This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/2osfvL67DJoldSiDF4PR7UDb-Fk.asa File: 2osfvL67DJoldSiDF4PR7UDb-Fk.asa (raw, json) Hash identifier: pYfpBcJ4cmAcBPsCiYsmdDQ6g93wwl6UaITv0MdLIHE= Subject key identifier: DA:8B:1F:BC:BE:BB:0C:9A:25:75:28:83:17:83:D1:ED:40:DB:F8:59 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019B2B858686AFD9C4322507E9BF3F9EBDFE Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/2osfvL67DJoldSiDF4PR7UDb-Fk.asa Signing time: Wed 17 Dec 2025 08:55:29 +0000 ASPA not before: Wed 17 Dec 2025 08:55:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 34535 Providers: AS: 24589 AS: 24651 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:85:86:86:af:d9:c4:32:25:07:e9:bf:3f:9e:bd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Dec 17 08:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da8b1fbcbebb0c9a257528831783d1ed40dbf859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:8f:09:de:22:ad:c9:8b:92:04:67:61:22: 29:0d:84:ba:4c:65:f2:a5:fa:3e:71:c3:57:b0:dd: fb:aa:e6:eb:75:87:af:d7:26:66:1a:a3:54:9c:90: 57:52:38:c3:3f:c7:b9:9a:45:9e:e7:48:97:9a:16: dc:7f:84:6a:aa:b9:2e:60:63:fa:a0:84:e5:6c:f4: 4b:e7:9b:2e:38:d3:fb:17:ab:88:b4:2b:0b:e7:3d: 27:61:43:b5:8f:01:3c:50:13:9b:72:fe:c4:2f:14: 35:9d:a3:75:90:35:ba:4a:18:c9:ec:12:1e:c6:0c: fa:fa:d7:bb:be:5b:d7:36:99:e1:ee:41:46:23:38: 60:7f:56:94:d0:0c:c0:4d:d6:78:6a:34:f7:26:d5: 6c:01:99:1b:5b:1f:12:fd:9d:3e:af:8f:90:85:8e: 08:8f:9f:6a:4b:8e:52:61:56:4a:9d:01:ba:1f:b3: c7:82:86:99:36:f2:d6:96:6b:bb:5b:d9:d9:6a:db: 37:5e:5e:a6:a2:08:19:13:b3:d0:e5:a9:ba:4e:70: b8:0b:03:06:eb:77:f1:7b:b3:24:30:b3:4e:2d:7c: 4a:fb:e6:c5:2d:7c:7a:2c:a7:5d:3e:75:1e:a4:47: 2f:7d:4a:7c:33:6f:53:87:e9:22:f3:f3:0f:95:aa: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8B:1F:BC:BE:BB:0C:9A:25:75:28:83:17:83:D1:ED:40:DB:F8:59 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/2osfvL67DJoldSiDF4PR7UDb-Fk.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 34535 Signature Algorithm: sha256WithRSAEncryption 9c:6d:95:4f:42:ff:e2:00:c5:c7:d7:95:5b:cb:38:e6:55:0e: c1:1d:08:d2:c8:a6:69:41:06:2d:a3:2f:81:85:81:9f:c3:13: b9:74:28:e0:2d:33:16:c3:21:1c:df:2f:98:93:56:a3:f8:25: 26:fe:65:b8:88:e5:7d:16:84:75:08:80:eb:b4:91:02:4f:6c: 70:0d:8a:ff:e2:0d:74:a9:17:78:7c:09:b0:61:be:07:7c:72: 7b:b6:e1:89:59:71:c7:a6:86:86:14:76:3a:a0:49:dd:c5:03: 84:30:a3:e7:d6:d3:c9:27:0c:6f:7a:a7:6f:80:ed:ad:5a:f1: 18:47:ec:0c:58:12:20:e7:78:ce:74:c0:47:53:76:10:60:00: f7:dc:52:f4:c1:b7:b8:c0:74:32:96:ce:e5:2c:ea:22:d4:88: 03:c5:2b:d7:ff:4b:ed:6a:40:e7:9b:c8:ad:ef:8c:7e:bd:bc: 82:16:48:39:70:87:95:e5:b3:15:0d:99:4f:35:ff:ba:f1:f0: dc:b5:a6:04:1c:d8:27:37:8e:1a:3e:64:5f:63:d2:0e:bb:4f: 57:fd:4d:8f:57:e2:3d:c7:cc:f2:53:8a:79:65:ba:07:6e:14: f4:58:4e:f0:08:ac:89:44:aa:af:3e:7c:ff:c5:04:ca:ba:be: bd:43:07:ad -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsrhYaGr9nEMiUH6b8/nr3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjUxMjE3MDg1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYThiMWZiY2JlYmIwYzlhMjU3NTI4ODMxNzgzZDFlZDQwZGJmODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywiPCd4ircmLkgRnYSIpDYS6TGXy pfo+ccNXsN37qubrdYev1yZmGqNUnJBXUjjDP8e5mkWe50iXmhbcf4RqqrkuYGP6 oITlbPRL55suONP7F6uItCsL5z0nYUO1jwE8UBObcv7ELxQ1naN1kDW6ShjJ7BIe xgz6+te7vlvXNpnh7kFGIzhgf1aU0AzATdZ4ajT3JtVsAZkbWx8S/Z0+r4+QhY4I j59qS45SYVZKnQG6H7PHgoaZNvLWlmu7W9nZats3Xl6moggZE7PQ5am6TnC4CwMG 63fxe7MkMLNOLXxK++bFLXx6LKddPnUepEcvfUp8M29Th+ki8/MPlaoilwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFNqLH7y+uwyaJXUogxeD0e1A2/hZMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvMm9zZnZMNjdESm9sZFNpREY0UFI3VURiLUZrLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCG5zANBgkqhkiG 9w0BAQsFAAOCAQEAnG2VT0L/4gDFx9eVW8s45lUOwR0I0simaUEGLaMvgYWBn8MT uXQo4C0zFsMhHN8vmJNWo/glJv5luIjlfRaEdQiA67SRAk9scA2K/+INdKkXeHwJ sGG+B3xye7bhiVlxx6aGhhR2OqBJ3cUDhDCj59bTyScMb3qnb4DtrVrxGEfsDFgS IOd4znTAR1N2EGAA99xS9MG3uMB0MpbO5SzqItSIA8Ur1/9L7WpA55vIre+Mfr28 ghZIOXCHleWzFQ2ZTzX/uvHw3LWmBBzYJzeOGj5kX2PSDrtPV/1Nj1fiPcfM8lOK eWW6B24U9FhO8AisiUSqrz58/8UEyrq+vUMHrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:59:18 2025 by rpki-client