This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/rlM4cnvTeBVqojgLeG_kyPKaF_I.asa File: rlM4cnvTeBVqojgLeG_kyPKaF_I.asa (raw, json) Hash identifier: 017qRy2aHTwVo1KO07UeYU0MOeFcAjPdriXzOq7mnXE= Subject key identifier: AE:53:38:72:7B:D3:78:15:6A:A2:38:0B:78:6F:E4:C8:F2:9A:17:F2 Certificate issuer: /CN=fd4a1c7ff0ba52907da8bebb7febbaa751c88d1f Certificate serial: 019B377A21D683FF1EE6C2FAA704BDB94781 Authority key identifier: FD:4A:1C:7F:F0:BA:52:90:7D:A8:BE:BB:7F:EB:BA:A7:51:C8:8D:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Uocf_C6UpB9qL67f-u6p1HIjR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/rlM4cnvTeBVqojgLeG_kyPKaF_I.asa Signing time: Fri 19 Dec 2025 16:38:29 +0000 ASPA not before: Fri 19 Dec 2025 16:38:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 202532 Providers: AS: 34872 AS: 213640 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.mft rsync://rpki.ripe.net/repository/DEFAULT/_Uocf_C6UpB9qL67f-u6p1HIjR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:7a:21:d6:83:ff:1e:e6:c2:fa:a7:04:bd:b9:47:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd4a1c7ff0ba52907da8bebb7febbaa751c88d1f Validity Not Before: Dec 19 16:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ae5338727bd378156aa2380b786fe4c8f29a17f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:4a:cf:13:6d:14:4b:d9:bf:19:7f:86:2c: ff:6a:20:86:01:1d:2b:e8:c0:b7:d5:86:1c:fe:a0: ab:f6:56:f0:36:00:e8:30:58:ed:91:5e:b4:e4:ba: a9:3e:48:43:c3:f7:94:a4:f8:bc:f6:7c:d3:5e:0b: ea:bd:c5:5e:44:35:00:e9:5f:8e:a3:40:fc:31:cf: 40:19:dd:5e:d0:a3:78:0d:64:cf:96:9e:81:34:13: bd:32:48:0e:d0:89:96:0d:cd:2a:9e:45:d0:06:78: 91:00:e0:56:f4:42:80:bd:c0:9c:00:fa:76:eb:53: 8b:7a:b5:57:9d:e8:ee:9e:2d:b5:1e:17:01:74:66: 4e:0c:28:b3:c6:ef:46:dd:0d:3f:f4:01:d4:0e:52: 4f:84:c8:03:ae:d1:46:19:e6:27:52:5a:de:17:9c: 60:d4:a8:fe:9c:68:89:21:96:4c:91:69:35:91:34: 50:18:68:9f:a3:49:74:98:72:63:4a:95:31:1c:e2: b9:f2:f2:5d:ef:1b:dd:f6:7b:3e:14:cb:cd:cd:40: 73:95:7b:ed:72:7d:e4:f2:f0:36:be:c4:af:7d:b8: bd:5c:38:73:68:83:58:54:08:a1:0c:56:57:db:1c: 9c:8a:dc:33:1b:96:28:03:f6:ce:8a:12:6b:f0:63: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:53:38:72:7B:D3:78:15:6A:A2:38:0B:78:6F:E4:C8:F2:9A:17:F2 X509v3 Authority Key Identifier: keyid:FD:4A:1C:7F:F0:BA:52:90:7D:A8:BE:BB:7F:EB:BA:A7:51:C8:8D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Uocf_C6UpB9qL67f-u6p1HIjR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/rlM4cnvTeBVqojgLeG_kyPKaF_I.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/add768-0496-4365-9a8e-a7e5abd7be73/1/_Uocf_C6UpB9qL67f-u6p1HIjR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 202532 Signature Algorithm: sha256WithRSAEncryption 0e:fe:0e:d9:2e:d0:35:8c:61:89:9f:6b:c9:1a:f2:d8:1c:9a: 03:2b:1a:f1:d5:dd:f4:ae:26:7f:8c:d0:dd:58:37:74:25:12: d9:c5:61:6a:95:8c:30:fa:ea:e6:82:5b:44:60:1c:8f:36:7f: d1:16:45:f9:9d:34:6d:74:88:d0:45:65:5f:87:e9:56:82:02: 2b:db:46:20:16:4d:7c:20:a3:c4:bf:56:dc:09:e9:3a:13:87: 4e:f9:6c:88:65:7a:ba:34:8e:d8:dc:f5:24:a6:4a:fc:05:5a: d1:f9:c2:6e:cd:8c:44:10:ac:c6:56:2a:df:66:8e:65:d2:a8: f2:99:bb:ed:75:56:9d:18:ce:15:dc:4a:50:51:73:41:cb:2e: 08:f6:b9:05:a0:1c:95:cf:ae:a8:44:95:71:1c:77:ab:e2:ee: 9b:e9:74:88:b8:6b:71:43:db:2d:df:dc:c8:23:77:fa:c4:9c: c0:09:19:54:55:f5:63:81:23:50:9f:2d:39:31:e9:c7:b9:08: f2:f6:73:24:04:51:54:59:c2:22:c9:43:bc:f8:10:39:20:55: 12:c0:d8:9a:89:a3:c8:04:65:ad:6a:f9:e5:ea:e5:64:fc:10: cb:17:b9:b6:54:eb:ed:04:b2:72:29:0f:69:4f:1f:fe:51:8a: 3c:4f:0a:9d -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZs3eiHWg/8e5sL6pwS9uUeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNGExYzdmZjBiYTUyOTA3ZGE4YmViYjdmZWJiYWE3NTFj ODhkMWYwHhcNMjUxMjE5MTYzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTUzMzg3MjdiZDM3ODE1NmFhMjM4MGI3ODZmZTRjOGYyOWExN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoBKzxNtFEvZvxl/hiz/aiCGAR0r 6MC31YYc/qCr9lbwNgDoMFjtkV605LqpPkhDw/eUpPi89nzTXgvqvcVeRDUA6V+O o0D8Mc9AGd1e0KN4DWTPlp6BNBO9MkgO0ImWDc0qnkXQBniRAOBW9EKAvcCcAPp2 61OLerVXnejuni21HhcBdGZODCizxu9G3Q0/9AHUDlJPhMgDrtFGGeYnUlreF5xg 1Kj+nGiJIZZMkWk1kTRQGGifo0l0mHJjSpUxHOK58vJd7xvd9ns+FMvNzUBzlXvt cn3k8vA2vsSvfbi9XDhzaINYVAihDFZX2xycitwzG5YoA/bOihJr8GMuVQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFK5TOHJ703gVaqI4C3hv5MjymhfyMB8GA1UdIwQY MBaAFP1KHH/wulKQfai+u3/ruqdRyI0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1VvY2ZfQzZVcEI5cUw2N2YtdTZwMUhJalI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hZGQ3NjgtMDQ5Ni00MzY1LTlhOGUt YTdlNWFiZDdiZTczLzEvcmxNNGNudlRlQlZxb2pnTGVHX2t5UEthRl9JLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hZGQ3NjgtMDQ5Ni00MzY1LTlhOGUtYTdlNWFiZDdiZTcz LzEvX1VvY2ZfQzZVcEI5cUw2N2YtdTZwMUhJalI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXJDANBgkqhkiG 9w0BAQsFAAOCAQEADv4O2S7QNYxhiZ9ryRry2ByaAysa8dXd9K4mf4zQ3Vg3dCUS 2cVhapWMMPrq5oJbRGAcjzZ/0RZF+Z00bXSI0EVlX4fpVoICK9tGIBZNfCCjxL9W 3AnpOhOHTvlsiGV6ujSO2Nz1JKZK/AVa0fnCbs2MRBCsxlYq32aOZdKo8pm77XVW nRjOFdxKUFFzQcsuCPa5BaAclc+uqESVcRx3q+Lum+l0iLhrcUPbLd/cyCN3+sSc wAkZVFX1Y4EjUJ8tOTHpx7kI8vZzJARRVFnCIslDvPgQOSBVEsDYmomjyARlrWr5 5erlZPwQyxe5tlTr7QSycikPaU8f/lGKPE8KnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:42 2025 by rpki-client