This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/u0rgq34g6knGKqNfLHS17PXXRWM.asa File: u0rgq34g6knGKqNfLHS17PXXRWM.asa (raw, json) Hash identifier: QeLh0G1yC5rQpsTeRt7y2uhBhEF8D1QtaAhHKAAQp1E= Subject key identifier: BB:4A:E0:AB:7E:20:EA:49:C6:2A:A3:5F:2C:74:B5:EC:F5:D7:45:63 Certificate issuer: /CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521 Certificate serial: 019C03FC9474D1EBDC3AF55E0E5309B59286 Authority key identifier: 08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/u0rgq34g6knGKqNfLHS17PXXRWM.asa Signing time: Wed 28 Jan 2026 09:43:30 +0000 ASPA not before: Wed 28 Jan 2026 09:43:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 201988 Providers: AS: 206170 AS: 209693 AS: 210457 AS: 401152 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.mft rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:fc:94:74:d1:eb:dc:3a:f5:5e:0e:53:09:b5:92:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089b4d6f7a0a33b0180411ed74f87a7cfed96521 Validity Not Before: Jan 28 09:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb4ae0ab7e20ea49c62aa35f2c74b5ecf5d74563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:c0:50:ac:f9:77:46:28:e8:c2:11:aa:d0: e7:40:8b:ea:ea:3d:d1:5a:89:97:79:f1:bf:93:e6: 9d:d4:7c:cb:3c:aa:96:0e:36:05:31:01:de:6f:53: fc:eb:a4:46:c3:4c:26:28:40:43:8b:1e:96:6f:5e: 99:87:1a:13:63:b0:e7:8d:e8:ad:ad:18:5f:0e:f9: 1b:5f:b0:cf:2a:ca:b7:d3:fe:1e:38:b3:80:c1:ea: b9:f0:51:d7:b4:27:3f:3c:07:94:e9:79:36:67:28: 1e:0e:15:d6:da:21:90:aa:92:fc:d8:3a:51:5f:29: a9:7a:0f:3c:f8:cf:d9:5e:cd:e7:be:9e:11:1c:57: 43:b5:f0:2f:1c:ff:1f:2e:62:ca:e5:ac:18:16:d4: 2d:ec:d9:e3:32:8f:1d:61:1a:92:38:50:c5:ac:dd: ff:34:ed:a8:57:14:c0:72:52:17:e9:cf:c9:23:dd: e6:55:50:e6:40:94:8f:db:20:3f:11:c3:ea:e6:d7: 61:af:ed:08:f5:60:9d:34:b2:c2:23:a5:ef:df:11: 2b:3c:65:f4:71:9b:e4:e7:43:75:33:3e:e3:e1:a7: 7b:fc:1a:7b:23:41:60:10:a8:ba:16:18:1b:bd:8f: a5:df:f2:eb:57:12:0d:ab:fa:18:c2:0e:63:fa:40: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:E0:AB:7E:20:EA:49:C6:2A:A3:5F:2C:74:B5:EC:F5:D7:45:63 X509v3 Authority Key Identifier: keyid:08:9B:4D:6F:7A:0A:33:B0:18:04:11:ED:74:F8:7A:7C:FE:D9:65:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/u0rgq34g6knGKqNfLHS17PXXRWM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/097034-0953-4ab6-91c2-c5009ab1fdaf/1/CJtNb3oKM7AYBBHtdPh6fP7ZZSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201988 Signature Algorithm: sha256WithRSAEncryption 85:e9:d7:69:7e:aa:54:2d:f3:f6:d1:8f:70:b1:08:26:2d:db: ef:e0:57:dd:82:44:2a:0a:21:1d:f7:dd:2d:80:cc:b5:ba:f2: e8:95:70:f9:59:26:ed:e7:bc:80:6b:a3:0d:8a:78:26:6b:47: eb:be:41:09:0b:bb:10:cd:e1:ae:ec:44:a6:13:4b:dd:5a:e7: f0:ea:49:6d:26:77:73:c5:db:3b:8f:67:b9:36:44:ed:b1:cf: 98:2b:0d:1f:aa:e0:65:45:ee:ee:15:3b:b7:10:17:ca:e4:ac: a5:f2:ba:57:d0:b7:ed:fb:4a:9e:58:31:d7:8c:46:fa:0e:84: e3:9d:b0:7e:51:9b:3f:33:1f:24:3e:cf:64:f2:5d:a6:64:e9: d3:ff:98:4c:2d:19:f0:3f:08:e1:b4:2f:a2:bb:18:99:ae:dc: 2c:21:db:7d:e6:47:71:aa:19:10:b0:e2:79:7e:02:f0:59:5d: 95:59:cd:5b:9d:98:05:2b:28:65:79:21:6c:5d:8e:e6:3a:8a: b7:7f:0c:a9:3b:9d:09:ac:e3:58:8a:75:e6:e0:68:41:ba:86: 0a:3f:39:f0:32:86:52:73:12:d4:4b:96:da:af:8a:5f:cd:9f: 99:ad:93:ff:f7:d0:f3:27:90:bf:56:ba:44:ff:fb:bd:de:db: cf:6c:28:e8 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZwD/JR00evcOvVeDlMJtZKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWI0ZDZmN2EwYTMzYjAxODA0MTFlZDc0Zjg3YTdjZmVk OTY1MjEwHhcNMjYwMTI4MDk0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjRhZTBhYjdlMjBlYTQ5YzYyYWEzNWYyYzc0YjVlY2Y1ZDc0NTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobzAUKz5d0Yo6MIRqtDnQIvq6j3R WomXefG/k+ad1HzLPKqWDjYFMQHeb1P866RGw0wmKEBDix6Wb16ZhxoTY7Dnjeit rRhfDvkbX7DPKsq30/4eOLOAweq58FHXtCc/PAeU6Xk2ZygeDhXW2iGQqpL82DpR Xympeg88+M/ZXs3nvp4RHFdDtfAvHP8fLmLK5awYFtQt7NnjMo8dYRqSOFDFrN3/ NO2oVxTAclIX6c/JI93mVVDmQJSP2yA/EcPq5tdhr+0I9WCdNLLCI6Xv3xErPGX0 cZvk50N1Mz7j4ad7/Bp7I0FgEKi6FhgbvY+l3/LrVxINq/oYwg5j+kDfZwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFLtK4Kt+IOpJxiqjXyx0tez110VjMB8GA1UdIwQY MBaAFAibTW96CjOwGAQR7XT4enz+2WUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzIt YzUwMDlhYjFmZGFmLzEvdTByZ3EzNGc2a25HS3FOZkxIUzE3UFhYUldNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wOTcwMzQtMDk1My00YWI2LTkxYzItYzUwMDlhYjFmZGFm LzEvQ0p0TmIzb0tNN0FZQkJIdGRQaDZmUDdaWlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVBDANBgkqhkiG 9w0BAQsFAAOCAQEAhenXaX6qVC3z9tGPcLEIJi3b7+BX3YJEKgohHffdLYDMtbry 6JVw+Vkm7ee8gGujDYp4JmtH675BCQu7EM3hruxEphNL3Vrn8OpJbSZ3c8XbO49n uTZE7bHPmCsNH6rgZUXu7hU7txAXyuSspfK6V9C37ftKnlgx14xG+g6E452wflGb PzMfJD7PZPJdpmTp0/+YTC0Z8D8I4bQvorsYma7cLCHbfeZHcaoZELDieX4C8Fld lVnNW52YBSsoZXkhbF2O5jqKt38MqTudCazjWIp15uBoQbqGCj858DKGUnMS1EuW 2q+KX82fma2T//fQ8yeQv1a6RP/7vd7bz2wo6A== -----END CERTIFICATE-----Generated at Mon Feb 2 04:42:52 2026 by rpki-client