This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/JAiGMFKKZfeARhCIuVLbMeZNXJY.asa File: JAiGMFKKZfeARhCIuVLbMeZNXJY.asa (raw, json) Hash identifier: BVYEISvT/4Z21IuD9kN936xR94O9xS00DBa/dc3qsv4= Subject key identifier: 24:08:86:30:52:8A:65:F7:80:46:10:88:B9:52:DB:31:E6:4D:5C:96 Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Certificate serial: 019B2C4FDB337887DE9849F88EA09EB2C6FC Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/JAiGMFKKZfeARhCIuVLbMeZNXJY.asa Signing time: Wed 17 Dec 2025 12:36:29 +0000 ASPA not before: Wed 17 Dec 2025 12:36:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 214503 Providers: AS: 20473 AS: 203038 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:4f:db:33:78:87:de:98:49:f8:8e:a0:9e:b2:c6:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16 Validity Not Before: Dec 17 12:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24088630528a65f780461088b952db31e64d5c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:45:da:55:0a:62:6c:6a:5a:72:f7:1e:fe: 0f:7c:7a:b2:16:69:6c:8d:bd:84:d6:82:33:2a:9a: 59:a1:6f:1a:8f:d5:32:d6:52:87:33:6e:3c:88:f4: 69:f0:47:5c:bf:78:d8:99:ab:ae:9b:e2:35:5c:9b: d2:6e:60:7c:dd:24:bd:f6:63:99:b0:01:c6:bf:22: 34:8b:c2:b6:c5:dd:c3:de:e9:5b:5e:ac:54:a5:cc: a0:d0:d7:d2:17:53:05:c7:8d:89:be:4c:37:14:29: d4:49:b2:b5:98:b9:13:c9:09:c0:8f:e6:7a:88:1c: a4:7d:ac:3e:e6:ac:33:81:76:62:95:5a:c5:56:2a: 92:e8:ea:96:c6:b5:ac:8c:49:d0:77:69:f5:e7:ec: d1:32:ec:ca:ac:20:2b:ed:25:6a:f5:e1:48:00:e4: b8:88:5a:c8:05:dd:f9:98:71:ab:29:6c:f5:85:2f: 3c:a4:dd:2f:74:c8:98:d0:ae:0a:38:b4:74:0d:9c: 36:97:5c:b6:d5:bb:78:90:a2:fc:f5:a2:1c:07:6b: 6c:68:ef:a7:a5:94:fe:be:dd:19:ad:b5:24:da:c0: 00:93:ee:e4:0a:05:42:70:44:74:17:34:fb:9a:4d: b7:be:da:a4:72:17:55:1f:12:c0:f4:da:25:8c:2d: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:08:86:30:52:8A:65:F7:80:46:10:88:B9:52:DB:31:E6:4D:5C:96 X509v3 Authority Key Identifier: keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/JAiGMFKKZfeARhCIuVLbMeZNXJY.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214503 Signature Algorithm: sha256WithRSAEncryption 8e:df:2c:a2:f3:3c:f6:07:9c:04:ea:61:98:1f:69:52:07:e4: d6:a0:57:67:11:5a:c1:6a:37:ab:22:3a:b4:32:0c:95:82:61: 0c:b3:4d:55:20:32:d8:f2:39:0c:8b:bf:4e:ad:36:01:3f:f9: 46:7c:7a:b8:51:e9:80:97:7b:25:61:ae:70:2e:af:ab:11:d2: de:71:be:ed:34:c6:83:be:54:7f:31:cc:d2:5b:80:30:66:c4: 48:35:cd:0f:81:71:d8:d6:aa:e1:6f:ea:3c:92:be:9e:ea:c0: 7c:11:35:55:9e:4f:1a:fb:1b:f4:8f:2d:96:d7:d4:fd:1b:b8: 99:f0:b6:9f:78:3d:cc:b3:85:aa:38:da:5c:23:ec:00:04:de: 97:df:64:df:76:0c:01:c8:9f:37:f4:ad:e1:98:80:42:d1:66: fc:84:f6:e3:ea:4f:2d:7f:50:1e:c1:3a:ed:1c:6d:a0:32:20: 58:f5:3e:28:2e:19:d1:dc:f0:26:41:30:17:90:f4:36:c4:a9: 4f:9a:b3:b3:d5:2c:69:95:33:f3:a9:b8:e3:e5:93:bd:7f:b2: 8b:d0:35:e1:68:48:bf:fc:62:d3:f5:95:3e:80:b5:6d:03:31: 2e:32:52:97:5f:46:da:f3:8e:8b:4d:6f:21:74:20:8f:93:ba: 65:2b:ff:4e -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZssT9szeIfemEn4jqCessb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5 MDViMTYwHhcNMjUxMjE3MTIzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDA4ODYzMDUyOGE2NWY3ODA0NjEwODhiOTUyZGIzMWU2NGQ1Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l5F2lUKYmxqWnL3Hv4PfHqyFmls jb2E1oIzKppZoW8aj9Uy1lKHM248iPRp8Edcv3jYmauum+I1XJvSbmB83SS99mOZ sAHGvyI0i8K2xd3D3ulbXqxUpcyg0NfSF1MFx42Jvkw3FCnUSbK1mLkTyQnAj+Z6 iBykfaw+5qwzgXZilVrFViqS6OqWxrWsjEnQd2n15+zRMuzKrCAr7SVq9eFIAOS4 iFrIBd35mHGrKWz1hS88pN0vdMiY0K4KOLR0DZw2l1y21bt4kKL89aIcB2tsaO+n pZT+vt0ZrbUk2sAAk+7kCgVCcER0FzT7mk23vtqkchdVHxLA9NoljC0dRwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCQIhjBSimX3gEYQiLlS2zHmTVyWMB8GA1UdIwQY MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt OTFmNDlkOGQxMTVkLzEvSkFpR01GS0taZmVBUmhDSXVWTGJNZVpOWEpZLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNF5zANBgkqhkiG 9w0BAQsFAAOCAQEAjt8sovM89gecBOphmB9pUgfk1qBXZxFawWo3qyI6tDIMlYJh DLNNVSAy2PI5DIu/Tq02AT/5Rnx6uFHpgJd7JWGucC6vqxHS3nG+7TTGg75UfzHM 0luAMGbESDXND4Fx2Naq4W/qPJK+nurAfBE1VZ5PGvsb9I8tltfU/Ru4mfC2n3g9 zLOFqjjaXCPsAATel99k33YMAcifN/St4ZiAQtFm/IT24+pPLX9QHsE67RxtoDIg WPU+KC4Z0dzwJkEwF5D0NsSpT5qzs9UsaZUz86m44+WTvX+yi9A14WhIv/xi0/WV PoC1bQMxLjJSl19G2vOOi01vIXQgj5O6ZSv/Tg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:34:33 2025 by rpki-client