This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/8_kucGIrmgrww2gQuMj2PaOsbZQ.asa File: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (raw, json) Hash identifier: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ= Subject key identifier: F3:F9:2E:70:62:2B:9A:0A:F0:C3:68:10:B8:C8:F6:3D:A3:AC:6D:94 Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7 Certificate serial: 019B0D4A9516D1BA56A398D7B310BF4FBD4D Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/8_kucGIrmgrww2gQuMj2PaOsbZQ.asa Signing time: Thu 11 Dec 2025 12:02:30 +0000 ASPA not before: Thu 11 Dec 2025 12:02:30 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214710 Providers: AS: 8478 AS: 25400 AS: 41164 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:4a:95:16:d1:ba:56:a3:98:d7:b3:10:bf:4f:bd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7 Validity Not Before: Dec 11 12:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3f92e70622b9a0af0c36810b8c8f63da3ac6d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:24:65:7a:29:21:ca:85:39:0b:ae:45:9d: 98:b4:5b:4b:b5:42:d3:25:d4:a4:e3:11:75:40:fa: 69:ff:4f:41:39:74:b8:5b:ea:b4:82:d2:9e:79:4c: 3e:77:12:08:74:e9:36:7b:c4:d9:a4:ea:60:3b:22: 5e:0c:8f:66:7c:a6:9d:17:4f:32:f1:0e:ae:b0:77: e8:a5:d0:4d:02:c6:a4:70:b9:88:ae:49:80:6e:a9: 28:4a:27:bd:aa:ba:7a:2c:8c:64:ec:59:78:8e:72: 51:87:11:6a:43:35:be:d8:d5:c4:22:f6:2a:55:70: 05:2e:bb:fc:0e:5a:c2:21:fb:a6:36:9f:74:39:11: a6:ca:98:c1:63:05:e1:a0:cd:21:7e:a0:50:55:6a: 70:52:3e:18:ad:e9:c8:eb:4f:23:cc:81:fa:81:20: 77:5b:c4:88:41:0b:4e:d5:f8:05:d8:6e:60:8f:65: bd:aa:02:59:b4:ef:84:6f:00:c4:47:98:7c:92:87: af:03:88:a6:fa:3a:8f:fb:a7:ac:58:29:b6:53:d5: 3d:51:62:80:b5:5f:76:b7:dd:39:ad:75:f2:3e:2c: 67:25:38:8a:04:26:e4:89:51:6f:5f:10:88:29:b2: 7a:5b:a4:ee:42:d0:89:e1:8b:fb:55:aa:4b:0d:61: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F9:2E:70:62:2B:9A:0A:F0:C3:68:10:B8:C8:F6:3D:A3:AC:6D:94 X509v3 Authority Key Identifier: keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/8_kucGIrmgrww2gQuMj2PaOsbZQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214710 Signature Algorithm: sha256WithRSAEncryption 3b:55:cb:3a:00:f3:ad:8d:57:16:5c:00:f9:32:2f:32:7f:2e: de:79:2e:c2:fd:f7:a1:57:5e:7f:50:61:6a:fb:83:dc:8b:67: e6:b3:66:fa:63:ca:5f:ec:dc:b6:aa:d2:02:46:60:2b:a6:a8: 7a:d7:10:63:4d:6e:33:91:89:ce:ee:8b:e7:82:ac:85:42:c8: cb:f0:01:69:90:58:66:5b:64:ed:f8:57:a9:b5:a7:38:30:3b: 79:ed:82:bc:76:27:29:3d:29:26:eb:cb:fd:ae:f0:fa:91:f0: 53:d3:f4:28:30:bd:6b:54:94:fc:96:12:94:c8:14:ff:9a:82: e7:76:20:cc:29:9d:ed:fe:b5:fa:bc:a9:a8:6e:f3:49:5b:57: 84:d4:ce:7b:44:a9:e2:24:d8:3b:9a:a7:b1:e2:36:35:ba:f8: 3c:db:eb:7c:f9:10:fe:92:16:8f:07:75:68:ac:00:6a:43:29: 05:ba:dc:82:3f:d5:1d:1a:f7:fa:01:0f:2f:c1:f8:6c:85:fe: c2:45:08:0b:21:9a:95:c9:36:64:78:4f:00:45:0e:c8:a0:c9: a3:fb:ae:59:da:54:36:98:a8:29:6e:b3:59:69:5f:75:69:6c: 77:cd:4f:46:24:55:27:ef:60:bb:19:db:fb:39:95:73:c3:1e: 12:86:19:d9 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsNSpUW0bpWo5jXsxC/T71NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj OWRmZjcwHhcNMjUxMjExMTIwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Y5MmU3MDYyMmI5YTBhZjBjMzY4MTBiOGM4ZjYzZGEzYWM2ZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AYkZXopIcqFOQuuRZ2YtFtLtULT JdSk4xF1QPpp/09BOXS4W+q0gtKeeUw+dxIIdOk2e8TZpOpgOyJeDI9mfKadF08y 8Q6usHfopdBNAsakcLmIrkmAbqkoSie9qrp6LIxk7Fl4jnJRhxFqQzW+2NXEIvYq VXAFLrv8DlrCIfumNp90ORGmypjBYwXhoM0hfqBQVWpwUj4YrenI608jzIH6gSB3 W8SIQQtO1fgF2G5gj2W9qgJZtO+EbwDER5h8koevA4im+jqP+6esWCm2U9U9UWKA tV92t905rXXyPixnJTiKBCbkiVFvXxCIKbJ6W6TuQtCJ4Yv7VapLDWH92wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFPP5LnBiK5oK8MNoELjI9j2jrG2UMB8GA1UdIwQY MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt NTNjZDkxYjI4YzRmLzEvOF9rdWNHSXJtZ3J3dzJnUXVNajJQYU9zYlpRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNGtjANBgkqhkiG 9w0BAQsFAAOCAQEAO1XLOgDzrY1XFlwA+TIvMn8u3nkuwv33oVdef1BhavuD3Itn 5rNm+mPKX+zctqrSAkZgK6aoetcQY01uM5GJzu6L54KshULIy/ABaZBYZltk7fhX qbWnODA7ee2CvHYnKT0pJuvL/a7w+pHwU9P0KDC9a1SU/JYSlMgU/5qC53YgzCmd 7f61+rypqG7zSVtXhNTOe0Sp4iTYO5qnseI2Nbr4PNvrfPkQ/pIWjwd1aKwAakMp Bbrcgj/VHRr3+gEPL8H4bIX+wkUICyGalck2ZHhPAEUOyKDJo/uuWdpUNpioKW6z WWlfdWlsd81PRiRVJ+9guxnb+zmVc8MeEoYZ2Q== -----END CERTIFICATE-----Generated at Sun Dec 14 06:00:35 2025 by rpki-client