This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/_N2EzhO-sI-hW3uxZmSur0wvPcc.asa File: _N2EzhO-sI-hW3uxZmSur0wvPcc.asa (raw, json) Hash identifier: N3nDgYngcNpGOWA9Gx/XAjPMkOw+AGT9AcOb9PWgf4g= Subject key identifier: FC:DD:84:CE:13:BE:B0:8F:A1:5B:7B:B1:66:64:AE:AF:4C:2F:3D:C7 Certificate issuer: /CN=325825eec0eb29bd7309a63bdde1abab4a2fd120 Certificate serial: 019B319B05A89BCED342B4ED4D5BFF48BE0F Authority key identifier: 32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/_N2EzhO-sI-hW3uxZmSur0wvPcc.asa Signing time: Thu 18 Dec 2025 13:16:41 +0000 ASPA not before: Thu 18 Dec 2025 13:16:41 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 210632 Providers: AS: 11967 AS: 34927 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.mft rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:9b:05:a8:9b:ce:d3:42:b4:ed:4d:5b:ff:48:be:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325825eec0eb29bd7309a63bdde1abab4a2fd120 Validity Not Before: Dec 18 13:16:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcdd84ce13beb08fa15b7bb16664aeaf4c2f3dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:9a:ee:01:19:1b:36:1e:a0:ab:96:3b:52: 66:e0:b5:6d:5a:b9:bc:95:d8:dd:82:2e:af:8a:ee: 92:ef:56:e2:1a:b9:60:36:c4:d9:19:50:f1:bf:13: 5c:11:40:4b:a2:d9:95:b2:02:86:23:39:67:57:47: e1:45:c3:1f:b1:78:c5:f0:e7:35:fb:c1:95:49:09: d5:79:f3:eb:a4:dc:8e:1e:ab:6c:2b:79:08:84:86: 19:9d:33:1b:07:21:13:67:86:4b:f2:e5:1d:16:ce: 25:77:51:85:7e:39:09:59:09:b9:c2:c4:ee:28:8c: 6c:9f:d6:e8:b2:f6:d2:17:ca:4a:28:2b:cb:0b:9a: e7:99:5d:ef:4e:7d:bb:1f:98:30:64:ca:17:2f:72: ab:79:71:ce:84:77:6f:d0:b4:5f:3f:16:59:20:ea: 3a:08:40:4a:84:85:f7:72:59:ce:c3:24:b9:07:0e: d9:0a:cc:07:fd:2c:22:63:46:29:84:23:9d:ed:57: 6a:87:be:64:40:74:e0:0b:8b:98:25:27:61:33:46: 79:2a:de:c6:0d:37:d8:d8:94:a1:8b:d3:7b:23:a2: 18:da:c9:c6:56:bd:93:a9:6d:dc:e2:e6:c4:c1:04: c0:85:45:2c:68:67:0b:85:e9:29:c7:43:b8:de:41: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DD:84:CE:13:BE:B0:8F:A1:5B:7B:B1:66:64:AE:AF:4C:2F:3D:C7 X509v3 Authority Key Identifier: keyid:32:58:25:EE:C0:EB:29:BD:73:09:A6:3B:DD:E1:AB:AB:4A:2F:D1:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlgl7sDrKb1zCaY73eGrq0ov0SA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/_N2EzhO-sI-hW3uxZmSur0wvPcc.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f08604-9bea-4ad1-bc06-79b6e12ea2c5/1/Mlgl7sDrKb1zCaY73eGrq0ov0SA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210632 Signature Algorithm: sha256WithRSAEncryption 15:ef:b1:9b:32:48:60:a1:7f:61:97:4a:a6:02:33:a4:1b:ae: c4:3f:46:2d:12:2f:b1:76:c6:4f:0f:1d:6a:ce:4e:f6:c7:12: fc:3a:a1:50:6e:7a:3c:6b:0f:55:de:26:4e:5d:6c:9e:27:69: c0:fe:a7:02:d2:0f:71:92:f3:23:b2:ba:0b:47:7a:c6:ea:c6: 85:c7:f0:fe:9d:37:03:9b:40:25:fa:6f:9a:7d:b3:9f:f5:cb: 08:f1:a8:54:8e:07:30:c5:e6:12:82:78:32:82:9c:f1:58:6b: 79:05:e0:6d:07:15:f7:05:f1:f2:ba:ea:ca:f7:59:65:2d:58: 1c:be:fd:88:44:86:77:90:4c:02:f4:29:2a:b9:72:ad:74:98: 83:d4:5e:b7:25:9c:1a:b2:5e:db:df:50:7b:a9:db:c8:2f:39: 48:eb:d3:9f:9a:4e:84:a9:f0:16:20:fa:b5:d5:76:68:f3:bc: 1a:2f:cf:e8:85:11:17:01:d7:80:cc:aa:c8:72:cc:f9:6e:f2: 28:b7:9f:24:19:25:e9:22:dd:aa:76:f2:e1:b7:b5:3d:1e:05: 42:28:30:17:37:ed:c3:7f:91:7b:ba:20:0a:01:e4:4e:5c:68: be:19:e7:2e:4a:db:6b:b9:9e:79:30:d0:5e:f5:37:93:76:28: dd:89:9c:20 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsxmwWom87TQrTtTVv/SL4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTgyNWVlYzBlYjI5YmQ3MzA5YTYzYmRkZTFhYmFiNGEy ZmQxMjAwHhcNMjUxMjE4MTMxNjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RkODRjZTEzYmViMDhmYTE1YjdiYjE2NjY0YWVhZjRjMmYzZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qqa7gEZGzYeoKuWO1Jm4LVtWrm8 ldjdgi6viu6S71biGrlgNsTZGVDxvxNcEUBLotmVsgKGIzlnV0fhRcMfsXjF8Oc1 +8GVSQnVefPrpNyOHqtsK3kIhIYZnTMbByETZ4ZL8uUdFs4ld1GFfjkJWQm5wsTu KIxsn9bosvbSF8pKKCvLC5rnmV3vTn27H5gwZMoXL3KreXHOhHdv0LRfPxZZIOo6 CEBKhIX3clnOwyS5Bw7ZCswH/SwiY0YphCOd7Vdqh75kQHTgC4uYJSdhM0Z5Kt7G DTfY2JShi9N7I6IY2snGVr2TqW3c4ubEwQTAhUUsaGcLhekpx0O43kG5SQIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFPzdhM4TvrCPoVt7sWZkrq9MLz3HMB8GA1UdIwQY MBaAFDJYJe7A6ym9cwmmO93hq6tKL9EgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMDg2MDQtOWJlYS00YWQxLWJjMDYt NzliNmUxMmVhMmM1LzEvX04yRXpoTy1zSS1oVzN1eFptU3VyMHd2UGNjLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMDg2MDQtOWJlYS00YWQxLWJjMDYtNzliNmUxMmVhMmM1 LzEvTWxnbDdzRHJLYjF6Q2FZNzNlR3JxMG92MFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2yDANBgkqhkiG 9w0BAQsFAAOCAQEAFe+xmzJIYKF/YZdKpgIzpBuuxD9GLRIvsXbGTw8das5O9scS /DqhUG56PGsPVd4mTl1snidpwP6nAtIPcZLzI7K6C0d6xurGhcfw/p03A5tAJfpv mn2zn/XLCPGoVI4HMMXmEoJ4MoKc8VhreQXgbQcV9wXx8rrqyvdZZS1YHL79iESG d5BMAvQpKrlyrXSYg9RetyWcGrJe299Qe6nbyC85SOvTn5pOhKnwFiD6tdV2aPO8 Gi/P6IURFwHXgMyqyHLM+W7yKLefJBkl6SLdqnby4be1PR4FQigwFzftw3+Re7og CgHkTlxovhnnLkrba7meeTDQXvU3k3Yo3YmcIA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:18 2025 by rpki-client