This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/LFwn43xTYGqoLZrK3ArerlmBrjQ.asa File: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (raw, json) Hash identifier: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ= Subject key identifier: 2C:5C:27:E3:7C:53:60:6A:A8:2D:9A:CA:DC:0A:DE:AE:59:81:AE:34 Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Certificate serial: 019B2D80BA8D33F7F7ADB7ED99C72CC8B9C4 Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/LFwn43xTYGqoLZrK3ArerlmBrjQ.asa Signing time: Wed 17 Dec 2025 18:09:29 +0000 ASPA not before: Wed 17 Dec 2025 18:09:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 209845 Providers: AS: 8283 AS: 212635 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:80:ba:8d:33:f7:f7:ad:b7:ed:99:c7:2c:c8:b9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Validity Not Before: Dec 17 18:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2c5c27e37c53606aa82d9acadc0adeae5981ae34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:f3:70:8d:1b:f6:45:8a:f0:22:2c:b0:bd: 91:5f:dc:6e:a6:2c:19:6b:55:5b:02:ed:e3:df:3b: 9a:d2:41:72:82:ee:e1:cf:74:57:83:41:22:52:d6: 8b:8b:1f:a0:68:70:e1:61:f4:93:cd:b9:af:c4:e6: 96:a5:4e:c2:7a:a2:44:fb:16:ef:a5:ee:58:49:2f: 11:8d:45:11:41:40:f8:ac:a1:29:43:53:23:51:ed: e5:2c:bc:c3:a4:96:a6:da:2b:f7:af:6f:8b:53:17: e6:9b:38:a9:85:f7:cf:28:7b:fb:1e:4d:59:a1:41: e5:14:d3:41:10:0c:e0:d8:ea:d6:b9:6f:0d:e4:b2: 5a:53:b0:83:fb:b7:29:54:50:91:ec:46:12:d1:39: fd:fd:32:0d:f5:35:50:fe:a0:24:77:94:88:01:5f: 1c:e9:2d:11:b0:56:73:9d:a8:d0:b9:a9:af:1c:7c: f3:81:8a:fe:eb:ad:07:6f:df:c9:23:9f:7f:e7:5c: 67:f5:80:ec:36:fd:f7:fa:dc:46:70:6f:21:5a:f3: 0c:f4:57:53:8a:2a:85:c2:7b:40:42:76:98:30:25: 7e:cf:6a:7b:6d:a8:d0:91:c6:5e:57:07:ea:43:ee: bc:77:9d:9f:91:df:36:a1:0a:13:3d:4b:b4:c1:8b: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:27:E3:7C:53:60:6A:A8:2D:9A:CA:DC:0A:DE:AE:59:81:AE:34 X509v3 Authority Key Identifier: keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/LFwn43xTYGqoLZrK3ArerlmBrjQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209845 Signature Algorithm: sha256WithRSAEncryption 02:34:70:ef:3c:43:dc:c3:b3:63:01:8b:01:15:4b:d6:23:96: 8a:80:a7:99:50:58:4a:fc:ef:3c:c1:a9:17:e6:db:ef:d8:97: 5a:0e:7f:39:fd:95:5e:5f:a1:82:6e:df:02:cb:22:9f:05:89: ac:91:0a:b5:60:5f:03:89:98:f3:ec:e1:6d:f8:dc:d1:8b:9d: 75:53:f7:84:40:cc:57:55:98:b4:75:85:c0:de:86:78:31:03: 61:a6:d3:5a:0b:05:9b:90:c1:30:9b:89:f4:b7:dd:e4:49:b1: e6:80:24:47:87:83:21:7f:ff:a9:d8:ac:fd:1a:df:8a:1a:84: 15:52:16:b0:e7:9a:01:b3:6c:cb:46:2a:57:3e:6d:66:18:20: 53:b6:ec:e4:3b:6f:05:59:99:41:d7:d8:78:08:fb:32:56:23: 77:43:c2:10:ed:93:51:05:0d:4a:de:de:6a:1d:bc:72:81:66: eb:aa:be:1d:43:8b:20:13:b2:99:ca:e5:77:3b:1b:5f:f5:3c: 8f:96:6e:50:95:2c:04:6c:21:ea:00:aa:bb:78:c1:7f:bd:33: 08:7d:a5:a0:77:56:8d:1f:82:30:1e:a2:52:e3:1b:f6:84:d4: dc:41:c5:8a:6b:5b:98:8f:0d:45:f3:9e:84:41:68:6b:af:6a: 7f:bc:1e:8d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZstgLqNM/f3rbftmccsyLnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi ZmQyNDkwHhcNMjUxMjE3MTgwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzVjMjdlMzdjNTM2MDZhYTgyZDlhY2FkYzBhZGVhZTU5ODFhZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx/zcI0b9kWK8CIssL2RX9xupiwZ a1VbAu3j3zua0kFygu7hz3RXg0EiUtaLix+gaHDhYfSTzbmvxOaWpU7CeqJE+xbv pe5YSS8RjUURQUD4rKEpQ1MjUe3lLLzDpJam2iv3r2+LUxfmmziphffPKHv7Hk1Z oUHlFNNBEAzg2OrWuW8N5LJaU7CD+7cpVFCR7EYS0Tn9/TIN9TVQ/qAkd5SIAV8c 6S0RsFZznajQuamvHHzzgYr+660Hb9/JI59/51xn9YDsNv33+txGcG8hWvMM9FdT iiqFwntAQnaYMCV+z2p7bajQkcZeVwfqQ+68d52fkd82oQoTPUu0wYvTQQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFCxcJ+N8U2BqqC2aytwK3q5Zga40MB8GA1UdIwQY MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt MjFmZDM1Y2Y0YmI5LzEvTEZ3bjQzeFRZR3FvTFpySzNBcmVybG1CcmpRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5 LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMztTANBgkqhkiG 9w0BAQsFAAOCAQEAAjRw7zxD3MOzYwGLARVL1iOWioCnmVBYSvzvPMGpF+bb79iX Wg5/Of2VXl+hgm7fAssinwWJrJEKtWBfA4mY8+zhbfjc0YuddVP3hEDMV1WYtHWF wN6GeDEDYabTWgsFm5DBMJuJ9Lfd5Emx5oAkR4eDIX//qdis/RrfihqEFVIWsOea AbNsy0YqVz5tZhggU7bs5DtvBVmZQdfYeAj7MlYjd0PCEO2TUQUNSt7eah28coFm 66q+HUOLIBOymcrldzsbX/U8j5ZuUJUsBGwh6gCqu3jBf70zCH2loHdWjR+CMB6i UuMb9oTU3EHFimtbmI8NRfOehEFoa69qf7wejQ== -----END CERTIFICATE-----Generated at Fri Dec 26 00:26:20 2025 by rpki-client