This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oTbQc2nZ0Xfd1C5ttsdiKOTdoQ8.asa File: oTbQc2nZ0Xfd1C5ttsdiKOTdoQ8.asa (raw, json) Hash identifier: GFLzTMPu0B0ounD9Zbyj0IulSIC79g3g7R0MNfo9how= Subject key identifier: A1:36:D0:73:69:D9:D1:77:DD:D4:2E:6D:B6:C7:62:28:E4:DD:A1:0F Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B2F61611064B6B67ED90547FBF02B80A6 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oTbQc2nZ0Xfd1C5ttsdiKOTdoQ8.asa Signing time: Thu 18 Dec 2025 02:54:29 +0000 ASPA not before: Thu 18 Dec 2025 02:54:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 31732 Providers: AS: 6939 AS: 136557 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:61:61:10:64:b6:b6:7e:d9:05:47:fb:f0:2b:80:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Dec 18 02:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a136d07369d9d177ddd42e6db6c76228e4dda10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:88:4c:d7:b0:96:8e:24:a9:8e:6a:cf:7d: a7:4f:d7:6d:5f:7e:bc:51:92:92:9d:8c:f6:9a:14: 88:79:4c:b6:cf:e0:77:0b:9e:31:4f:f3:74:e9:24: 41:83:45:40:e7:92:89:fb:f0:b2:02:a6:8d:4d:e9: f5:15:5c:f9:44:0b:60:cf:2a:7f:e4:6f:c9:7a:b4: 45:37:cb:8c:be:b2:41:51:a9:c9:f3:a2:12:d8:97: f3:89:62:65:3d:82:a4:5a:33:21:d5:ed:3e:25:b5: d0:bb:91:74:3f:3a:0b:f4:d9:1f:31:07:7f:0f:b2: c5:00:07:c8:b4:1f:23:f6:6f:b2:ea:46:69:5a:9f: 96:b7:5d:09:73:2f:51:ad:a3:4d:86:74:fb:83:14: a2:a3:9c:07:b6:42:c8:d6:8b:a4:6b:b4:87:eb:61: 00:d8:da:0e:20:30:3d:c9:a9:76:2f:ea:03:3b:76: be:ae:72:21:4f:9d:46:3d:ae:97:ec:23:34:49:bd: 38:7d:08:a4:a9:10:89:d1:9a:55:77:4f:82:74:d1: 93:bf:ab:0b:d7:67:ed:81:e8:99:96:a5:43:80:0f: 90:37:8a:d8:69:7e:66:c3:38:cd:a4:43:00:44:18: 55:44:88:4c:cc:08:be:14:79:55:7a:2d:4d:12:c7: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:D0:73:69:D9:D1:77:DD:D4:2E:6D:B6:C7:62:28:E4:DD:A1:0F X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oTbQc2nZ0Xfd1C5ttsdiKOTdoQ8.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 31732 Signature Algorithm: sha256WithRSAEncryption 42:de:41:cb:13:90:7a:cf:f1:d7:cc:9b:2e:4c:d7:cf:ee:68: 5f:f6:1c:f2:d4:e9:83:0e:55:f6:5f:e1:5d:56:d3:48:79:7d: 2d:e4:72:69:8b:e4:1c:72:ea:c9:8d:9a:da:84:93:aa:31:00: 65:82:af:2c:0a:a1:f5:c1:9b:25:0a:d4:46:39:6b:84:ac:4d: b6:01:27:2e:d3:41:2d:2b:b4:48:54:79:99:84:ed:26:1c:61: 50:1c:0a:ed:25:f3:f6:06:60:f8:67:de:ee:0b:b8:93:3a:84: 87:ba:4b:1d:a2:6c:5b:14:c9:fc:97:36:8e:5c:5c:6a:3f:65: c2:a1:8d:cd:ce:fa:ad:6d:3e:91:4d:44:d9:4c:d8:0b:34:ed: 73:fd:61:9d:e1:be:5f:e6:f2:ab:ff:a7:2a:45:b5:0e:84:91: 45:60:bd:9b:3f:63:4b:b1:9e:76:74:87:c5:12:53:3c:31:91: 17:9a:c8:13:56:72:9a:b2:39:04:c2:c8:88:e3:86:33:87:e0: 79:ce:28:a3:1b:7c:71:2a:4c:10:04:eb:04:97:b4:dd:14:49: d7:a8:ba:18:a3:a1:18:27:f9:4b:68:90:6e:0b:7f:f3:53:66: 2f:68:4e:70:57:8a:31:f1:08:d2:35:81:4f:74:4b:a3:22:a7: 8f:82:2f:c3 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgISAZsvYWEQZLa2ftkFR/vwK4CmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMjE4MDI1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTM2ZDA3MzY5ZDlkMTc3ZGRkNDJlNmRiNmM3NjIyOGU0ZGRhMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1eITNewlo4kqY5qz32nT9dtX368 UZKSnYz2mhSIeUy2z+B3C54xT/N06SRBg0VA55KJ+/CyAqaNTen1FVz5RAtgzyp/ 5G/JerRFN8uMvrJBUanJ86IS2JfziWJlPYKkWjMh1e0+JbXQu5F0PzoL9NkfMQd/ D7LFAAfItB8j9m+y6kZpWp+Wt10Jcy9RraNNhnT7gxSio5wHtkLI1ouka7SH62EA 2NoOIDA9yal2L+oDO3a+rnIhT51GPa6X7CM0Sb04fQikqRCJ0ZpVd0+CdNGTv6sL 12ftgeiZlqVDgA+QN4rYaX5mwzjNpEMARBhVRIhMzAi+FHlVei1NEsdRBwIDAQAB o4ICAzCCAf8wHQYDVR0OBBYEFKE20HNp2dF33dQubbbHYijk3aEPMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvb1RiUWMyblowWGZkMUM1dHRzZGlLT1Rkb1E4LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnv0MA0GCSqGSIb3 DQEBCwUAA4IBAQBC3kHLE5B6z/HXzJsuTNfP7mhf9hzy1OmDDlX2X+FdVtNIeX0t 5HJpi+QccurJjZrahJOqMQBlgq8sCqH1wZslCtRGOWuErE22AScu00EtK7RIVHmZ hO0mHGFQHArtJfP2BmD4Z97uC7iTOoSHuksdomxbFMn8lzaOXFxqP2XCoY3Nzvqt bT6RTUTZTNgLNO1z/WGd4b5f5vKr/6cqRbUOhJFFYL2bP2NLsZ52dIfFElM8MZEX msgTVnKasjkEwsiI44Yzh+B5ziijG3xxKkwQBOsEl7TdFEnXqLoYo6EYJ/lLaJBu C3/zU2YvaE5wV4ox8QjSNYFPdEujIqePgi/D -----END CERTIFICATE-----Generated at Sat Dec 20 22:01:08 2025 by rpki-client