This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/EFTy86Ee2LhDKWgkvLynXFlpksQ.asa File: EFTy86Ee2LhDKWgkvLynXFlpksQ.asa (raw, json) Hash identifier: hTWhFGoY6UVHXRWBWB6TnJGczXQUZBVl4LuFNC+XBvA= Subject key identifier: 10:54:F2:F3:A1:1E:D8:B8:43:29:68:24:BC:BC:A7:5C:59:69:92:C4 Certificate issuer: /CN=08861fe41547d8bfc5573ff5277ca00e473bafec Certificate serial: 019B2E8ECEB63A51911ACB60AB7276021FE6 Authority key identifier: 08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/EFTy86Ee2LhDKWgkvLynXFlpksQ.asa Signing time: Wed 17 Dec 2025 23:04:29 +0000 ASPA not before: Wed 17 Dec 2025 23:04:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 41457 Providers: AS: 16276 AS: 20473 AS: 31898 AS: 51202 AS: 216078 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.mft rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8e:ce:b6:3a:51:91:1a:cb:60:ab:72:76:02:1f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08861fe41547d8bfc5573ff5277ca00e473bafec Validity Not Before: Dec 17 23:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1054f2f3a11ed8b843296824bcbca75c596992c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:6e:da:17:1b:70:9e:78:34:80:ce:db:61: 99:32:d0:a7:3e:1e:2f:92:88:02:ea:80:fb:f2:c7: 00:b9:85:41:a6:9e:db:84:73:7a:d2:8a:4f:6c:3d: c0:df:d8:97:f9:9f:38:ca:0a:03:e8:3f:06:87:89: 46:1f:32:ae:0e:09:a5:aa:4e:68:d1:28:bf:7c:4d: f9:53:f4:0b:30:69:36:a4:f9:ee:0b:8d:e9:d5:6e: 66:e3:79:a7:ea:62:cd:f0:d5:44:e8:94:57:3c:68: a6:10:dd:43:06:9d:fd:90:d6:04:47:82:fa:99:61: 4e:bb:64:4f:45:82:2d:b6:89:86:c5:44:9c:53:89: 6b:3a:98:d7:ba:ed:fa:99:27:c6:47:87:d5:77:8f: 41:23:0e:09:27:73:86:f9:f9:7a:8a:06:37:23:b4: 23:83:3b:65:ba:0c:4c:e9:ff:33:1e:d0:77:55:16: 53:48:a4:01:a2:28:50:3d:54:e7:bf:ea:db:6f:3b: a7:79:fd:6a:e4:bb:18:c2:fb:b4:80:f1:c6:11:84: ea:f7:08:03:85:e3:63:eb:50:53:3f:a9:2a:e0:19: 9d:24:98:99:06:60:9f:13:91:0c:60:5c:6e:95:a4: d9:e4:8a:6e:4d:85:a4:dd:bc:c5:b0:4c:16:39:65: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:54:F2:F3:A1:1E:D8:B8:43:29:68:24:BC:BC:A7:5C:59:69:92:C4 X509v3 Authority Key Identifier: keyid:08:86:1F:E4:15:47:D8:BF:C5:57:3F:F5:27:7C:A0:0E:47:3B:AF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIYf5BVH2L_FVz_1J3ygDkc7r-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/EFTy86Ee2LhDKWgkvLynXFlpksQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3cffcc-64ac-4bad-a518-550daeb6e651/1/CIYf5BVH2L_FVz_1J3ygDkc7r-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 41457 Signature Algorithm: sha256WithRSAEncryption 31:24:25:6d:2b:94:bd:67:08:81:ca:e0:b4:ae:7d:c0:e4:cf: 60:1b:06:25:9d:0c:62:9f:ca:16:92:bf:2d:af:4a:b6:3b:ec: 7d:22:43:96:ee:77:de:ac:d0:59:2a:f3:a8:f9:d5:33:e2:f9: 91:d6:88:1a:7a:e0:7e:94:e7:6e:ff:c1:ed:6a:06:4a:c8:62: 13:b4:35:b0:b8:17:fb:12:d6:ec:0f:f9:da:d6:df:1f:e2:14: 8c:65:99:d9:11:1f:14:82:a6:31:ad:c2:bb:63:c2:4b:8b:df: 5f:e9:cb:62:c0:2b:f9:64:c5:b3:00:9a:2b:21:d0:36:aa:da: 92:b4:dd:60:0f:1e:22:97:31:3b:95:86:50:2e:da:ce:67:a0: 81:39:2d:f7:89:ed:ca:59:91:0b:ce:30:0d:30:77:12:ec:71: c8:4a:17:f9:d5:93:52:cc:b6:cd:e4:5e:2e:3f:60:da:06:f6: 9d:a2:1e:f2:ec:ac:2e:cb:62:eb:d9:0f:42:e3:36:c9:5c:52: a1:d4:51:d7:94:a9:16:96:76:90:18:05:6e:30:98:4c:ae:42: e5:5e:3e:7f:53:7d:cc:76:89:7b:04:8f:c5:4f:10:0c:f2:c9: b2:3d:2e:bb:b8:2d:d2:8a:da:83:df:b1:d1:22:7f:4c:af:85: 24:f5:05:74 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsujs62OlGRGstgq3J2Ah/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODYxZmU0MTU0N2Q4YmZjNTU3M2ZmNTI3N2NhMDBlNDcz YmFmZWMwHhcNMjUxMjE3MjMwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDU0ZjJmM2ExMWVkOGI4NDMyOTY4MjRiY2JjYTc1YzU5Njk5MmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SRu2hcbcJ54NIDO22GZMtCnPh4v kogC6oD78scAuYVBpp7bhHN60opPbD3A39iX+Z84ygoD6D8Gh4lGHzKuDgmlqk5o 0Si/fE35U/QLMGk2pPnuC43p1W5m43mn6mLN8NVE6JRXPGimEN1DBp39kNYER4L6 mWFOu2RPRYIttomGxUScU4lrOpjXuu36mSfGR4fVd49BIw4JJ3OG+fl6igY3I7Qj gztlugxM6f8zHtB3VRZTSKQBoihQPVTnv+rbbzunef1q5LsYwvu0gPHGEYTq9wgD heNj61BTP6kq4BmdJJiZBmCfE5EMYFxulaTZ5IpuTYWk3bzFsEwWOWWNZwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFBBU8vOhHti4QyloJLy8p1xZaZLEMB8GA1UdIwQY MBaAFAiGH+QVR9i/xVc/9Sd8oA5HO6/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgt NTUwZGFlYjZlNjUxLzEvRUZUeTg2RWUyTGhES1dna3ZMeW5YRmxwa3NRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zY2ZmY2MtNjRhYy00YmFkLWE1MTgtNTUwZGFlYjZlNjUx LzEvQ0lZZjVCVkgyTF9GVnpfMUozeWdEa2M3ci13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCh8TANBgkqhkiG 9w0BAQsFAAOCAQEAMSQlbSuUvWcIgcrgtK59wOTPYBsGJZ0MYp/KFpK/La9Ktjvs fSJDlu533qzQWSrzqPnVM+L5kdaIGnrgfpTnbv/B7WoGSshiE7Q1sLgX+xLW7A/5 2tbfH+IUjGWZ2REfFIKmMa3Cu2PCS4vfX+nLYsAr+WTFswCaKyHQNqrakrTdYA8e IpcxO5WGUC7azmeggTkt94ntylmRC84wDTB3EuxxyEoX+dWTUsy2zeReLj9g2gb2 naIe8uysLsti69kPQuM2yVxSodRR15SpFpZ2kBgFbjCYTK5C5V4+f1N9zHaJewSP xU8QDPLJsj0uu7gt0orag9+x0SJ/TK+FJPUFdA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:13:46 2025 by rpki-client