This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/CjNY49UIdomP8pwodnbAtyCXOZE.asa File: CjNY49UIdomP8pwodnbAtyCXOZE.asa (raw, json) Hash identifier: OmSq4dl8x/x3aI133UZSMCCGqyN1YzI/wmz8fvQJ5k0= Subject key identifier: 0A:33:58:E3:D5:08:76:89:8F:F2:9C:28:76:76:C0:B7:20:97:39:91 Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903 Certificate serial: 019B4B5B8DBF24A8892D828E1F1C4ECA4145 Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/CjNY49UIdomP8pwodnbAtyCXOZE.asa Signing time: Tue 23 Dec 2025 13:17:29 +0000 ASPA not before: Tue 23 Dec 2025 13:17:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 33808 Providers: AS: 50533 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:5b:8d:bf:24:a8:89:2d:82:8e:1f:1c:4e:ca:41:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903 Validity Not Before: Dec 23 13:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a3358e3d50876898ff29c287676c0b720973991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:24:6c:e6:0b:5e:fc:22:d8:c2:45:12:cb: 0b:31:b3:39:1b:47:2e:77:3d:6e:1c:5c:a4:d0:88: c1:97:54:57:f0:fb:b9:07:50:40:09:5e:75:a0:e4: 20:b7:b6:8f:df:68:27:73:b2:66:e8:cd:6c:fd:54: 16:39:32:ae:55:78:5b:2c:e8:63:6b:66:b2:53:d4: 51:40:60:19:6f:27:02:4f:a1:92:5e:dd:8d:53:77: df:3a:a5:b1:0a:ea:37:22:c6:2e:92:d3:63:4d:bf: ea:db:c6:08:cf:0c:81:e5:8e:ab:55:8c:68:c5:01: 4c:ef:aa:c5:30:57:a7:62:04:03:ab:fd:45:52:25: ad:0f:65:15:73:de:95:0c:6f:3b:79:7f:d4:bc:1b: 4e:e4:d0:66:a7:db:6a:46:9d:36:18:81:1e:6f:b5: 10:bd:3e:02:81:e7:43:d5:a3:9a:8b:48:0c:d2:15: 2d:55:81:8b:d2:6a:42:d9:1d:6a:84:67:69:df:2f: 44:22:50:47:ee:6d:32:63:d3:70:3e:8b:6f:f1:3f: 73:47:bf:b2:26:89:45:34:df:ac:8e:20:c8:fd:bc: e2:26:17:7f:1c:30:5e:96:eb:08:a3:a4:0e:d3:37: 16:47:08:43:45:94:7c:bc:7c:73:64:6a:a3:54:43: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:33:58:E3:D5:08:76:89:8F:F2:9C:28:76:76:C0:B7:20:97:39:91 X509v3 Authority Key Identifier: keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/CjNY49UIdomP8pwodnbAtyCXOZE.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 33808 Signature Algorithm: sha256WithRSAEncryption 17:71:6a:cf:c0:ae:36:6e:d4:8c:bf:f6:41:3e:dd:e9:b1:ae: 78:39:ec:72:48:3b:67:d0:d9:1a:2d:3e:f6:46:07:4e:bd:1a: ea:2b:05:fd:1e:f5:eb:02:e8:bb:be:9f:28:32:b8:1f:f2:09: bd:71:80:af:c3:93:10:d6:47:12:f0:cf:6d:ba:7b:e1:61:fc: c5:51:cb:d4:e8:7a:56:fe:8b:c3:9a:87:f5:bf:89:fa:7f:51: 4d:0c:a3:6e:2b:aa:b4:98:70:6a:d1:95:78:1d:0d:c6:b2:bb: e8:38:66:33:86:fd:b7:8d:d5:28:78:b5:6a:b2:5e:a0:27:52: 6b:1b:86:84:5c:4a:28:6f:c8:11:24:b6:6b:a1:5e:ed:c2:59: 23:86:6b:9b:85:25:d1:73:98:2a:c7:58:c5:87:bc:4b:b3:31: 04:33:a0:21:0e:86:9c:2d:dc:8f:e6:61:fb:e5:84:2f:7b:6f: ee:10:83:50:e5:f8:d3:c4:7d:a3:5a:2f:6e:cb:a1:d3:1a:24: ec:cd:5e:d4:aa:59:da:ac:b9:e2:bd:e7:84:02:b4:4f:a4:7f: 4c:d1:da:cf:50:f2:4a:77:b7:50:21:5a:92:51:6d:f7:4d:79: 50:ef:a1:0c:b4:89:18:1e:1a:97:d1:d9:d2:42:b2:44:64:d0: 8b:8c:2c:7a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtLW42/JKiJLYKOHxxOykFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz OGY5MDMwHhcNMjUxMjIzMTMxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTMzNThlM2Q1MDg3Njg5OGZmMjljMjg3Njc2YzBiNzIwOTczOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQkbOYLXvwi2MJFEssLMbM5G0cu dz1uHFyk0IjBl1RX8Pu5B1BACV51oOQgt7aP32gnc7Jm6M1s/VQWOTKuVXhbLOhj a2ayU9RRQGAZbycCT6GSXt2NU3ffOqWxCuo3IsYuktNjTb/q28YIzwyB5Y6rVYxo xQFM76rFMFenYgQDq/1FUiWtD2UVc96VDG87eX/UvBtO5NBmp9tqRp02GIEeb7UQ vT4CgedD1aOai0gM0hUtVYGL0mpC2R1qhGdp3y9EIlBH7m0yY9NwPotv8T9zR7+y JolFNN+sjiDI/bziJhd/HDBelusIo6QO0zcWRwhDRZR8vHxzZGqjVEMGZwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFAozWOPVCHaJj/KcKHZ2wLcglzmRMB8GA1UdIwQY MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt NmVkMzMxZjMxZTA5LzEvQ2pOWTQ5VUlkb21QOHB3b2RuYkF0eUNYT1pFLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5 LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCEEDANBgkqhkiG 9w0BAQsFAAOCAQEAF3Fqz8CuNm7UjL/2QT7d6bGueDnsckg7Z9DZGi0+9kYHTr0a 6isF/R716wLou76fKDK4H/IJvXGAr8OTENZHEvDPbbp74WH8xVHL1Oh6Vv6Lw5qH 9b+J+n9RTQyjbiuqtJhwatGVeB0NxrK76DhmM4b9t43VKHi1arJeoCdSaxuGhFxK KG/IESS2a6Fe7cJZI4Zrm4Ul0XOYKsdYxYe8S7MxBDOgIQ6GnC3cj+Zh++WEL3tv 7hCDUOX408R9o1ovbsuh0xok7M1e1KpZ2qy54r3nhAK0T6R/TNHaz1DySne3UCFa klFt9015UO+hDLSJGB4al9HZ0kKyRGTQi4wseg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:44:32 2025 by rpki-client