This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QxEip3wlOXriAz7nnAs_AC0I9NA.asa File: QxEip3wlOXriAz7nnAs_AC0I9NA.asa (raw, json) Hash identifier: iXtb4Nzk+e2nFY3GJNhD9F09a2bTSvaIp01d/mdO65Y= Subject key identifier: 43:11:22:A7:7C:25:39:7A:E2:03:3E:E7:9C:0B:3F:00:2D:08:F4:D0 Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3 Certificate serial: 019B45F42FF7A57CC3A6B9872EB22D11361C Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QxEip3wlOXriAz7nnAs_AC0I9NA.asa Signing time: Mon 22 Dec 2025 12:06:29 +0000 ASPA not before: Mon 22 Dec 2025 12:06:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 197580 Providers: AS: 3491 AS: 198477 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:f4:2f:f7:a5:7c:c3:a6:b9:87:2e:b2:2d:11:36:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3 Validity Not Before: Dec 22 12:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=431122a77c25397ae2033ee79c0b3f002d08f4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:4a:e7:60:ed:98:1d:0a:95:ad:44:67:3f: 2e:f8:95:14:8d:3b:9f:24:c7:c6:13:ee:c4:6b:1e: bb:17:2a:b8:89:3e:d1:88:7a:a5:48:29:ff:41:dc: db:92:03:32:d1:76:ca:15:2b:f9:3c:10:c9:79:d6: 1f:19:6e:d2:4d:bd:4d:52:c5:ac:c1:3f:94:b5:bf: da:8d:70:60:bb:b1:86:c4:3a:d0:5a:97:80:8a:2b: a5:22:96:92:07:3d:c6:2c:43:ad:d1:0d:05:96:17: 19:ec:f2:63:bc:d9:5b:6e:b2:c1:61:da:2e:a9:19: 80:3e:02:f0:63:7f:98:26:f5:3e:4d:82:3f:8f:34: 2e:94:32:67:3f:a4:e0:85:ac:ff:fc:f0:72:67:32: 66:4e:02:c9:9e:01:08:1a:9d:55:8b:80:5d:74:85: 71:3b:53:d2:02:16:9a:d4:35:96:7c:22:d1:b5:89: c2:6e:8d:bf:2a:54:0f:11:80:d5:82:fb:9b:8e:94: 61:7b:56:e6:fc:c8:73:cd:69:63:e7:c8:2a:d5:6f: c2:f7:98:c9:fc:ff:0b:10:26:d0:a9:ef:ed:1a:95: 4e:53:76:77:79:90:2d:be:ad:ce:87:f5:c7:83:e9: 13:97:24:09:7d:5f:c6:bf:4b:4d:f1:82:2c:59:a3: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:22:A7:7C:25:39:7A:E2:03:3E:E7:9C:0B:3F:00:2D:08:F4:D0 X509v3 Authority Key Identifier: keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QxEip3wlOXriAz7nnAs_AC0I9NA.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 197580 Signature Algorithm: sha256WithRSAEncryption b6:fe:de:51:73:61:27:a5:8a:d5:51:17:3e:d3:37:96:d4:df: 3e:47:a3:cc:ea:1f:89:70:77:6f:98:76:0c:8f:07:34:72:50: b9:4d:a0:44:c2:aa:90:a5:e4:cc:6e:ea:5f:21:9a:4a:e8:0c: 7f:31:48:74:ba:a8:b6:83:ac:0f:f0:43:dc:6a:e6:28:b3:43: cc:3e:9c:53:ad:fa:ad:7f:e5:69:1b:92:bb:91:87:48:06:d1: b2:7b:4b:70:b4:c8:d4:d1:20:6a:ad:7b:54:68:ad:d1:92:52: 71:d8:e9:42:12:7f:56:ec:67:06:47:de:d4:0e:89:10:9f:ec: b6:3a:39:2b:27:a4:c6:9d:4e:99:01:28:14:aa:fc:0f:4c:20: e5:e1:57:88:e5:43:69:bf:f6:d6:7c:92:ac:0e:4f:37:92:9d: 90:24:b9:c4:a4:79:05:55:56:4d:8b:6f:a1:ef:42:59:b3:45: 31:ea:39:e6:b6:f2:01:5d:56:ca:e0:1b:38:9b:65:82:ef:7a: 8d:c4:17:2c:88:ab:7f:e4:6f:d0:e8:81:92:f9:45:55:ec:4e: a5:e5:f7:41:ca:e1:a2:30:d7:64:2f:78:68:23:ad:b3:b0:d8: 29:46:56:50:73:4f:40:2e:23:ed:a2:07:80:78:64:20:fe:7a: 0c:0a:bc:f1 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtF9C/3pXzDprmHLrItETYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWJhZTk4OTg5OGQ5NDAyNDI0YWFkYWZiYjQ3YzNhNmQ0 YzI1YjMwHhcNMjUxMjIyMTIwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzExMjJhNzdjMjUzOTdhZTIwMzNlZTc5YzBiM2YwMDJkMDhmNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5FK52DtmB0Kla1EZz8u+JUUjTuf JMfGE+7Eax67Fyq4iT7RiHqlSCn/QdzbkgMy0XbKFSv5PBDJedYfGW7STb1NUsWs wT+Utb/ajXBgu7GGxDrQWpeAiiulIpaSBz3GLEOt0Q0FlhcZ7PJjvNlbbrLBYdou qRmAPgLwY3+YJvU+TYI/jzQulDJnP6Tghaz//PByZzJmTgLJngEIGp1Vi4BddIVx O1PSAhaa1DWWfCLRtYnCbo2/KlQPEYDVgvubjpRhe1bm/MhzzWlj58gq1W/C95jJ /P8LECbQqe/tGpVOU3Z3eZAtvq3Oh/XHg+kTlyQJfV/Gv0tN8YIsWaMsCwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFEMRIqd8JTl64gM+55wLPwAtCPTQMB8GA1UdIwQY MBaAFEIbrpiYmNlAJCSq2vu0fDptTCWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iMzRjYjAtMmY3MS00ZjU5LWJkNWUt NjdlZmNiM2Q4NmZlLzEvUXhFaXAzd2xPWHJpQXo3bm5Bc19BQzBJOU5BLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iMzRjYjAtMmY3MS00ZjU5LWJkNWUtNjdlZmNiM2Q4NmZl LzEvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDzDANBgkqhkiG 9w0BAQsFAAOCAQEAtv7eUXNhJ6WK1VEXPtM3ltTfPkejzOofiXB3b5h2DI8HNHJQ uU2gRMKqkKXkzG7qXyGaSugMfzFIdLqotoOsD/BD3GrmKLNDzD6cU636rX/laRuS u5GHSAbRsntLcLTI1NEgaq17VGit0ZJScdjpQhJ/VuxnBkfe1A6JEJ/stjo5Kyek xp1OmQEoFKr8D0wg5eFXiOVDab/21nySrA5PN5KdkCS5xKR5BVVWTYtvoe9CWbNF Meo55rbyAV1WyuAbOJtlgu96jcQXLIirf+Rv0OiBkvlFVexOpeX3QcrhojDXZC94 aCOts7DYKUZWUHNPQC4j7aIHgHhkIP56DAq88Q== -----END CERTIFICATE-----Generated at Mon Feb 2 04:40:55 2026 by rpki-client