This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/hMbkCVfPlSQM1RyXU6Khqzma-bQ.asa File: hMbkCVfPlSQM1RyXU6Khqzma-bQ.asa (raw, json) Hash identifier: i/C6QBRxr8zH4mV/ZGP1gtZscxRkotTct2vhglyzNbg= Subject key identifier: 84:C6:E4:09:57:CF:95:24:0C:D5:1C:97:53:A2:A1:AB:39:9A:F9:B4 Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Certificate serial: 019B233E1569B506268D713F9A61635FC78A Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/hMbkCVfPlSQM1RyXU6Khqzma-bQ.asa Signing time: Mon 15 Dec 2025 18:20:29 +0000 ASPA not before: Mon 15 Dec 2025 18:20:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 206033 Providers: AS: 13335 AS: 20473 AS: 52025 AS: 60068 AS: 137409 AS: 152565 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 18:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:3e:15:69:b5:06:26:8d:71:3f:9a:61:63:5f:c7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3 Validity Not Before: Dec 15 18:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84c6e40957cf95240cd51c9753a2a1ab399af9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:e8:ee:c7:2f:f7:a6:ee:a5:6b:67:9c:8c: f9:f8:1a:61:dd:cd:11:1e:7b:77:7a:e9:59:a1:27: 5f:ee:af:c6:0a:4f:d0:20:3d:39:11:a4:ad:57:81: 9b:36:3d:22:62:a4:25:8c:96:14:f7:64:73:04:28: 74:37:65:23:1a:6f:9b:61:48:96:da:0b:75:63:f2: c1:cd:85:57:09:6a:35:f5:64:cd:57:2f:e5:e1:03: 54:44:1e:16:28:e6:66:65:26:51:ef:d5:10:9a:4e: da:92:43:64:24:fe:68:7a:6d:56:65:9f:f6:01:b1: 86:5b:47:bd:84:c1:9f:4e:3a:55:6b:e6:3e:1c:58: ce:b6:98:67:cf:d2:eb:82:c2:e4:1e:8c:b7:d8:87: 76:a4:a4:94:66:1d:06:e1:2a:b5:13:e4:3b:04:5d: 83:0d:c4:7b:12:43:c5:42:91:8c:74:88:82:21:c5: ae:28:a4:f8:5e:77:4d:af:96:92:4b:31:f4:2a:0d: 06:23:98:7f:af:3b:4f:98:73:b2:c2:51:f8:62:75: 08:f2:a0:77:93:50:01:a4:12:ee:e8:12:4a:59:d2: c6:09:08:2e:29:5e:4d:e1:f2:72:9c:29:1b:f6:45: 2a:17:e9:e0:cc:9a:9c:68:2f:fa:e5:f0:f8:e8:e8: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:E4:09:57:CF:95:24:0C:D5:1C:97:53:A2:A1:AB:39:9A:F9:B4 X509v3 Authority Key Identifier: keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/hMbkCVfPlSQM1RyXU6Khqzma-bQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 206033 Signature Algorithm: sha256WithRSAEncryption af:ff:9e:e8:5b:f3:1a:32:1a:24:2e:59:c0:fe:4a:dd:13:11: 5e:49:94:a2:76:63:37:2a:2f:b9:37:1d:a4:0d:9e:e6:5a:78: d1:1a:b8:29:6e:9b:64:94:60:80:3a:2b:d1:6e:a2:7a:b1:51: 4b:cd:08:d9:fc:ba:55:6d:7f:e5:76:2c:b2:b0:31:e1:5e:98: 3a:b8:68:88:6c:59:b9:b7:9a:a4:c9:8d:7a:9a:6a:21:b2:6a: 19:67:11:ba:b5:6d:9e:09:75:4c:6e:be:28:09:83:f1:bf:53: dd:ff:82:99:95:f5:a2:dc:a0:e8:de:d1:00:49:7a:45:11:0f: 50:49:8f:9a:61:66:3d:7b:8f:2f:ab:af:a9:47:b0:3f:af:bd: a6:8a:42:4e:c1:99:9c:9f:16:14:37:3d:00:cd:f7:ad:bb:6c: e2:98:ce:b4:e5:38:f9:7c:c8:50:bf:83:92:cc:08:78:c4:fe: 2f:0a:a2:a1:1a:5b:ed:fd:e3:d6:20:9c:45:5c:4e:a3:77:54: f1:8c:45:c9:34:e8:0f:fb:3c:15:58:15:ad:e8:5f:27:ba:d3: 96:40:7b:49:14:32:4f:b8:bc:6e:33:06:7f:8c:38:60:64:3d: e2:43:fe:9f:9d:67:9a:b0:eb:49:b5:0e:4f:32:f5:d3:f9:34: e3:3e:93:c5 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsjPhVptQYmjXE/mmFjX8eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZjI5ZDE4NGJjYzUwZmU2NTRkZGVmNDAxNWRlMTdkMjQ2 ZmQyYTMwHhcNMjUxMjE1MTgyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGM2ZTQwOTU3Y2Y5NTI0MGNkNTFjOTc1M2EyYTFhYjM5OWFmOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTno7scv96bupWtnnIz5+Bph3c0R Hnt3eulZoSdf7q/GCk/QID05EaStV4GbNj0iYqQljJYU92RzBCh0N2UjGm+bYUiW 2gt1Y/LBzYVXCWo19WTNVy/l4QNURB4WKOZmZSZR79UQmk7akkNkJP5oem1WZZ/2 AbGGW0e9hMGfTjpVa+Y+HFjOtphnz9LrgsLkHoy32Id2pKSUZh0G4Sq1E+Q7BF2D DcR7EkPFQpGMdIiCIcWuKKT4XndNr5aSSzH0Kg0GI5h/rztPmHOywlH4YnUI8qB3 k1ABpBLu6BJKWdLGCQguKV5N4fJynCkb9kUqF+ngzJqcaC/65fD46OiX+wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFITG5AlXz5UkDNUcl1Oioas5mvm0MB8GA1UdIwQY MBaAFFHynRhLzFD+ZU3e9AFd4X0kb9KjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMt YjMzYTFmN2Q5YzI2LzEvaE1ia0NWZlBsU1FNMVJ5WFU2S2hxem1hLWJRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMtYjMzYTFmN2Q5YzI2 LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMk0TANBgkqhkiG 9w0BAQsFAAOCAQEAr/+e6FvzGjIaJC5ZwP5K3RMRXkmUonZjNyovuTcdpA2e5lp4 0Rq4KW6bZJRggDor0W6ierFRS80I2fy6VW1/5XYssrAx4V6YOrhoiGxZubeapMmN eppqIbJqGWcRurVtngl1TG6+KAmD8b9T3f+CmZX1otyg6N7RAEl6RREPUEmPmmFm PXuPL6uvqUewP6+9popCTsGZnJ8WFDc9AM33rbts4pjOtOU4+XzIUL+DkswIeMT+ LwqioRpb7f3j1iCcRVxOo3dU8YxFyTToD/s8FVgVrehfJ7rTlkB7SRQyT7i8bjMG f4w4YGQ94kP+n51nmrDrSbUOTzL10/k04z6TxQ== -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:20 2025 by rpki-client