4a:56:eb:b0:95:54:26:33:74: a8:4a:90:13:f8:3a:d5:85:d4:f1:a7:a2:12:c9:22: 8c:a9:8b:ab:4c:f4:78:0f:31:18:ca:bf:c2:ca:61: 87:8f:9b:82:6f:fc:de:25:d8:56:cb:88:d0:59:5b: 38:09:98:99:02:5a:a7:84:3c:24:9e:33:3a:10:cd: 16:74:8e:5c:0c:69:e4:b7:1e:95:e8:70:85:69:46: 8f:0a:00:cf:64:09:16:33:be:31:08:70:9a:84:7e: 52:75:d3:3b:f8:47:c6:50:ad:eb:be:ab:22:94:1a: 35:8b:87:d0:71:5d:ba:96:29:68:43:1e:9c:f8:4e: f4:ce:6f:32:e6:ce:cc:f7:4c:4f:51:e4:25:e8:81: 1b:f6:c6:66:ad:20:76:39:76:02:02:2e:01:fb:98: 05:c7:58:15:81:43:85:e4:16:9e:74:26:eb:d1:d7: 01:e5:a1:16:59:b1:4e:8a:eb:8d:da:d5:38:28:6e: 74:08:95:b6:e7:e9:f7:4b:c9:e9:e8:e0:ec:b6:a1: 41:ec:26:e4:0b:4b:6a:19:c0:73:f1:c7:e0:10:74: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:34:C7:D6:1E:5D:51:8A:2D:43:A1:D2:89:FF:7C:37:8D:C3:36:E0 X509v3 Authority Key Identifier: keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/3jTH1h5dUYotQ6HSif98N43DNuA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208460 Signature Algorithm: sha256WithRSAEncryption 73:2f:76:dd:f0:38:29:67:18:5e:07:9a:65:35:c0:64:01:87: e2:b4:34:33:69:ed:24:5f:02:ab:9f:0d:f2:2a:2d:6f:a0:9d: bf:4f:ef:13:dc:b9:58:83:f2:30:a8:ca:b1:cc:65:00:b0:ab: 32:7b:fc:33:d0:21:30:54:5f:80:a2:75:3e:6b:1f:ab:8d:da: 8b:f8:94:ad:51:83:8e:d3:a7:1a:5e:20:14:0e:17:1e:0a:13: 39:81:ac:39:50:5b:c5:b8:57:6d:73:d0:09:00:45:73:7e:7b: e5:80:de:c8:35:7d:17:05:d8:31:b6:7a:99:65:03:6b:66:88: e4:58:30:ad:f4:f0:35:71:94:8a:1f:2f:a0:6a:e3:9a:8a:97: d4:77:35:c9:27:47:33:eb:1c:7e:eb:f1:e5:5f:60:ef:6d:04: 64:80:5a:80:b8:d1:f9:ee:5d:39:78:ab:e0:6d:6d:5b:c6:e4: dd:7a:25:76:9b:ac:13:07:ea:f7:d3:04:28:90:77:ca:08:0a: 34:55:fd:0c:5d:6d:2a:e5:ac:fa:90:02:91:94:54:d5:93:c1: b6:dd:4e:c5:66:5b:6a:c1:eb:76:1e:fe:3f:a8:1c:58:45:ca: 13:3d:68:a5:e4:39:9f:3e:14:89:e5:1b:e1:fd:87:f8:c7:e5: ff:d8:46:9f -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrlx9nRfivuwtN5Dvf00/uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz ZTM2OGIwHhcNMjUxMjAzMTk1NDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTM0YzdkNjFlNWQ1MThhMmQ0M2ExZDI4OWZmN2MzNzhkYzMzNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3wIuLr4rCMZTxFgpiA9NV+OmILU 4SGO474HDO7Q7sRdf0dKVuuwlVQmM3SoSpAT+DrVhdTxp6ISySKMqYurTPR4DzEY yr/CymGHj5uCb/zeJdhWy4jQWVs4CZiZAlqnhDwknjM6EM0WdI5cDGnktx6V6HCF aUaPCgDPZAkWM74xCHCahH5SddM7+EfGUK3rvqsilBo1i4fQcV26liloQx6c+E70 zm8y5s7M90xPUeQl6IEb9sZmrSB2OXYCAi4B+5gFx1gVgUOF5BaedCbr0dcB5aEW WbFOiuuN2tU4KG50CJW25+n3S8np6ODstqFB7CbkC0tqGcBz8cfgEHS6SwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFN40x9YeXVGKLUOh0on/fDeNwzbgMB8GA1UdIwQY MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt OGYwNjNhNWY2YTg2LzEvM2pUSDFoNWRVWW90UTZIU2lmOThONDNETnVBLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2 LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuTDANBgkqhkiG 9w0BAQsFAAOCAQEAcy923fA4KWcYXgeaZTXAZAGH4rQ0M2ntJF8Cq58N8iotb6Cd v0/vE9y5WIPyMKjKscxlALCrMnv8M9AhMFRfgKJ1Pmsfq43ai/iUrVGDjtOnGl4g FA4XHgoTOYGsOVBbxbhXbXPQCQBFc3575YDeyDV9FwXYMbZ6mWUDa2aI5FgwrfTw NXGUih8voGrjmoqX1Hc1ySdHM+scfuvx5V9g720EZIBagLjR+e5dOXir4G1tW8bk 3XoldpusEwfq99MEKJB3yggKNFX9DF1tKuWs+pACkZRU1ZPBtt1OxWZbasHrdh7+ P6gcWEXKEz1opeQ5nz4UieUb4f2H+Mfl/9hGnw== -----END CERTIFICATE-----Generated at Fri Dec 5 22:10:43 2025 by rpki-client