This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/vkjJEmxISp3JAp6FUrRz0UK9HxE.asa File: vkjJEmxISp3JAp6FUrRz0UK9HxE.asa (raw, json) Hash identifier: rLl/7hUHQU6qERqL9XMylNMtVOMgLzTAFfiONFkv7SM= Subject key identifier: BE:48:C9:12:6C:48:4A:9D:C9:02:9E:85:52:B4:73:D1:42:BD:1F:11 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019B2DD940D505218F13CE78D4A049BE0B61 Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/vkjJEmxISp3JAp6FUrRz0UK9HxE.asa Signing time: Wed 17 Dec 2025 19:46:11 +0000 ASPA not before: Wed 17 Dec 2025 19:46:11 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 205941 Providers: AS: 23507 AS: 57050 AS: 60900 AS: 208453 AS: 210464 AS: 212895 AS: 213449 AS: 214757 AS: 214809 AS: 215828 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:d9:40:d5:05:21:8f:13:ce:78:d4:a0:49:be:0b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Dec 17 19:46:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be48c9126c484a9dc9029e8552b473d142bd1f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:05:4b:aa:68:24:3f:f7:bf:fd:fc:17:d0: 6d:f7:a4:3b:5c:42:89:e8:72:16:05:85:58:44:47: 69:9c:4d:82:b4:a1:63:94:be:b9:53:1b:13:5d:72: da:ce:46:bc:90:ff:4f:09:db:eb:6a:cf:a7:e4:31: 54:8a:57:88:ff:6f:e5:1e:86:79:fd:ae:7a:a6:b6: 77:a7:48:89:86:b1:58:1b:b3:65:04:56:57:9f:39: 53:d1:cf:8f:4f:69:52:6f:85:9f:7f:d1:10:96:32: 0a:a0:e9:20:c0:93:d8:79:71:95:43:d0:21:1d:cf: b6:cd:e8:5c:61:e5:7a:2c:8b:22:be:7d:4b:54:16: c1:85:d1:01:61:c1:3e:b1:34:f2:fa:0d:b9:e1:da: 69:8a:43:3b:a6:e0:02:e8:09:ef:24:6b:f1:12:48: 5f:14:17:eb:eb:c0:88:54:c3:9e:91:bf:95:03:2f: be:14:11:fb:0a:03:36:83:ac:be:79:e5:6b:4a:b1: ad:61:36:ab:0d:4f:f4:03:70:87:79:75:59:db:e7: 99:e8:39:8c:f0:a2:8e:f9:64:b3:e1:5b:00:aa:1e: 21:d1:b2:2f:75:0e:71:73:32:c2:a8:1d:96:57:03: eb:46:7d:3d:1f:37:16:23:5d:04:3a:40:a3:ff:6b: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:C9:12:6C:48:4A:9D:C9:02:9E:85:52:B4:73:D1:42:BD:1F:11 X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/vkjJEmxISp3JAp6FUrRz0UK9HxE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205941 Signature Algorithm: sha256WithRSAEncryption 25:10:02:b6:39:65:a1:58:f5:ec:2a:8b:8d:b8:36:03:bb:fa: f8:fc:53:3b:5b:f0:59:39:63:80:70:a0:88:c3:d5:8d:62:7e: 10:98:95:1e:21:65:0d:60:50:4b:59:ae:30:e1:61:29:1d:5c: 61:4e:24:ce:b5:4b:42:f3:08:ee:a2:11:84:ce:9e:3e:4c:ca: a4:27:bc:1c:cd:11:78:4c:04:0d:a2:c4:a4:ee:d5:48:cb:36: ab:f6:52:77:d2:cd:16:92:25:fb:80:d8:4b:e0:5f:1e:61:37: f8:5e:41:2f:ea:8a:e1:76:fd:2f:5c:00:51:38:ba:c6:74:1d: bc:41:88:fa:2b:38:b8:10:26:8b:73:76:1e:ab:c2:56:61:30: 75:03:4e:45:70:46:31:62:ab:94:e8:6e:d6:cc:47:e7:0b:9a: e1:9f:d4:e1:94:d2:ba:ce:58:3f:00:8a:d9:be:df:89:29:31: 06:04:c0:f4:6d:75:57:4c:7b:55:06:80:22:59:d3:fa:95:3c: 2f:8a:ef:ed:b4:e4:99:af:13:b5:20:3b:c1:20:74:ec:f2:32: fe:41:30:3f:61:68:45:b6:67:a7:f1:62:31:ec:8b:19:66:3b: fa:ac:5a:5a:be:b4:33:a1:5d:87:7a:f7:8d:08:31:22:c4:dd: 62:0f:8a:60 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZst2UDVBSGPE8541KBJvgthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjUxMjE3MTk0NjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTQ4YzkxMjZjNDg0YTlkYzkwMjllODU1MmI0NzNkMTQyYmQxZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJMFS6poJD/3v/38F9Bt96Q7XEKJ 6HIWBYVYREdpnE2CtKFjlL65UxsTXXLazka8kP9PCdvras+n5DFUileI/2/lHoZ5 /a56prZ3p0iJhrFYG7NlBFZXnzlT0c+PT2lSb4Wff9EQljIKoOkgwJPYeXGVQ9Ah Hc+2zehcYeV6LIsivn1LVBbBhdEBYcE+sTTy+g254dppikM7puAC6AnvJGvxEkhf FBfr68CIVMOekb+VAy++FBH7CgM2g6y+eeVrSrGtYTarDU/0A3CHeXVZ2+eZ6DmM 8KKO+WSz4VsAqh4h0bIvdQ5xczLCqB2WVwPrRn09HzcWI10EOkCj/2tmlQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFL5IyRJsSEqdyQKehVK0c9FCvR8RMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvdmtqSkVteElTcDNKQXA2RlVyUnowVUs5SHhFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdTANBgkqhkiG 9w0BAQsFAAOCAQEAJRACtjlloVj17CqLjbg2A7v6+PxTO1vwWTljgHCgiMPVjWJ+ EJiVHiFlDWBQS1muMOFhKR1cYU4kzrVLQvMI7qIRhM6ePkzKpCe8HM0ReEwEDaLE pO7VSMs2q/ZSd9LNFpIl+4DYS+BfHmE3+F5BL+qK4Xb9L1wAUTi6xnQdvEGI+is4 uBAmi3N2HqvCVmEwdQNORXBGMWKrlOhu1sxH5wua4Z/U4ZTSus5YPwCK2b7fiSkx BgTA9G11V0x7VQaAIlnT+pU8L4rv7bTkma8TtSA7wSB07PIy/kEwP2FoRbZnp/Fi MeyLGWY7+qxaWr60M6Fdh3r3jQgxIsTdYg+KYA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:08 2025 by rpki-client