This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/KfqeRMQbo9-WE5c784VU-n3hC_I.asa File: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (raw, json) Hash identifier: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y= Subject key identifier: 29:FA:9E:44:C4:1B:A3:DF:96:13:97:3B:F3:85:54:FA:7D:E1:0B:F2 Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231 Certificate serial: 019BDD320599CB9F34CB854D1203E56E0FE1 Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/KfqeRMQbo9-WE5c784VU-n3hC_I.asa Signing time: Tue 20 Jan 2026 20:56:41 +0000 ASPA not before: Tue 20 Jan 2026 20:56:41 +0000 ASPA not after: Thu 01 Jul 2027 00:00:00 +0000 Customer ASID: 211065 Providers: AS: 198477 AS: 207327 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:32:05:99:cb:9f:34:cb:85:4d:12:03:e5:6e:0f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231 Validity Not Before: Jan 20 20:56:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29fa9e44c41ba3df9613973bf38554fa7de10bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f7:43:b0:fb:99:29:f9:47:28:88:9b:03:3a: 5c:d9:4b:64:fa:5e:7c:54:18:77:a8:a2:88:58:ee: 26:20:e4:aa:5c:8f:1c:93:1c:b2:e8:75:a3:25:9a: f7:df:87:71:43:cd:33:8d:a5:05:66:ba:d3:3a:f1: 2c:a8:29:21:78:f2:ba:ee:01:16:b5:06:28:b7:07: eb:89:33:b6:45:f2:a1:97:bd:06:28:2e:64:fb:37: 79:c3:83:88:eb:f1:15:62:72:29:ef:87:08:5d:a9: 28:ca:bf:cb:3f:13:0e:24:ec:eb:88:db:f2:38:09: 6e:5e:2f:a5:4a:d6:b7:58:dc:2f:c2:8a:df:6a:50: 68:1c:6a:48:25:4b:77:70:2c:85:56:15:07:6e:6f: b6:1e:b9:cb:98:2c:c7:59:9b:5d:7c:59:5d:4d:a0: 82:cd:fa:6b:48:0a:4e:c8:a0:82:cc:3c:d7:83:a8: 6f:c6:19:96:0b:c2:20:c7:85:39:b2:9a:78:47:f0: d0:f7:1c:b9:dd:a0:37:e8:1a:d0:94:f9:92:45:b5: ad:b2:35:1d:84:bd:c6:50:5b:13:b4:0e:35:1b:95: 77:de:e2:91:36:cc:0d:2a:f4:72:a0:b6:97:fe:64: 4e:07:01:62:ab:42:56:ae:ea:78:e8:97:79:f1:4f: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:9E:44:C4:1B:A3:DF:96:13:97:3B:F3:85:54:FA:7D:E1:0B:F2 X509v3 Authority Key Identifier: keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/KfqeRMQbo9-WE5c784VU-n3hC_I.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211065 Signature Algorithm: sha256WithRSAEncryption 00:c7:6b:d4:97:f5:3a:9f:4d:ff:73:02:6f:39:62:68:5c:1a: 5f:f9:88:fc:dd:27:52:5d:c2:61:cd:70:ee:00:e1:ba:35:1a: fb:54:ba:0d:ca:71:42:ec:72:0c:5e:56:03:3f:3c:de:ca:50: 2e:d7:27:15:11:f4:59:53:71:e3:3c:de:75:4d:bf:38:18:7c: 40:fe:a3:0f:dc:ce:56:b8:90:d7:5d:ad:74:08:a9:d1:73:57: 07:0e:f8:55:95:01:49:93:83:ae:21:3a:6a:5c:a4:3f:9d:33: a4:76:ae:a3:1d:13:a0:01:ed:18:34:df:5b:5c:3e:46:25:1e: f9:e7:a6:88:eb:5b:a9:55:78:b9:46:57:62:a4:89:66:2a:54: 47:2d:28:ad:65:84:d1:93:83:3f:23:6b:68:69:04:fd:79:68: c9:76:40:fe:2b:82:d1:c1:44:14:52:87:cf:07:10:ff:90:2a: f7:51:24:26:c6:8e:58:49:90:86:8e:89:95:7a:c5:04:7d:12: cf:9f:99:15:ee:b1:13:c1:29:56:f0:fc:75:7b:ea:94:d7:f6: cf:00:69:a4:c8:aa:47:fd:ff:b1:71:8f:9d:2b:ee:04:07:ee: 22:bf:a9:53:c8:b2:87:3a:15:bd:11:c9:08:c2:28:b2:f2:37: 74:29:ac:ba -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZvdMgWZy580y4VNEgPlbg/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzBkM2I2OTlhYzVhZWZmMmRiODhhNWNiYzFjOWQ4ZDA5 YzcyMzEwHhcNMjYwMTIwMjA1NjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWZhOWU0NGM0MWJhM2RmOTYxMzk3M2JmMzg1NTRmYTdkZTEwYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPdDsPuZKflHKIibAzpc2Utk+l58 VBh3qKKIWO4mIOSqXI8ckxyy6HWjJZr334dxQ80zjaUFZrrTOvEsqCkhePK67gEW tQYotwfriTO2RfKhl70GKC5k+zd5w4OI6/EVYnIp74cIXakoyr/LPxMOJOzriNvy OAluXi+lSta3WNwvworfalBoHGpIJUt3cCyFVhUHbm+2HrnLmCzHWZtdfFldTaCC zfprSApOyKCCzDzXg6hvxhmWC8Igx4U5spp4R/DQ9xy53aA36BrQlPmSRbWtsjUd hL3GUFsTtA41G5V33uKRNswNKvRyoLaX/mROBwFiq0JWrup46Jd58U/7YwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCn6nkTEG6PflhOXO/OFVPp94QvyMB8GA1UdIwQY MBaAFENw07aZrFrv8tuIpcvBydjQnHIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEt MTQ1YTAxMjc4OTQ4LzEvS2ZxZVJNUWJvOS1XRTVjNzg0VlUtbjNoQ19JLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEtMTQ1YTAxMjc4OTQ4 LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM4eTANBgkqhkiG 9w0BAQsFAAOCAQEAAMdr1Jf1Op9N/3MCbzliaFwaX/mI/N0nUl3CYc1w7gDhujUa +1S6DcpxQuxyDF5WAz883spQLtcnFRH0WVNx4zzedU2/OBh8QP6jD9zOVriQ112t dAip0XNXBw74VZUBSZODriE6alykP50zpHauox0ToAHtGDTfW1w+RiUe+eemiOtb qVV4uUZXYqSJZipURy0orWWE0ZODPyNraGkE/XloyXZA/iuC0cFEFFKHzwcQ/5Aq 91EkJsaOWEmQho6JlXrFBH0Sz5+ZFe6xE8EpVvD8dXvqlNf2zwBppMiqR/3/sXGP nSvuBAfuIr+pU8iyhzoVvRHJCMIosvI3dCmsug== -----END CERTIFICATE-----Generated at Mon Feb 2 04:41:45 2026 by rpki-client