This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/CQ1CpzM4zEbRfAXKv6up5pXygG0.asa File: CQ1CpzM4zEbRfAXKv6up5pXygG0.asa (raw, json) Hash identifier: 98AfGe0mHLBqwwtcO2B+W9h3Y5WiO+iUahftaMVt0LU= Subject key identifier: 09:0D:42:A7:33:38:CC:46:D1:7C:05:CA:BF:AB:A9:E6:95:F2:80:6D Certificate issuer: /CN=647664ba5773614a3c44f90c12ae725548a75cd4 Certificate serial: 019BA3B25DE2C38BD6966152FCBED82DD24E Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/CQ1CpzM4zEbRfAXKv6up5pXygG0.asa Signing time: Fri 09 Jan 2026 16:58:54 +0000 ASPA not before: Fri 09 Jan 2026 16:58:54 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 213449 Providers: AS: 6939 AS: 11967 AS: 34872 AS: 34927 AS: 47536 AS: 52025 AS: 58087 AS: 63473 AS: 142064 AS: 203446 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 16:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:b2:5d:e2:c3:8b:d6:96:61:52:fc:be:d8:2d:d2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4 Validity Not Before: Jan 9 16:58:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=090d42a73338cc46d17c05cabfaba9e695f2806d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:a8:b5:53:12:e0:24:f6:22:be:74:e4:ab: 7b:0d:88:37:e1:7a:d3:d9:74:11:88:9d:d4:ee:9c: 5f:ae:2c:63:a2:4d:61:95:10:68:9a:0e:8a:ce:e3: 44:35:60:2c:0e:08:47:22:e3:9b:82:a2:13:6d:37: 42:fc:7b:5c:85:4e:31:00:68:4a:08:12:ba:d8:d7: 47:d7:2e:a7:85:09:e1:ae:0e:32:6b:64:35:5f:3e: 6e:52:f5:7a:7b:40:8b:9f:8f:e7:22:4c:e9:81:83: 20:3b:7f:bb:26:6c:71:be:09:89:bf:26:c9:a8:81: 13:05:f0:d3:1a:81:bf:7c:3c:92:77:72:c8:82:9a: 8f:4f:58:16:b3:61:c6:1d:43:54:ed:40:5a:6a:fb: 5e:c8:61:a6:79:38:80:b4:4d:ac:98:b0:66:e6:fb: 11:27:eb:b1:81:03:34:2b:7f:f3:76:90:97:21:4c: bd:25:1c:de:53:94:fe:8e:94:66:d7:71:7d:50:72: 9a:6a:5f:57:39:16:4c:d1:8b:6c:c2:05:ff:34:b4: 58:e8:c6:03:a5:3b:01:bd:93:d1:24:62:09:3d:69: 58:d5:7d:9e:2f:d7:80:72:a5:b6:d8:06:40:5d:b8: 35:dc:df:da:87:d1:ba:ac:67:f8:99:70:3f:df:02: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:42:A7:33:38:CC:46:D1:7C:05:CA:BF:AB:A9:E6:95:F2:80:6D X509v3 Authority Key Identifier: keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/CQ1CpzM4zEbRfAXKv6up5pXygG0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213449 Signature Algorithm: sha256WithRSAEncryption 9c:ea:8e:1e:d9:9b:70:0a:db:a3:b2:4f:7f:a6:ba:23:6d:58: 57:03:a0:41:24:39:e4:4f:83:f1:41:bb:29:25:b3:49:8b:18: 9c:f8:11:c7:d3:22:37:98:22:17:92:a4:a8:c3:58:64:4e:4a: 2d:f2:69:4b:4d:88:ef:d1:0a:23:ed:89:12:b1:85:a5:fb:d9: 6f:0f:a8:6d:90:d6:76:58:6f:d1:50:34:58:af:91:56:26:ef: fa:85:ba:09:a3:62:f5:ca:cc:19:63:ea:06:19:f8:a5:9f:07: d1:1f:08:7e:37:a9:be:29:a4:39:0e:31:5b:25:f1:8d:6b:9d: b4:2c:ce:e1:9f:91:a1:b0:ca:64:30:8d:ea:75:78:5c:bc:cc: 99:89:0f:4a:2a:3a:f5:5f:a2:59:70:f5:d6:f2:b5:55:1c:b0: 5c:d7:cd:d2:5c:c5:e2:cf:6a:22:26:21:ab:5e:5d:7a:e8:86: 88:21:00:29:d6:c5:14:3d:d7:a5:c6:6a:2c:88:f9:cb:3e:67: e3:56:33:e4:0b:32:04:cd:9e:11:ca:7e:98:a6:de:64:7f:86: cb:e9:14:84:48:fc:7b:3f:02:8e:bc:59:bd:57:88:52:17:84: 8f:ef:8e:70:b9:1f:63:ed:a9:5e:a2:18:de:ed:40:8d:ee:e7: 7d:64:f8:b3 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZujsl3iw4vWlmFS/L7YLdJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh NzVjZDQwHhcNMjYwMTA5MTY1ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTBkNDJhNzMzMzhjYzQ2ZDE3YzA1Y2FiZmFiYTllNjk1ZjI4MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqKotVMS4CT2Ir505Kt7DYg34XrT 2XQRiJ3U7pxfrixjok1hlRBomg6KzuNENWAsDghHIuObgqITbTdC/HtchU4xAGhK CBK62NdH1y6nhQnhrg4ya2Q1Xz5uUvV6e0CLn4/nIkzpgYMgO3+7JmxxvgmJvybJ qIETBfDTGoG/fDySd3LIgpqPT1gWs2HGHUNU7UBaavteyGGmeTiAtE2smLBm5vsR J+uxgQM0K3/zdpCXIUy9JRzeU5T+jpRm13F9UHKaal9XORZM0YtswgX/NLRY6MYD pTsBvZPRJGIJPWlY1X2eL9eAcqW22AZAXbg13N/ah9G6rGf4mXA/3wIzSwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAkNQqczOMxG0XwFyr+rqeaV8oBtMB8GA1UdIwQY MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt ZTI5MWE1MmE5ZDE1LzEvQ1ExQ3B6TTR6RWJSZkFYS3Y2dXA1cFh5Z0cwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1 LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNByTANBgkqhkiG 9w0BAQsFAAOCAQEAnOqOHtmbcArbo7JPf6a6I21YVwOgQSQ55E+D8UG7KSWzSYsY nPgRx9MiN5giF5KkqMNYZE5KLfJpS02I79EKI+2JErGFpfvZbw+obZDWdlhv0VA0 WK+RVibv+oW6CaNi9crMGWPqBhn4pZ8H0R8IfjepvimkOQ4xWyXxjWudtCzO4Z+R obDKZDCN6nV4XLzMmYkPSio69V+iWXD11vK1VRywXNfN0lzF4s9qIiYhq15deuiG iCEAKdbFFD3XpcZqLIj5yz5n41Yz5AsyBM2eEcp+mKbeZH+Gy+kUhEj8ez8CjrxZ vVeIUheEj++OcLkfY+2pXqIY3u1Aje7nfWT4sw== -----END CERTIFICATE-----Generated at Fri Jan 16 21:27:39 2026 by rpki-client