This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/BY0duX9kQwVXjgquhsR-munhjnQ.asa File: BY0duX9kQwVXjgquhsR-munhjnQ.asa (raw, json) Hash identifier: NvBZnkapjPSPy1tNHiYvTA3NcGg5KXOBAdMekZQ3UrA= Subject key identifier: 05:8D:1D:B9:7F:64:43:05:57:8E:0A:AE:86:C4:7E:9A:E9:E1:8E:74 Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019B0CCF88F2CD7E1C9E9D16A71320B7BAA8 Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/BY0duX9kQwVXjgquhsR-munhjnQ.asa Signing time: Thu 11 Dec 2025 09:48:06 +0000 ASPA not before: Thu 11 Dec 2025 09:48:06 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 39040 Providers: AS: 13237 AS: 29075 AS: 33891 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:cf:88:f2:cd:7e:1c:9e:9d:16:a7:13:20:b7:ba:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Dec 11 09:48:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=058d1db97f644305578e0aae86c47e9ae9e18e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:42:29:7c:7b:03:d2:cc:af:41:8c:cd:e8: 05:8a:1e:34:98:f1:c8:d0:ad:4d:03:c4:f7:82:7a: b2:09:90:f0:66:98:35:f8:0d:f2:33:a9:71:a7:60: 3f:18:17:cd:02:49:f6:dd:2f:96:26:e0:c1:d6:83: b8:df:3b:b0:9b:11:3e:c7:40:c5:84:e3:e6:99:cb: 15:d7:88:30:16:ef:82:8c:bd:5e:69:6f:27:e6:4c: 76:0e:ee:42:e0:e6:b7:78:9c:89:04:0b:0e:74:c7: ea:02:29:9e:56:12:63:1f:1a:65:c3:fe:5a:97:47: 75:a7:5d:b5:9a:e8:66:c9:cb:91:5c:b6:e6:d1:d5: 97:c3:35:1a:f2:bc:b6:25:1f:c4:31:04:f0:f4:fd: 37:f0:92:1a:b8:37:d1:3e:83:d0:8c:d0:1b:93:bc: 32:6b:4c:f2:a4:60:5f:1b:25:18:96:9d:6a:9a:c1: 4b:81:05:34:40:41:6e:b2:e9:d0:d1:50:1c:7f:90: d5:b0:6a:01:7b:e7:1a:3d:85:dc:2c:65:bf:08:0e: 13:d9:b3:e8:c6:5c:db:05:14:46:cb:31:6e:24:b7: aa:5d:fa:5f:96:b2:77:8e:45:6d:1c:f9:83:53:c8: 66:c7:10:f6:06:2c:7f:c1:ed:15:06:03:5f:ff:8d: d8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8D:1D:B9:7F:64:43:05:57:8E:0A:AE:86:C4:7E:9A:E9:E1:8E:74 X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/BY0duX9kQwVXjgquhsR-munhjnQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 39040 Signature Algorithm: sha256WithRSAEncryption b1:47:da:93:b0:17:5c:f4:b5:24:43:7a:6f:5f:96:8b:ab:5b: 27:85:27:62:df:04:69:1e:41:7a:70:73:a6:0d:af:52:aa:67: 0b:5b:01:2e:2a:30:03:f6:97:4a:59:ee:53:99:95:e0:cb:46: 50:20:98:4a:c9:7b:3e:c8:63:f7:a0:96:5a:61:8d:35:50:9a: 73:b0:d3:83:6c:f4:d0:a2:de:e9:1f:eb:49:6d:84:48:53:86: 3c:db:84:da:84:ad:8d:9f:05:8f:ff:21:94:44:3c:a6:d4:cf: 44:f2:fa:be:47:a3:98:bc:a8:34:61:11:b1:22:0e:a0:1c:e5: b6:ad:df:79:40:ad:37:b0:ed:52:dc:7d:a8:6b:33:76:85:a1: 87:a8:47:28:89:b2:a3:82:47:ab:85:0b:af:e1:7a:2f:ff:f2: 94:ae:de:8f:8c:1b:1e:ce:4d:8e:52:96:c0:b2:b4:83:44:ff: 71:d0:05:5c:e9:97:d6:47:37:5f:21:45:76:f0:ba:a8:c6:90: f2:69:19:d7:aa:65:0c:6f:3b:ba:2e:e1:83:1c:27:7d:1d:93: 8f:43:59:e1:32:4a:5e:1d:88:91:77:e3:9a:af:9c:39:26:59: c7:ea:06:cb:41:bf:91:a9:57:d8:2a:5a:b4:a3:99:b3:65:40: 22:e7:5d:d0 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsMz4jyzX4cnp0WpxMgt7qoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjUxMjExMDk0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNThkMWRiOTdmNjQ0MzA1NTc4ZTBhYWU4NmM0N2U5YWU5ZTE4ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuhCKXx7A9LMr0GMzegFih40mPHI 0K1NA8T3gnqyCZDwZpg1+A3yM6lxp2A/GBfNAkn23S+WJuDB1oO43zuwmxE+x0DF hOPmmcsV14gwFu+CjL1eaW8n5kx2Du5C4Oa3eJyJBAsOdMfqAimeVhJjHxplw/5a l0d1p121muhmycuRXLbm0dWXwzUa8ry2JR/EMQTw9P038JIauDfRPoPQjNAbk7wy a0zypGBfGyUYlp1qmsFLgQU0QEFusunQ0VAcf5DVsGoBe+caPYXcLGW/CA4T2bPo xlzbBRRGyzFuJLeqXfpflrJ3jkVtHPmDU8hmxxD2Bix/we0VBgNf/43Y3wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAWNHbl/ZEMFV44KrobEfprp4Y50MB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvQlkwZHVYOWtRd1ZYamdxdWhzUi1tdW5oam5RLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYgDANBgkqhkiG 9w0BAQsFAAOCAQEAsUfak7AXXPS1JEN6b1+Wi6tbJ4UnYt8EaR5BenBzpg2vUqpn C1sBLiowA/aXSlnuU5mV4MtGUCCYSsl7Pshj96CWWmGNNVCac7DTg2z00KLe6R/r SW2ESFOGPNuE2oStjZ8Fj/8hlEQ8ptTPRPL6vkejmLyoNGERsSIOoBzltq3feUCt N7DtUtx9qGszdoWhh6hHKImyo4JHq4ULr+F6L//ylK7ej4wbHs5NjlKWwLK0g0T/ cdAFXOmX1kc3XyFFdvC6qMaQ8mkZ16plDG87ui7hgxwnfR2Tj0NZ4TJKXh2IkXfj mq+cOSZZx+oGy0G/kalX2CpatKOZs2VAIudd0A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:07:35 2025 by rpki-client