This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/e753LkUtZdPOHhc1jXD6UBTKdAI.asa File: e753LkUtZdPOHhc1jXD6UBTKdAI.asa (raw, json) Hash identifier: QxMQuuavAVTbwrJf2pty+8SMFCYB7PU0/p/Emd0Ybrg= Subject key identifier: 7B:BE:77:2E:45:2D:65:D3:CE:1E:17:35:8D:70:FA:50:14:CA:74:02 Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Certificate serial: 019B6BA2EA5F0C52F1B1DE014162F1004C75 Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/e753LkUtZdPOHhc1jXD6UBTKdAI.asa Signing time: Mon 29 Dec 2025 19:43:17 +0000 ASPA not before: Mon 29 Dec 2025 19:43:17 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 201155 Providers: AS: 29551 AS: 30766 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:a2:ea:5f:0c:52:f1:b1:de:01:41:62:f1:00:4c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c Validity Not Before: Dec 29 19:43:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7bbe772e452d65d3ce1e17358d70fa5014ca7402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:86:6c:37:94:e1:71:3c:20:d4:30:83:36: 96:85:c7:0f:19:b9:23:54:c8:d8:8e:2b:b6:ef:61: ad:c7:65:0e:16:96:73:84:08:79:4c:2f:c8:be:09: 51:b2:6b:10:cf:ad:ce:3e:35:2d:9e:83:81:e6:3b: 7a:2e:1d:44:14:06:55:9a:d7:41:ee:19:5e:95:b4: a2:60:23:d0:b4:14:31:26:79:1f:59:32:17:ef:34: 0b:5c:c8:d3:82:c9:09:2c:c5:44:cf:c4:7b:bc:a9: 79:ec:f8:eb:a5:4b:c6:1a:40:8f:29:7c:18:a3:2e: a6:02:1b:16:7c:06:3c:2c:a1:b3:6f:cf:b2:c2:a0: 10:d9:17:8d:8f:19:70:60:ad:99:dc:b0:51:70:95: e0:f9:03:ca:6b:06:2c:e7:6e:e4:fd:3a:78:72:75: 3c:cc:22:0a:ef:92:bc:5f:a3:c1:1f:43:75:2e:cd: 49:13:c3:35:00:af:84:51:e8:f6:2e:f1:0f:2a:2c: 7f:4c:ac:6f:bd:dc:34:88:7d:2f:e0:00:f7:cf:03: bb:2d:21:75:48:e5:bf:cf:5c:a7:13:10:b4:a9:ba: 2c:b3:d8:fa:c0:99:ae:65:4d:89:47:13:0d:a1:2f: 0a:a5:cd:05:7d:bc:80:f4:cf:0a:06:7c:67:b6:57: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BE:77:2E:45:2D:65:D3:CE:1E:17:35:8D:70:FA:50:14:CA:74:02 X509v3 Authority Key Identifier: keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/e753LkUtZdPOHhc1jXD6UBTKdAI.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201155 Signature Algorithm: sha256WithRSAEncryption 30:c7:62:90:7d:f9:30:bc:0a:d1:35:d9:3e:9e:ee:f4:f7:d9: 11:aa:1a:8d:31:3c:3a:40:c4:84:f2:d2:73:1f:a4:3f:26:e7: bd:4c:1d:ca:68:a1:0d:74:35:3c:e2:7e:45:d6:a3:84:ef:32: 2d:0f:79:da:89:44:74:34:da:be:0b:c4:bd:3c:76:36:a3:c5: b5:d6:28:b4:94:88:de:06:1b:85:e3:8b:d3:80:3c:91:fd:94: bb:90:58:ee:b6:cc:e7:8f:ff:d2:af:8e:88:f3:3a:6f:5b:69: ee:92:2c:f4:df:db:c3:a7:13:9b:37:87:49:35:90:c4:97:8a: 85:fd:c8:3c:1c:5b:07:6b:ee:55:29:42:8e:19:b5:b2:be:77: 32:d6:11:24:3d:50:05:5a:b7:2e:80:29:4d:c7:58:d1:9a:b7: b7:33:56:78:6a:d9:e1:82:16:c1:65:72:b9:ff:93:6c:2b:de: aa:06:83:87:47:c3:b6:79:aa:8b:2d:dc:96:58:48:36:da:f8: d2:f8:3c:46:39:a2:c8:5f:0d:9d:b0:7f:74:6d:8c:98:0d:c0: ef:dd:f1:f3:b1:ac:eb:ad:c6:56:60:f4:93:48:d7:72:3a:93: a8:7a:2f:4d:ef:4f:12:a8:ec:51:e4:e8:c7:ea:3c:c0:93:d6: 0e:e2:c3:3f -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtroupfDFLxsd4BQWLxAEx1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ZjZhNzFhMTgwZGNmOGIyMzBjNDE0ZjA5ZjdiNzFiYWVh OTc4MWMwHhcNMjUxMjI5MTk0MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmJlNzcyZTQ1MmQ2NWQzY2UxZTE3MzU4ZDcwZmE1MDE0Y2E3NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fyGbDeU4XE8INQwgzaWhccPGbkj VMjYjiu272Gtx2UOFpZzhAh5TC/IvglRsmsQz63OPjUtnoOB5jt6Lh1EFAZVmtdB 7hlelbSiYCPQtBQxJnkfWTIX7zQLXMjTgskJLMVEz8R7vKl57PjrpUvGGkCPKXwY oy6mAhsWfAY8LKGzb8+ywqAQ2ReNjxlwYK2Z3LBRcJXg+QPKawYs527k/Tp4cnU8 zCIK75K8X6PBH0N1Ls1JE8M1AK+EUej2LvEPKix/TKxvvdw0iH0v4AD3zwO7LSF1 SOW/z1ynExC0qboss9j6wJmuZU2JRxMNoS8Kpc0FfbyA9M8KBnxntlcgXQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFHu+dy5FLWXTzh4XNY1w+lAUynQCMB8GA1UdIwQY MBaAFKX2pxoYDc+LIwxBTwn3txuuqXgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2Mt NjY2MDIzOGIwM2NlLzEvZTc1M0xrVXRaZFBPSGhjMWpYRDZVQlRLZEFJLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iM2Y5MTItMzZkMS00MzY2LWFjM2MtNjY2MDIzOGIwM2Nl LzEvcGZhbkdoZ056NHNqREVGUENmZTNHNjZwZUJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMRwzANBgkqhkiG 9w0BAQsFAAOCAQEAMMdikH35MLwK0TXZPp7u9PfZEaoajTE8OkDEhPLScx+kPybn vUwdymihDXQ1POJ+RdajhO8yLQ952olEdDTavgvEvTx2NqPFtdYotJSI3gYbheOL 04A8kf2Uu5BY7rbM54//0q+OiPM6b1tp7pIs9N/bw6cTmzeHSTWQxJeKhf3IPBxb B2vuVSlCjhm1sr53MtYRJD1QBVq3LoApTcdY0Zq3tzNWeGrZ4YIWwWVyuf+TbCve qgaDh0fDtnmqiy3cllhINtr40vg8RjmiyF8NnbB/dG2MmA3A793x87Gs663GVmD0 k0jXcjqTqHovTe9PEqjsUeTox+o8wJPWDuLDPw== -----END CERTIFICATE-----Generated at Wed Dec 31 13:25:06 2025 by rpki-client