This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/hJFP2avKadTDPFPMJQaJFx_oBVM.asa File: hJFP2avKadTDPFPMJQaJFx_oBVM.asa (raw, json) Hash identifier: dhlUGncVsS/oIu2NFJWeAVpNxmOKf3ZyjrL032se6N8= Subject key identifier: 84:91:4F:D9:AB:CA:69:D4:C3:3C:53:CC:25:06:89:17:1F:E8:05:53 Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Certificate serial: 019B307F06988C028BE2C67291C0A72EC3CC Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/hJFP2avKadTDPFPMJQaJFx_oBVM.asa Signing time: Thu 18 Dec 2025 08:06:29 +0000 ASPA not before: Thu 18 Dec 2025 08:06:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 21263 Providers: AS: 3257 AS: 3320 AS: 3356 AS: 6762 AS: 6939 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7f:06:98:8c:02:8b:e2:c6:72:91:c0:a7:2e:c3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Validity Not Before: Dec 18 08:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84914fd9abca69d4c33c53cc250689171fe80553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:7f:cc:8d:42:ff:44:a8:78:39:e9:cc:8c: 48:fc:33:5e:4a:bb:f0:01:30:83:18:14:99:48:6d: ad:40:c6:0c:18:5d:8a:c4:8d:d5:4d:81:4d:95:77: 3a:41:2d:b4:8a:b4:90:fa:1e:e4:8e:13:3e:c9:5f: 5f:c9:a0:e6:95:3d:f0:71:3a:07:05:15:4b:75:f2: df:78:96:70:ec:17:21:6d:dd:99:29:ce:10:38:fb: c4:ae:23:97:28:f1:0c:a2:e3:b2:27:91:fb:91:76: ec:a1:3a:48:85:c5:dd:84:23:5a:51:db:4e:77:a3: 08:09:90:0b:6e:f8:0a:fa:22:9a:84:01:ad:72:be: 87:27:68:6a:b6:22:92:7e:6a:88:c2:67:d3:ef:d4: cd:ee:b3:88:93:69:ee:76:d2:96:c9:b5:08:a0:31: ed:2a:d2:2d:fe:91:c3:af:33:f6:96:79:4d:8f:0e: ad:73:b2:6a:e2:ad:5b:1b:00:b5:d9:96:45:28:5c: 00:9a:30:9c:9d:ee:ed:47:f5:cd:b4:1e:d1:f5:9a: ae:6e:ef:69:d7:e8:9f:06:6f:75:11:e3:9a:52:f5: 5e:5f:b1:1c:8e:0f:d5:9d:dd:fd:f4:cb:74:f8:3a: 9d:18:2e:cc:f0:0f:44:d6:85:87:f8:ea:1d:cf:ad: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:91:4F:D9:AB:CA:69:D4:C3:3C:53:CC:25:06:89:17:1F:E8:05:53 X509v3 Authority Key Identifier: keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/hJFP2avKadTDPFPMJQaJFx_oBVM.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 21263 Signature Algorithm: sha256WithRSAEncryption 48:1a:ef:78:34:70:27:5d:7c:67:62:8d:13:87:e1:20:be:14: f9:1f:d3:16:8b:c6:61:be:97:04:9f:28:bd:df:47:30:ff:97: f7:75:1d:e5:7e:38:b7:61:95:bd:1c:a7:29:33:d9:50:f9:72: 60:64:b8:74:44:5b:cd:4d:a1:bd:0b:6e:ad:6d:43:49:ef:d4: 91:f0:6a:da:5d:a4:aa:88:06:ac:52:9e:e2:fe:24:f0:d6:2c: 98:f7:a7:58:89:5c:6c:55:3f:02:cb:22:d8:cb:5b:25:37:f2: 46:0c:99:8d:3e:39:03:b4:9a:36:3b:71:b3:96:3f:1b:55:43: 7d:45:33:59:82:ed:95:ca:b9:c0:25:67:aa:38:be:47:13:44: c1:c0:3d:26:d8:23:b7:f6:97:31:72:46:8d:f4:bb:fe:7d:55: 37:e7:45:df:a5:0c:48:6e:38:0d:27:75:a4:8d:68:c9:98:1b: 50:b6:a3:9b:e5:89:52:3b:16:bf:2e:11:73:98:7a:ed:25:d4: 5e:22:bc:ae:0e:b3:5f:b8:e7:55:fa:6c:63:66:8a:99:94:1b: b4:8a:89:75:96:c0:7f:86:52:bb:50:b0:e3:60:aa:27:95:28: 2e:e7:8d:bc:1c:5b:43:5b:24:0f:ef:39:23:89:e0:c0:7f:56: 4d:c9:20:8b -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZswfwaYjAKL4sZykcCnLsPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1 ZDI3YjkwHhcNMjUxMjE4MDgwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDkxNGZkOWFiY2E2OWQ0YzMzYzUzY2MyNTA2ODkxNzFmZTgwNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomF/zI1C/0SoeDnpzIxI/DNeSrvw ATCDGBSZSG2tQMYMGF2KxI3VTYFNlXc6QS20irSQ+h7kjhM+yV9fyaDmlT3wcToH BRVLdfLfeJZw7Bchbd2ZKc4QOPvEriOXKPEMouOyJ5H7kXbsoTpIhcXdhCNaUdtO d6MICZALbvgK+iKahAGtcr6HJ2hqtiKSfmqIwmfT79TN7rOIk2nudtKWybUIoDHt KtIt/pHDrzP2lnlNjw6tc7Jq4q1bGwC12ZZFKFwAmjCcne7tR/XNtB7R9Zqubu9p 1+ifBm91EeOaUvVeX7Ecjg/Vnd399Mt0+DqdGC7M8A9E1oWH+Oodz63QHwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFISRT9mrymnUwzxTzCUGiRcf6AVTMB8GA1UdIwQY MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt ODEzYzVhYWI3ODNlLzEvaEpGUDJhdkthZFREUEZQTUpRYUpGeF9vQlZNLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlMPMA0GCSqGSIb3 DQEBCwUAA4IBAQBIGu94NHAnXXxnYo0Th+EgvhT5H9MWi8ZhvpcEnyi930cw/5f3 dR3lfji3YZW9HKcpM9lQ+XJgZLh0RFvNTaG9C26tbUNJ79SR8GraXaSqiAasUp7i /iTw1iyY96dYiVxsVT8CyyLYy1slN/JGDJmNPjkDtJo2O3Gzlj8bVUN9RTNZgu2V yrnAJWeqOL5HE0TBwD0m2CO39pcxckaN9Lv+fVU350XfpQxIbjgNJ3WkjWjJmBtQ tqOb5YlSOxa/LhFzmHrtJdReIryuDrNfuOdV+mxjZoqZlBu0iol1lsB/hlK7ULDj YKonlSgu5428HFtDWyQP7zkjieDAf1ZNySCL -----END CERTIFICATE-----Generated at Fri Dec 19 07:14:11 2025 by rpki-client