This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa File: gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa (raw, json) Hash identifier: qLlK7kYrvgqNdvLdGkjuKmzCcNXL51g9eu+D1a6NcGY= Subject key identifier: 80:DE:E8:2D:A9:8F:44:F3:23:3D:2C:0F:48:CB:E8:34:BA:BF:74:54 Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019B2D1B1A7DEC440F7006118155BA2E4118 Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa Signing time: Wed 17 Dec 2025 16:18:29 +0000 ASPA not before: Wed 17 Dec 2025 16:18:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 51255 Providers: AS: 9049 AS: 62142 AS: 211366 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:1b:1a:7d:ec:44:0f:70:06:11:81:55:ba:2e:41:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Dec 17 16:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=80dee82da98f44f3233d2c0f48cbe834babf7454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:24:34:36:85:d7:eb:ca:d0:2e:68:b4:86: 07:61:b3:72:56:4c:64:c1:34:5c:62:e9:51:51:aa: 26:df:25:5a:e3:69:18:9d:48:07:cf:eb:2b:1c:7f: a1:2d:e8:3e:82:fd:a1:ec:53:71:94:41:c6:41:80: d6:b6:ec:84:bc:f5:50:11:71:45:23:bf:fb:41:87: f6:32:b5:f8:cc:b7:df:13:bb:3b:4e:ce:82:75:6d: 1d:f0:99:24:a6:ad:dc:d6:fd:f9:c3:e7:72:af:3e: 3c:b0:d6:8c:64:6d:56:a3:4b:2a:7a:d6:46:35:29: 72:de:f6:20:12:53:fc:0a:cc:e4:9e:6a:2e:25:a5: d5:f9:ed:a6:3e:82:21:76:23:4d:76:91:a1:89:e9: 8f:8d:a7:5d:1d:9a:34:c6:96:c0:bb:1c:71:15:1d: 72:d1:8c:bc:ff:a0:7d:9b:2f:f8:f4:3f:41:7b:68: 06:76:cc:d6:b0:16:11:e6:91:e0:da:45:29:49:a4: 38:9c:c7:f5:f1:3b:ba:3c:da:ba:0e:52:74:02:9b: 44:7d:c4:13:17:c1:db:32:bf:db:b4:e7:24:b5:e4: b0:7e:cd:69:6b:7f:9c:60:ad:62:c6:c4:41:99:4d: 7b:e3:f9:d8:2d:de:0d:20:52:23:89:f9:50:56:48: f6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DE:E8:2D:A9:8F:44:F3:23:3D:2C:0F:48:CB:E8:34:BA:BF:74:54 X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 51255 Signature Algorithm: sha256WithRSAEncryption 19:b4:ef:c4:4d:77:77:b6:11:48:75:6d:c3:a1:dd:14:1f:4c: fb:9d:ae:f8:9b:03:46:77:97:6a:2f:ca:36:2a:89:ec:c7:82: a7:ae:b6:ff:e2:1d:c4:51:2a:0b:fb:64:85:dd:75:01:4b:f0: db:13:71:90:06:e3:da:df:d8:7c:a3:35:f9:b0:75:1c:36:54: a8:ce:0c:b5:00:5c:35:df:54:9f:f8:82:71:6e:be:2c:28:da: 4a:cc:c1:b9:54:d0:43:10:e6:4a:7e:8e:b1:31:25:7e:ac:72: 22:f6:ef:29:2b:3f:de:af:6b:f6:ba:af:3d:d2:30:27:ec:9e: c2:c9:f3:43:88:af:56:46:ae:77:9a:56:b9:30:31:82:10:01: d8:f2:d7:43:01:e5:8e:ae:65:57:6e:25:1e:eb:79:2c:2f:b2: 1d:b5:31:5e:f7:4a:41:14:bb:2a:25:d4:b8:10:4d:b0:54:ef: 27:cd:01:7f:22:7f:cc:1e:d6:a7:e5:0d:c1:ce:9d:05:0f:64: 10:cf:a6:70:c2:69:96:c7:73:5d:43:7e:95:a0:c0:77:87:10: b8:22:39:44:6b:a1:9c:7a:8a:cf:0e:7d:92:08:db:4d:10:63: 0f:6a:78:62:9c:fb:20:24:67:70:2c:89:16:11:a2:2b:c3:31: 49:0f:7a:16 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZstGxp97EQPcAYRgVW6LkEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjUxMjE3MTYxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGRlZTgyZGE5OGY0NGYzMjMzZDJjMGY0OGNiZTgzNGJhYmY3NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMwkNDaF1+vK0C5otIYHYbNyVkxk wTRcYulRUaom3yVa42kYnUgHz+srHH+hLeg+gv2h7FNxlEHGQYDWtuyEvPVQEXFF I7/7QYf2MrX4zLffE7s7Ts6CdW0d8Jkkpq3c1v35w+dyrz48sNaMZG1Wo0sqetZG NSly3vYgElP8CszknmouJaXV+e2mPoIhdiNNdpGhiemPjaddHZo0xpbAuxxxFR1y 0Yy8/6B9my/49D9Be2gGdszWsBYR5pHg2kUpSaQ4nMf18Tu6PNq6DlJ0AptEfcQT F8HbMr/btOckteSwfs1pa3+cYK1ixsRBmU174/nYLd4NIFIjiflQVkj2ZwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFIDe6C2pj0TzIz0sD0jL6DS6v3RUMB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvZ043b0xhbVBSUE1qUFN3UFNNdm9OTHFfZEZRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDINzANBgkqhkiG 9w0BAQsFAAOCAQEAGbTvxE13d7YRSHVtw6HdFB9M+52u+JsDRneXai/KNiqJ7MeC p662/+IdxFEqC/tkhd11AUvw2xNxkAbj2t/YfKM1+bB1HDZUqM4MtQBcNd9Un/iC cW6+LCjaSszBuVTQQxDmSn6OsTElfqxyIvbvKSs/3q9r9rqvPdIwJ+yewsnzQ4iv Vkaud5pWuTAxghAB2PLXQwHljq5lV24lHut5LC+yHbUxXvdKQRS7KiXUuBBNsFTv J80BfyJ/zB7Wp+UNwc6dBQ9kEM+mcMJplsdzXUN+laDAd4cQuCI5RGuhnHqKzw59 kgjbTRBjD2p4Ypz7ICRncCyJFhGiK8MxSQ96Fg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:54:07 2025 by rpki-client