This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/VFTnlB7fVRBsXRxIBDV1iFufXkE.asa File: VFTnlB7fVRBsXRxIBDV1iFufXkE.asa (raw, json) Hash identifier: iqnFhWzzO6j+t2K9kgwBf/ErkVyc0h9GJuE4NZx67oA= Subject key identifier: 54:54:E7:94:1E:DF:55:10:6C:5D:1C:48:04:35:75:88:5B:9F:5E:41 Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a Certificate serial: 019BFA5FA35390EACCBD7698D7AD6153C760 Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/VFTnlB7fVRBsXRxIBDV1iFufXkE.asa Signing time: Mon 26 Jan 2026 12:55:30 +0000 ASPA not before: Mon 26 Jan 2026 12:55:30 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 213973 Providers: AS: 16205 AS: 57328 AS: 59552 AS: 62365 AS: 203592 AS: 208508 AS: 211479 AS: 216188 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:5f:a3:53:90:ea:cc:bd:76:98:d7:ad:61:53:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a Validity Not Before: Jan 26 12:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5454e7941edf55106c5d1c48043575885b9f5e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:86:6f:86:28:52:95:ea:d4:03:fe:62:5c: 9a:53:df:58:09:cc:ca:21:ff:2e:75:e5:a1:42:cd: 7b:32:ec:16:b6:b4:81:7c:ca:42:14:9d:70:b1:30: e9:4c:a2:70:04:19:7e:88:ad:2a:80:31:12:91:09: 42:81:4a:34:e2:65:6a:cc:79:d9:1e:9e:30:db:51: 90:c5:88:f1:93:f7:fc:dd:81:60:f9:0c:34:16:16: a9:cf:e4:19:da:c0:e7:09:99:ae:01:27:51:97:f8: 39:c8:ee:c4:86:89:42:f6:e9:42:ff:91:3c:af:39: 77:76:ac:f5:e9:de:42:46:3a:b8:c5:c0:5b:11:8d: ff:2b:0b:cc:07:80:b9:39:97:f9:c2:4d:7c:50:c1: 2e:05:f2:76:5a:80:24:87:24:00:50:08:ac:ad:b7: 7e:74:73:ce:de:43:6d:6c:8b:25:5f:20:c1:26:5f: b0:e5:fe:2f:d4:a6:a2:5f:b7:2a:c1:91:6b:52:9b: d3:18:15:9b:80:81:97:2b:99:31:09:08:ca:0f:7d: 6f:bd:21:43:82:2a:73:ad:08:2f:d6:e6:fe:31:e8: 70:77:29:24:04:c1:58:da:92:6f:c3:da:77:fc:f1: d6:91:5b:05:93:da:64:5a:72:ab:f6:f3:e4:d9:1d: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:54:E7:94:1E:DF:55:10:6C:5D:1C:48:04:35:75:88:5B:9F:5E:41 X509v3 Authority Key Identifier: keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/VFTnlB7fVRBsXRxIBDV1iFufXkE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213973 Signature Algorithm: sha256WithRSAEncryption 78:e1:3f:aa:98:24:27:ad:5b:b8:a8:2c:aa:e4:45:dc:80:b5: 20:ac:bf:e0:f5:dd:e9:1a:19:a1:27:66:31:6c:e7:b7:3e:f1: 0a:bc:73:6e:59:fe:09:1d:9c:21:14:fb:34:9f:eb:8c:7e:36: 07:59:ee:01:26:d8:87:35:51:84:3e:99:a7:c4:b6:7e:6a:a2: 41:ef:fe:20:b8:0c:3a:d5:f6:b6:60:ad:26:a3:bf:d0:dc:34: 3c:f2:b3:bd:2d:55:c5:e3:89:f0:99:d1:51:c9:81:56:62:ef: 85:63:12:4f:2d:3e:b8:6d:6a:d0:97:e6:84:d3:98:f9:9d:c5: c3:c0:15:f4:ed:cd:86:9e:1f:d3:da:2c:18:17:09:c7:7b:16: 4a:38:90:05:30:60:84:aa:db:1e:60:45:93:17:01:d7:6d:19: 4f:5a:f4:7c:53:b9:ca:73:18:d0:06:5a:2e:5b:9f:36:4b:13: d4:15:19:77:39:1d:25:11:4e:86:5f:d0:ce:d9:ed:0d:c6:0b: 1b:55:f5:65:5e:d4:67:ef:04:5d:eb:1e:8c:47:c0:a5:bc:90: 13:fd:7e:7f:7e:f7:9a:f5:ef:c0:b3:78:a0:2c:87:00:94:6f: d2:45:13:a2:b8:74:a2:e8:f8:18:0f:15:20:80:87:7e:08:d9: 88:4e:89:98 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZv6X6NTkOrMvXaY161hU8dgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl Zjk5M2EwHhcNMjYwMTI2MTI1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDU0ZTc5NDFlZGY1NTEwNmM1ZDFjNDgwNDM1NzU4ODViOWY1ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ2Gb4YoUpXq1AP+YlyaU99YCczK If8udeWhQs17MuwWtrSBfMpCFJ1wsTDpTKJwBBl+iK0qgDESkQlCgUo04mVqzHnZ Hp4w21GQxYjxk/f83YFg+Qw0Fhapz+QZ2sDnCZmuASdRl/g5yO7EholC9ulC/5E8 rzl3dqz16d5CRjq4xcBbEY3/KwvMB4C5OZf5wk18UMEuBfJ2WoAkhyQAUAisrbd+ dHPO3kNtbIslXyDBJl+w5f4v1KaiX7cqwZFrUpvTGBWbgIGXK5kxCQjKD31vvSFD gipzrQgv1ub+MehwdykkBMFY2pJvw9p3/PHWkVsFk9pkWnKr9vPk2R2KpQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFFRU55Qe31UQbF0cSAQ1dYhbn15BMB8GA1UdIwQY MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt NjhhMmYwYmI1YjdhLzEvVkZUbmxCN2ZWUkJzWFJ4SUJEVjFpRnVmWGtFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwND1TANBgkqhkiG 9w0BAQsFAAOCAQEAeOE/qpgkJ61buKgsquRF3IC1IKy/4PXd6RoZoSdmMWzntz7x Crxzbln+CR2cIRT7NJ/rjH42B1nuASbYhzVRhD6Zp8S2fmqiQe/+ILgMOtX2tmCt JqO/0Nw0PPKzvS1VxeOJ8JnRUcmBVmLvhWMSTy0+uG1q0JfmhNOY+Z3Fw8AV9O3N hp4f09osGBcJx3sWSjiQBTBghKrbHmBFkxcB120ZT1r0fFO5ynMY0AZaLlufNksT 1BUZdzkdJRFOhl/QztntDcYLG1X1ZV7UZ+8EXesejEfApbyQE/1+f373mvXvwLN4 oCyHAJRv0kUTorh0ouj4GA8VIICHfgjZiE6JmA== -----END CERTIFICATE-----Generated at Mon Feb 2 04:41:48 2026 by rpki-client