This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa File: O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa (raw, json) Hash identifier: NgGatJmK3hx1VDzLByDMsWijy7WzJx6KU+I3UEmcdSE= Subject key identifier: 3B:C2:73:16:4D:4F:58:18:31:FA:DA:F8:11:76:6D:83:C8:DC:9A:54 Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Certificate serial: 019B307F06DAAC1B6E373B0C2B68C567F7FF Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa Signing time: Thu 18 Dec 2025 08:06:29 +0000 ASPA not before: Thu 18 Dec 2025 08:06:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 39525 Providers: AS: 0 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7f:06:da:ac:1b:6e:37:3b:0c:2b:68:c5:67:f7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Validity Not Before: Dec 18 08:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3bc273164d4f581831fadaf811766d83c8dc9a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:1d:3c:21:fd:55:89:7d:8c:b2:78:ca:a9: cd:94:d4:c3:f3:3c:e1:bf:25:9b:54:e4:09:e1:da: 9d:05:ed:1e:99:bc:87:9d:d6:34:20:d7:5c:25:fc: 2a:47:3f:d8:5a:cf:ee:06:15:e3:1b:99:b9:f8:9b: 7d:55:bf:c1:22:1c:26:97:86:50:cf:68:5b:ec:0d: 75:97:66:80:b7:89:34:3f:c7:11:8d:2e:4a:7d:0f: c5:bc:b4:19:d4:7a:6a:dd:fb:5a:de:87:f9:86:af: 79:84:bc:fb:a6:11:64:78:e5:b0:1d:c9:c8:46:95: 89:a1:2d:ee:6c:7b:6d:3d:12:2e:fd:ff:f3:6e:e8: 2e:02:1f:b4:ce:9c:c4:a6:3f:52:12:cf:b7:5e:f9: d2:23:70:eb:51:f6:8c:9e:ac:97:3d:65:43:0c:19: b0:1c:f3:a8:f6:32:92:b6:5a:3f:3a:50:ed:54:bf: d2:13:87:c8:e7:50:0a:3f:1d:d9:ca:54:e9:f6:27: 79:18:95:38:31:18:5e:0c:9f:47:ac:45:09:f1:ea: a8:94:36:04:b9:10:52:32:fc:d3:ec:91:62:fe:31: 07:88:3b:ca:d3:0b:16:d3:e6:e9:ec:24:49:0f:b5: a7:20:e5:2c:3e:3c:87:fa:85:0b:9a:cc:3d:a1:b9: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:73:16:4D:4F:58:18:31:FA:DA:F8:11:76:6D:83:C8:DC:9A:54 X509v3 Authority Key Identifier: keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/O8JzFk1PWBgx-tr4EXZtg8jcmlQ.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 39525 Signature Algorithm: sha256WithRSAEncryption 46:f3:72:b8:d6:4d:d7:a0:44:57:ec:c9:ee:e3:0c:43:52:01: 66:2f:55:b4:ad:3b:98:61:7a:20:2f:e4:f3:5a:2e:f2:d4:81: 92:f1:04:e6:6e:17:ad:d7:07:7a:73:2e:db:26:9a:ae:28:55: 86:6b:0f:dd:de:a5:da:71:5c:06:26:19:b2:b4:2e:da:74:10: a3:28:b4:23:38:8e:1d:cf:b6:2e:66:b7:d4:b1:70:98:dc:5b: b2:c1:42:05:82:f6:96:5f:a5:ba:b4:26:76:b6:a0:8d:fa:d3: 29:8f:93:37:82:cb:5b:3c:a3:f5:f1:5e:3c:dc:cd:8c:63:36: 66:b1:76:bb:50:ef:1b:40:a4:b2:b5:99:12:89:c2:1a:16:8f: ac:1a:38:c2:13:ff:35:0a:d4:73:e7:c8:17:b8:0f:ae:4d:3b: 1b:5e:2e:66:e7:65:5c:3a:c8:27:09:ec:e0:00:62:d0:e9:8a: fc:c5:cc:84:62:fc:cc:a6:25:65:10:2e:5a:19:55:60:f4:7e: 6d:45:12:de:68:5b:be:cf:c5:07:ce:e1:4a:13:f6:54:e0:26: be:f6:e9:41:9d:4f:5f:06:81:27:0b:c6:0f:32:96:82:a9:6f: a4:4e:2d:90:60:b5:aa:11:ef:3a:38:93:3d:b5:e5:23:9d:1d: 77:66:13:b8 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZswfwbarBtuNzsMK2jFZ/f/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1 ZDI3YjkwHhcNMjUxMjE4MDgwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmMyNzMxNjRkNGY1ODE4MzFmYWRhZjgxMTc2NmQ4M2M4ZGM5YTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8sdPCH9VYl9jLJ4yqnNlNTD8zzh vyWbVOQJ4dqdBe0embyHndY0INdcJfwqRz/YWs/uBhXjG5m5+Jt9Vb/BIhwml4ZQ z2hb7A11l2aAt4k0P8cRjS5KfQ/FvLQZ1Hpq3fta3of5hq95hLz7phFkeOWwHcnI RpWJoS3ubHttPRIu/f/zbuguAh+0zpzEpj9SEs+3XvnSI3DrUfaMnqyXPWVDDBmw HPOo9jKStlo/OlDtVL/SE4fI51AKPx3ZylTp9id5GJU4MRheDJ9HrEUJ8eqolDYE uRBSMvzT7JFi/jEHiDvK0wsW0+bp7CRJD7WnIOUsPjyH+oULmsw9obmiNwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDvCcxZNT1gYMfra+BF2bYPI3JpUMB8GA1UdIwQY MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt ODEzYzVhYWI3ODNlLzEvTzhKekZrMVBXQmd4LXRyNEVYWnRnOGpjbWxRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCaZTANBgkqhkiG 9w0BAQsFAAOCAQEARvNyuNZN16BEV+zJ7uMMQ1IBZi9VtK07mGF6IC/k81ou8tSB kvEE5m4XrdcHenMu2yaarihVhmsP3d6l2nFcBiYZsrQu2nQQoyi0IziOHc+2Lma3 1LFwmNxbssFCBYL2ll+lurQmdragjfrTKY+TN4LLWzyj9fFePNzNjGM2ZrF2u1Dv G0CksrWZEonCGhaPrBo4whP/NQrUc+fIF7gPrk07G14uZudlXDrIJwns4ABi0OmK /MXMhGL8zKYlZRAuWhlVYPR+bUUS3mhbvs/FB87hShP2VOAmvvbpQZ1PXwaBJwvG DzKWgqlvpE4tkGC1qhHvOjiTPbXlI50dd2YTuA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:47:16 2025 by rpki-client