This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/cYY9JWownI4dxUC113BsmeB-bPg.asa File: cYY9JWownI4dxUC113BsmeB-bPg.asa (raw, json) Hash identifier: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4= Subject key identifier: 71:86:3D:25:6A:30:9C:8E:1D:C5:40:B5:D7:70:6C:99:E0:7E:6C:F8 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B365AA82B6DDDCB68BB3A8728C344BF0D Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/cYY9JWownI4dxUC113BsmeB-bPg.asa Signing time: Fri 19 Dec 2025 11:24:29 +0000 ASPA not before: Fri 19 Dec 2025 11:24:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 8194 Providers: AS: 1299 AS: 12578 AS: 13194 AS: 55002 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:5a:a8:2b:6d:dd:cb:68:bb:3a:87:28:c3:44:bf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Dec 19 11:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=71863d256a309c8e1dc540b5d7706c99e07e6cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:b5:df:03:bc:c6:ad:89:e0:db:de:1c:75: 75:16:26:2f:7b:46:00:a9:96:92:70:6e:71:fc:83: 73:3d:47:cf:f7:65:d5:85:c5:ad:d4:77:ee:6b:df: 11:72:ab:58:0c:e7:1c:8c:d0:b6:f3:32:16:a9:6a: 94:51:02:e0:96:60:3d:42:03:58:1c:4a:93:cd:6c: 87:04:3c:6a:93:7c:3f:78:e3:de:7c:7c:64:00:ac: ff:f1:4d:9e:0a:99:36:12:1a:ee:d1:5c:98:28:36: 0c:95:ac:f5:df:a1:78:29:5e:fe:7e:ba:4d:70:fa: 14:5c:19:ad:1d:a4:3d:44:f5:a7:aa:3d:7d:26:b7: 0c:4e:a9:49:19:05:b9:e6:fc:c4:ff:15:5f:9d:63: 7a:53:54:78:cf:28:70:18:92:6a:68:6d:b6:00:ca: b8:b9:21:9b:ff:d2:df:20:c6:79:f8:cb:fb:7e:22: 88:aa:c6:e1:24:47:c2:45:ed:bb:23:77:80:14:00: 67:57:20:25:e9:d0:77:3c:cb:e8:c4:5b:c7:dd:33: b2:a1:61:2d:da:c6:e6:c4:2e:39:10:81:f4:cb:e9: d0:3e:93:d3:b9:92:05:ae:8d:7f:f3:f9:ba:d5:95: be:06:aa:40:27:38:17:3b:28:e9:c0:66:c8:27:1d: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:3D:25:6A:30:9C:8E:1D:C5:40:B5:D7:70:6C:99:E0:7E:6C:F8 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/cYY9JWownI4dxUC113BsmeB-bPg.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 8194 Signature Algorithm: sha256WithRSAEncryption b9:58:7c:29:11:f0:6f:de:2d:dd:ab:33:a4:76:99:e8:82:d6: 41:d1:ec:77:df:f5:39:b8:bb:27:d2:ce:0e:71:ed:e1:1b:97: 8d:b0:31:05:a3:fa:f6:76:e2:b2:6f:c2:77:81:6f:01:98:f1: 48:89:fe:7b:04:3b:b3:7e:c6:e5:8c:94:a4:d2:9d:34:f7:e9: c1:2f:f7:24:76:16:d2:89:1f:7a:6b:74:12:d7:f5:2d:c2:c5: ff:80:bf:bc:45:b4:3f:7a:48:fb:00:a6:47:2c:15:73:c2:1e: 60:f8:3b:10:b8:e8:08:a4:fd:db:e7:97:54:58:ff:5c:09:e0: 5f:1d:f3:f2:c9:b7:d1:3c:e5:22:70:7e:13:65:b3:55:2f:07: 13:33:bf:fb:5e:9b:d9:42:9d:96:0c:93:6e:27:d6:e8:44:43: c5:1b:3b:b0:90:2f:44:8e:45:ec:37:90:ac:1f:ee:ea:18:73: 09:19:ed:1a:f0:85:9c:77:e2:a2:62:c0:c5:56:c6:9c:9e:d2: 94:bc:d1:32:da:6c:78:6f:0c:39:35:b4:6a:3f:e3:72:e0:da: 5f:e4:2b:4c:a9:26:d4:da:70:83:f7:6f:18:98:fc:e9:d2:44: 23:6d:7a:da:0e:07:5f:66:fe:79:2a:0a:cc:4d:93:fb:9c:2d: 20:f4:9b:16 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZs2Wqgrbd3LaLs6hyjDRL8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUxMjE5MTEyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTg2M2QyNTZhMzA5YzhlMWRjNTQwYjVkNzcwNmM5OWUwN2U2Y2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwa13wO8xq2J4NveHHV1FiYve0YA qZaScG5x/INzPUfP92XVhcWt1Hfua98RcqtYDOccjNC28zIWqWqUUQLglmA9QgNY HEqTzWyHBDxqk3w/eOPefHxkAKz/8U2eCpk2Ehru0VyYKDYMlaz136F4KV7+frpN cPoUXBmtHaQ9RPWnqj19JrcMTqlJGQW55vzE/xVfnWN6U1R4zyhwGJJqaG22AMq4 uSGb/9LfIMZ5+Mv7fiKIqsbhJEfCRe27I3eAFABnVyAl6dB3PMvoxFvH3TOyoWEt 2sbmxC45EIH0y+nQPpPTuZIFro1/8/m61ZW+BqpAJzgXOyjpwGbIJx20nwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFHGGPSVqMJyOHcVAtddwbJngfmz4MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvY1lZOUpXb3duSTRkeFVDMTEzQnNtZUItYlBnLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiACMA0GCSqGSIb3 DQEBCwUAA4IBAQC5WHwpEfBv3i3dqzOkdpnogtZB0ex33/U5uLsn0s4Oce3hG5eN sDEFo/r2duKyb8J3gW8BmPFIif57BDuzfsbljJSk0p009+nBL/ckdhbSiR96a3QS 1/UtwsX/gL+8RbQ/ekj7AKZHLBVzwh5g+DsQuOgIpP3b55dUWP9cCeBfHfPyybfR POUicH4TZbNVLwcTM7/7XpvZQp2WDJNuJ9boREPFGzuwkC9EjkXsN5CsH+7qGHMJ Ge0a8IWcd+KiYsDFVsacntKUvNEy2mx4bww5NbRqP+Ny4Npf5CtMqSbU2nCD928Y mPzp0kQjbXraDgdfZv55KgrMTZP7nC0g9JsW -----END CERTIFICATE-----Generated at Sun Dec 21 01:43:17 2025 by rpki-client