This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa File: vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa (raw, json) Hash identifier: +Y5yMjWW8tVQD13wU5Y5PDbZdKBIW8wWdWt2aTYL2Ag= Subject key identifier: BE:1C:A2:EF:37:97:D4:CD:74:0E:EE:AA:53:3A:DE:43:A2:F0:04:D4 Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f Certificate serial: 019B2C354F213B22191C1AE45875C6FC74FD Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa Signing time: Wed 17 Dec 2025 12:07:29 +0000 ASPA not before: Wed 17 Dec 2025 12:07:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 51178 Providers: AS: 1299 AS: 9002 AS: 9049 AS: 12389 AS: 20485 AS: 29076 AS: 35598 AS: 50509 AS: 57304 AS: 57724 AS: 59692 AS: 62255 AS: 201706 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:35:4f:21:3b:22:19:1c:1a:e4:58:75:c6:fc:74:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f Validity Not Before: Dec 17 12:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=be1ca2ef3797d4cd740eeeaa533ade43a2f004d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:cd:4a:27:51:4d:b7:08:0d:82:7f:c7:8e: b5:39:71:04:66:2d:1b:25:be:f8:1c:96:99:88:c8: f8:dc:93:d2:1d:eb:fe:87:7f:03:97:4f:79:7d:34: ac:d8:87:9d:64:d8:af:dc:6f:f5:ab:00:fa:90:ad: 26:03:ce:43:02:b3:a2:dc:22:4b:a7:93:f0:35:36: 52:6c:b3:60:34:83:e1:13:ad:0d:89:ff:ff:44:f5: a6:45:6f:b3:ab:b0:10:af:cf:a2:70:2c:ce:b7:55: af:16:66:a0:eb:d8:46:09:45:72:41:54:b0:da:97: 53:be:b9:17:1b:b4:4b:9f:94:a2:7d:3c:ed:5c:81: 27:c5:f6:76:8b:52:a0:0c:7f:b8:0a:1e:66:2f:2d: 88:67:b4:85:34:0b:a9:3a:0f:06:dc:35:b0:3a:28: f2:42:a6:8e:6f:20:df:3c:67:64:5f:e8:d2:03:e3: bd:da:ec:6c:95:5c:89:5e:3f:93:e6:b5:01:4f:50: e7:ec:a9:a8:01:12:20:de:83:1c:99:99:53:a6:af: 06:2a:f9:6d:eb:60:41:e7:73:e1:fa:86:ee:a6:fb: 12:23:fe:cf:45:89:62:5a:d9:bf:90:c1:9e:25:cf: 33:16:e1:51:b4:99:96:83:5e:41:8b:94:93:34:aa: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1C:A2:EF:37:97:D4:CD:74:0E:EE:AA:53:3A:DE:43:A2:F0:04:D4 X509v3 Authority Key Identifier: keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/vhyi7zeX1M10Du6qUzreQ6LwBNQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 51178 Signature Algorithm: sha256WithRSAEncryption 2d:70:91:2e:b7:df:e2:56:11:b1:d6:3a:dd:d2:e6:d8:2f:06: e8:1c:6b:97:35:47:9f:c1:43:61:69:31:6f:15:a8:4b:3c:dd: 96:ca:d6:6d:99:bb:d7:59:39:20:35:7d:4a:41:56:a3:ad:e3: 96:ca:53:13:b8:d7:c2:55:b2:26:97:8c:b5:b8:7a:d8:64:3a: ab:08:bb:df:67:37:02:9b:cd:a3:1c:7b:16:c1:d5:1f:84:cb: 08:df:30:b9:b2:e1:dd:50:98:04:74:2f:8d:56:54:7a:55:8f: e4:39:7c:27:fb:1a:00:02:60:89:39:67:45:19:84:00:72:c6: 29:79:8e:a5:36:dd:21:4a:08:e0:61:01:65:0b:f1:81:66:f9: c2:9e:87:5c:ac:6a:45:56:0f:3f:80:71:90:35:47:23:2b:9b: 3a:1b:6c:aa:49:82:3f:ef:52:c2:83:c9:0e:ea:28:74:0c:33: 2b:03:57:a9:5d:76:60:bb:b3:4e:c8:50:0c:c5:07:de:ce:23: 35:02:3a:b4:a0:b1:8a:52:99:4e:d7:51:a9:ab:e3:35:76:28: c5:99:d5:21:3a:bd:c1:5e:fe:ee:ff:bd:4a:7a:80:b2:5e:f4: 34:10:26:15:a4:25:56:2c:bb:36:c2:ba:c7:b1:a1:f3:0a:d2: 04:9e:c3:6d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZssNU8hOyIZHBrkWHXG/HT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYWQ2MWQ4ZThjMWFiZGE4NTk2OTMwZTIxZjE4MjExYTUx NzY4MWYwHhcNMjUxMjE3MTIwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTFjYTJlZjM3OTdkNGNkNzQwZWVlYWE1MzNhZGU0M2EyZjAwNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPzNSidRTbcIDYJ/x461OXEEZi0b Jb74HJaZiMj43JPSHev+h38Dl095fTSs2IedZNiv3G/1qwD6kK0mA85DArOi3CJL p5PwNTZSbLNgNIPhE60Nif//RPWmRW+zq7AQr8+icCzOt1WvFmag69hGCUVyQVSw 2pdTvrkXG7RLn5SifTztXIEnxfZ2i1KgDH+4Ch5mLy2IZ7SFNAupOg8G3DWwOijy QqaObyDfPGdkX+jSA+O92uxslVyJXj+T5rUBT1Dn7KmoARIg3oMcmZlTpq8GKvlt 62BB53Ph+obupvsSI/7PRYliWtm/kMGeJc8zFuFRtJmWg15Bi5STNKph3QIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFL4cou83l9TNdA7uqlM63kOi8ATUMB8GA1UdIwQY MBaAFP2tYdjowavahZaTDiHxghGlF2gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2Et ODRlZTIyYTNlZTViLzEvdmh5aTd6ZVgxTTEwRHU2cVV6cmVRNkx3Qk5RLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hNDZjODYtNGIwOC00ODJiLTkyY2EtODRlZTIyYTNlZTVi LzEvX2ExaDJPakJxOXFGbHBNT0lmR0NFYVVYYUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDH6jANBgkqhkiG 9w0BAQsFAAOCAQEALXCRLrff4lYRsdY63dLm2C8G6BxrlzVHn8FDYWkxbxWoSzzd lsrWbZm711k5IDV9SkFWo63jlspTE7jXwlWyJpeMtbh62GQ6qwi732c3ApvNoxx7 FsHVH4TLCN8wubLh3VCYBHQvjVZUelWP5Dl8J/saAAJgiTlnRRmEAHLGKXmOpTbd IUoI4GEBZQvxgWb5wp6HXKxqRVYPP4BxkDVHIyubOhtsqkmCP+9SwoPJDuoodAwz KwNXqV12YLuzTshQDMUH3s4jNQI6tKCxilKZTtdRqavjNXYoxZnVITq9wV7+7v+9 SnqAsl70NBAmFaQlViy7NsK6x7Gh8wrSBJ7DbQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:45:51 2025 by rpki-client