This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/IkFAAhMo6EXvgYuzubUjkLN3WU0.asa File: IkFAAhMo6EXvgYuzubUjkLN3WU0.asa (raw, json) Hash identifier: 8AwsEwj6pWhJYhsurZj03YidpYvlpZCbsOGUi0yK1yU= Subject key identifier: 22:41:40:02:13:28:E8:45:EF:81:8B:B3:B9:B5:23:90:B3:77:59:4D Certificate issuer: /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167 Certificate serial: 019B2291F681652DB50C37C921DDA8FA428A Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/IkFAAhMo6EXvgYuzubUjkLN3WU0.asa Signing time: Mon 15 Dec 2025 15:12:29 +0000 ASPA not before: Mon 15 Dec 2025 15:12:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 215842 Providers: AS: 6939 AS: 8283 AS: 34927 AS: 41051 AS: 50869 AS: 212895 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:91:f6:81:65:2d:b5:0c:37:c9:21:dd:a8:fa:42:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167 Validity Not Before: Dec 15 15:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=224140021328e845ef818bb3b9b52390b377594d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:6b:74:70:f2:60:bb:ae:91:bb:06:72:f7: a0:16:7e:4b:82:b3:03:5d:79:ef:24:07:b6:c7:af: 8e:0a:15:93:b3:85:ec:91:dc:c6:ab:72:75:f7:f8: f5:7a:e0:85:fb:41:57:55:58:b2:df:65:3f:de:3b: 41:48:77:b3:f1:c7:a9:67:f1:47:b0:b4:29:f9:19: ab:2a:29:96:37:6d:9e:ed:4f:e0:b2:0b:20:94:b4: 9b:93:0d:95:80:3a:57:31:ea:e2:13:6b:09:d7:05: b5:97:d4:e1:46:d0:0d:a7:8b:42:16:11:8f:ab:5d: c8:5a:e0:76:31:ad:25:b9:c3:49:77:22:3a:a2:52: f7:74:11:d4:c2:05:d2:21:37:09:d7:b4:54:43:e0: 29:43:4b:2a:d7:70:6b:f4:19:bd:7b:0c:ec:7b:cb: 80:d7:48:01:3b:b8:d2:83:e9:ea:ca:99:fb:fe:60: 8a:49:1f:8e:a7:ff:16:62:93:84:ba:40:79:7c:7c: bf:e8:c9:a5:28:3b:9b:f6:40:f0:03:65:2f:bd:f2: f4:2a:e6:be:d9:ad:db:cc:b9:7d:ac:2a:75:8c:d9: 07:39:74:22:26:90:c4:a7:88:53:fd:6e:9d:0c:e6: 04:df:18:ee:0e:d4:f0:c6:c7:56:9e:3b:8c:73:2c: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:41:40:02:13:28:E8:45:EF:81:8B:B3:B9:B5:23:90:B3:77:59:4D X509v3 Authority Key Identifier: keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/IkFAAhMo6EXvgYuzubUjkLN3WU0.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215842 Signature Algorithm: sha256WithRSAEncryption 52:cc:cd:7f:bb:8c:41:66:d5:32:19:28:8e:c5:1d:1d:4c:b6: c1:1f:4a:00:4b:12:d9:4c:0d:dd:25:11:cf:33:71:18:ac:3e: 0d:6f:08:92:e0:d8:c9:83:ae:ca:a0:fe:98:d4:5d:2b:ee:a3: b6:32:4e:f3:a2:71:21:be:4e:78:66:97:be:65:59:78:21:7d: 07:18:6d:de:44:c8:d6:47:a1:8e:20:2f:02:f7:b4:89:80:c5: 88:48:74:c9:b5:67:76:73:12:fe:15:b3:6c:e5:4f:47:6e:73: 83:81:5f:6d:7f:95:34:34:ec:aa:b7:c4:a1:4a:0d:33:7c:88: 65:18:37:bd:62:f3:3c:2a:84:3b:6d:bc:be:a1:01:ce:45:f6: 1c:4e:64:1b:ad:50:97:3f:7a:2e:8c:09:c0:87:76:ed:19:13: 75:d8:9d:79:45:8d:64:98:af:c9:a0:fa:ea:0e:3c:51:66:57: 97:41:38:3d:41:1d:da:cf:66:59:c7:37:54:2f:7e:b0:82:46: 8f:c6:91:e5:b3:7a:57:a5:0b:58:52:a4:6e:a7:18:d3:16:aa: 22:90:f4:78:e4:14:71:74:36:2a:3a:19:3c:6b:39:b6:ed:ca: e5:53:53:7c:ce:9c:8c:18:80:1a:dc:d9:90:d0:52:78:f5:53: 48:d1:67:76 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsikfaBZS21DDfJId2o+kKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMDNhMmFlY2NhOGIyYmVmYTZkYWY4MjhjOGRiOTBlMjlj ZmIxNjcwHhcNMjUxMjE1MTUxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQxNDAwMjEzMjhlODQ1ZWY4MThiYjNiOWI1MjM5MGIzNzc1OTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIJrdHDyYLuukbsGcvegFn5LgrMD XXnvJAe2x6+OChWTs4XskdzGq3J19/j1euCF+0FXVViy32U/3jtBSHez8cepZ/FH sLQp+RmrKimWN22e7U/gsgsglLSbkw2VgDpXMeriE2sJ1wW1l9ThRtANp4tCFhGP q13IWuB2Ma0lucNJdyI6olL3dBHUwgXSITcJ17RUQ+ApQ0sq13Br9Bm9ewzse8uA 10gBO7jSg+nqypn7/mCKSR+Op/8WYpOEukB5fHy/6MmlKDub9kDwA2UvvfL0Kua+ 2a3bzLl9rCp1jNkHOXQiJpDEp4hT/W6dDOYE3xjuDtTwxsdWnjuMcyyNGQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCJBQAITKOhF74GLs7m1I5Czd1lNMB8GA1UdIwQY MBaAFNsDoq7MqLK++m2vgoyNuQ4pz7FnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUt ZjhmZGYwNDNmYTQ3LzEvSWtGQUFoTW82RVh2Z1l1enViVWprTE4zV1UwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My83MmVjMjctNDQ2MC00MGMzLTgxMmUtZjhmZGYwNDNmYTQ3 LzEvMndPaXJzeW9zcjc2YmEtQ2pJMjVEaW5Qc1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNLIjANBgkqhkiG 9w0BAQsFAAOCAQEAUszNf7uMQWbVMhkojsUdHUy2wR9KAEsS2UwN3SURzzNxGKw+ DW8IkuDYyYOuyqD+mNRdK+6jtjJO86JxIb5OeGaXvmVZeCF9Bxht3kTI1kehjiAv Ave0iYDFiEh0ybVndnMS/hWzbOVPR25zg4FfbX+VNDTsqrfEoUoNM3yIZRg3vWLz PCqEO228vqEBzkX2HE5kG61Qlz96LowJwId27RkTddideUWNZJivyaD66g48UWZX l0E4PUEd2s9mWcc3VC9+sIJGj8aR5bN6V6ULWFKkbqcY0xaqIpD0eOQUcXQ2KjoZ PGs5tu3K5VNTfM6cjBiAGtzZkNBSePVTSNFndg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:24 2025 by rpki-client