This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/z0dUAUAYs2FDj8KE93GCEX_1moY.asa File: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (raw, json) Hash identifier: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY= Subject key identifier: CF:47:54:01:40:18:B3:61:43:8F:C2:84:F7:71:82:11:7F:F5:9A:86 Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019B0CCF8894BA29B2B1AD259E0F0EC3E457 Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/z0dUAUAYs2FDj8KE93GCEX_1moY.asa Signing time: Thu 11 Dec 2025 09:48:06 +0000 ASPA not before: Thu 11 Dec 2025 09:48:06 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 15576 Providers: AS: 174 AS: 3356 AS: 8220 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:cf:88:94:ba:29:b2:b1:ad:25:9e:0f:0e:c3:e4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Dec 11 09:48:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cf4754014018b361438fc284f77182117ff59a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:bb:c0:97:7e:bd:5f:cf:11:98:91:0a:6c: 2f:60:f0:fb:cb:84:c6:3a:ac:c1:dc:82:c6:ac:1a: 61:f0:0a:91:3a:99:ec:ea:0b:dc:4c:21:30:2c:12: 4d:18:3a:64:d2:79:95:6e:7a:66:03:30:41:47:e9: 78:04:f9:09:bc:ff:54:00:68:9f:bb:11:5f:11:aa: 8e:68:7e:b6:10:94:3a:9c:65:fc:e1:5b:63:62:63: 00:3c:40:55:cc:a2:57:e6:99:ae:85:f7:65:c4:3f: f5:f4:5b:64:82:2a:21:3e:07:58:76:54:b2:0e:9d: 80:98:26:d7:66:28:f0:dc:d0:d7:c6:ac:30:eb:53: a8:a4:aa:89:f0:ee:df:c5:be:f3:d9:28:d4:47:18: d4:35:d5:96:51:f4:ee:6a:a8:4c:95:6a:18:e1:d0: 64:8f:76:9d:83:4f:47:ac:e7:84:6e:ff:77:27:7b: 97:4d:66:2c:8b:eb:e2:5d:08:aa:d3:4a:67:95:71: 16:5a:3d:d1:bf:82:e4:63:58:27:0e:20:f4:2e:e7: 52:c6:b8:fd:23:25:b1:dd:55:c3:a1:2d:c8:d9:5f: eb:3f:97:6a:3c:fe:a2:8d:08:88:83:c0:18:f3:e8: 00:d3:41:1e:86:ce:a5:80:3e:36:9e:35:36:78:2f: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:47:54:01:40:18:B3:61:43:8F:C2:84:F7:71:82:11:7F:F5:9A:86 X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/z0dUAUAYs2FDj8KE93GCEX_1moY.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 15576 Signature Algorithm: sha256WithRSAEncryption 71:56:6e:be:75:a3:3c:db:e7:d4:56:19:78:dd:4f:ae:4a:4e: 33:4e:70:37:69:4b:d1:63:f5:aa:a8:22:0f:cf:40:54:17:35: 41:5e:70:24:3c:52:0a:cf:44:55:ef:aa:c8:c4:6d:ca:22:99: 68:be:71:29:5c:03:bb:43:d2:ac:da:57:ae:d1:fa:3f:a8:7f: 94:0f:45:38:46:e9:84:3c:81:60:98:94:3a:1a:82:7d:9b:3a: 8f:87:b1:72:a6:c1:4f:55:f7:93:1a:6d:7d:0f:32:9c:d3:3a: 96:89:ce:1f:9a:81:5e:5a:31:46:35:cb:b2:c4:7e:32:a5:ba: a6:53:fa:35:dd:3a:cf:33:26:96:ed:97:44:69:67:23:ee:1e: ac:fa:48:4c:4b:e6:02:f2:18:ef:65:c4:37:d8:26:c7:33:03: 22:3c:86:a8:5f:64:1f:88:86:a5:61:31:84:77:a6:ff:49:b3: 2c:6a:6c:54:35:ff:18:35:e7:de:47:92:38:ee:df:47:90:96: 50:5b:04:04:14:ca:82:0b:aa:42:10:49:bb:52:57:b2:5a:ba: da:69:cc:5d:6a:b4:13:79:bb:5b:e0:53:0f:3e:78:11:4c:7d: 4a:8f:1a:11:b9:ba:e8:35:c8:33:dc:3b:51:1f:7c:be:4d:8c: 3b:79:ea:52 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZsMz4iUuimysa0lng8Ow+RXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjUxMjExMDk0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjQ3NTQwMTQwMThiMzYxNDM4ZmMyODRmNzcxODIxMTdmZjU5YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq27wJd+vV/PEZiRCmwvYPD7y4TG OqzB3ILGrBph8AqROpns6gvcTCEwLBJNGDpk0nmVbnpmAzBBR+l4BPkJvP9UAGif uxFfEaqOaH62EJQ6nGX84VtjYmMAPEBVzKJX5pmuhfdlxD/19FtkgiohPgdYdlSy Dp2AmCbXZijw3NDXxqww61OopKqJ8O7fxb7z2SjURxjUNdWWUfTuaqhMlWoY4dBk j3adg09HrOeEbv93J3uXTWYsi+viXQiq00pnlXEWWj3Rv4LkY1gnDiD0LudSxrj9 IyWx3VXDoS3I2V/rP5dqPP6ijQiIg8AY8+gA00Eehs6lgD42njU2eC9zZQIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFM9HVAFAGLNhQ4/ChPdxghF/9ZqGMB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvejBkVUFVQVlzMkZEajhLRTkzR0NFWF8xbW9ZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjzYMA0GCSqGSIb3 DQEBCwUAA4IBAQBxVm6+daM82+fUVhl43U+uSk4zTnA3aUvRY/WqqCIPz0BUFzVB XnAkPFIKz0RV76rIxG3KIplovnEpXAO7Q9Ks2leu0fo/qH+UD0U4RumEPIFgmJQ6 GoJ9mzqPh7FypsFPVfeTGm19DzKc0zqWic4fmoFeWjFGNcuyxH4ypbqmU/o13TrP MyaW7ZdEaWcj7h6s+khMS+YC8hjvZcQ32CbHMwMiPIaoX2QfiIalYTGEd6b/SbMs amxUNf8YNefeR5I47t9HkJZQWwQEFMqCC6pCEEm7UleyWrraacxdarQTebtb4FMP PngRTH1KjxoRubroNcgz3DtRH3y+TYw7eepS -----END CERTIFICATE-----Generated at Thu Dec 11 22:46:20 2025 by rpki-client