This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/tvVyRp4L9e3meI8HjNM8zokhY-g.asa File: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (raw, json) Hash identifier: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98= Subject key identifier: B6:F5:72:46:9E:0B:F5:ED:E6:78:8F:07:8C:D3:3C:CE:89:21:63:E8 Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172 Certificate serial: 019AFC78D8CB9C5DE0D26D86DD2D5F27DB43 Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/tvVyRp4L9e3meI8HjNM8zokhY-g.asa Signing time: Mon 08 Dec 2025 05:39:29 +0000 ASPA not before: Mon 08 Dec 2025 05:39:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 199530 Providers: AS: 49070 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:78:d8:cb:9c:5d:e0:d2:6d:86:dd:2d:5f:27:db:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172 Validity Not Before: Dec 8 05:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6f572469e0bf5ede6788f078cd33cce892163e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:f6:48:82:1c:18:83:b7:26:0e:5a:d3:ac: 42:d0:fb:b7:5c:13:71:5b:be:99:97:cb:64:24:30: 89:49:30:ad:21:50:38:9c:01:1d:b0:33:04:62:12: 88:90:39:2e:fc:e4:7e:3c:93:b1:bb:af:b9:b0:24: a3:97:9e:1c:28:45:4e:58:8b:69:a6:5e:55:a3:01: c0:bd:70:be:56:f6:0d:1e:cc:d0:46:de:ec:6a:8a: bc:8a:4b:65:b8:00:17:a8:62:45:1a:85:c9:00:58: a7:72:df:bc:7a:25:90:66:bd:d3:3f:5a:27:86:50: 5e:6c:75:48:66:c5:b2:80:12:76:4d:03:6b:de:7a: 9f:df:8e:4e:be:b5:ae:6a:f3:ab:ff:67:69:9c:9f: 69:9d:4f:0e:7c:33:12:ff:7f:ac:aa:f7:86:2f:94: 92:85:70:e8:e8:92:e4:a1:60:7f:6c:bd:35:b1:95: a4:a3:b2:c7:5b:78:04:77:29:2e:50:34:20:30:88: 26:2e:ab:6a:4b:5e:e4:73:9f:67:49:8e:39:5d:83: 02:3f:8d:68:8c:ce:e4:29:f4:cb:6a:e8:ad:9d:d7: 54:f3:95:e2:2d:4e:80:8e:a5:fe:32:e3:2e:1d:a5: 0a:07:6e:f3:35:b5:03:24:ed:ac:ff:cf:e8:7d:a6: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:72:46:9E:0B:F5:ED:E6:78:8F:07:8C:D3:3C:CE:89:21:63:E8 X509v3 Authority Key Identifier: keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/tvVyRp4L9e3meI8HjNM8zokhY-g.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199530 Signature Algorithm: sha256WithRSAEncryption 1f:ac:ed:6b:8d:ff:94:bf:6c:55:fd:4d:d9:f6:13:7f:9d:38: 02:06:8f:39:70:af:81:1a:d2:0e:28:ec:a4:07:ae:52:df:07: 1c:17:6c:89:8b:dd:13:91:78:df:1b:9f:bc:23:b0:ed:bf:30: d6:46:7b:b7:a5:c5:5e:26:07:6e:f2:d2:de:58:a3:9b:fd:97: 4d:56:cc:93:24:6f:a5:c5:97:31:cb:5d:05:3e:ed:06:0c:c2: 3b:ef:97:4f:ed:a8:c3:a0:f7:f2:f6:20:8a:68:7c:3f:30:9f: ba:8d:49:ae:6b:c4:50:df:b7:04:4d:53:76:9c:b1:c0:0a:0a: 1a:d1:da:ec:1b:80:97:6d:a4:da:cb:36:79:b8:24:bc:fb:f1: b6:a1:a6:17:d5:f4:73:e5:b8:74:5b:33:1b:a9:e0:cc:ab:5e: bf:7f:3f:bf:d7:84:6a:8f:b0:6f:ae:a2:e0:45:99:9f:b5:a3: fc:b7:15:a3:09:ca:a8:73:84:2f:f7:c9:be:3b:7a:3d:1e:d8: 34:1e:f0:70:4f:29:2f:4e:d6:1c:d5:a6:0d:3d:0e:ba:6e:62: d0:93:92:dc:c9:4c:ec:d4:0f:3f:d9:b4:93:db:5f:5f:15:c1: 10:57:30:a2:20:0e:2f:e3:f2:ee:16:36:5c:e7:3d:c8:6e:17: 99:7e:0f:0f -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZr8eNjLnF3g0m2G3S1fJ9tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm ODQxNzIwHhcNMjUxMjA4MDUzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmY1NzI0NjllMGJmNWVkZTY3ODhmMDc4Y2QzM2NjZTg5MjE2M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkP2SIIcGIO3Jg5a06xC0Pu3XBNx W76Zl8tkJDCJSTCtIVA4nAEdsDMEYhKIkDku/OR+PJOxu6+5sCSjl54cKEVOWItp pl5VowHAvXC+VvYNHszQRt7saoq8iktluAAXqGJFGoXJAFinct+8eiWQZr3TP1on hlBebHVIZsWygBJ2TQNr3nqf345OvrWuavOr/2dpnJ9pnU8OfDMS/3+sqveGL5SS hXDo6JLkoWB/bL01sZWko7LHW3gEdykuUDQgMIgmLqtqS17kc59nSY45XYMCP41o jM7kKfTLauitnddU85XiLU6AjqX+MuMuHaUKB27zNbUDJO2s/8/ofaZe/wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFLb1ckaeC/Xt5niPB4zTPM6JIWPoMB8GA1UdIwQY MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt ZGJjY2UyMTQxOWI3LzEvdHZWeVJwNEw5ZTNtZUk4SGpOTTh6b2toWS1nLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3 LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLajANBgkqhkiG 9w0BAQsFAAOCAQEAH6zta43/lL9sVf1N2fYTf504AgaPOXCvgRrSDijspAeuUt8H HBdsiYvdE5F43xufvCOw7b8w1kZ7t6XFXiYHbvLS3lijm/2XTVbMkyRvpcWXMctd BT7tBgzCO++XT+2ow6D38vYgimh8PzCfuo1JrmvEUN+3BE1TdpyxwAoKGtHa7BuA l22k2ss2ebgkvPvxtqGmF9X0c+W4dFszG6ngzKtev38/v9eEao+wb66i4EWZn7Wj /LcVownKqHOEL/fJvjt6PR7YNB7wcE8pL07WHNWmDT0Oum5i0JOS3MlM7NQPP9m0 k9tfXxXBEFcwoiAOL+Py7hY2XOc9yG4XmX4PDw== -----END CERTIFICATE-----Generated at Wed Dec 10 12:32:48 2025 by rpki-client