This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/kX9kKPziKiDt_OCvG008KoPTi9Q.asa File: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (raw, json) Hash identifier: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8= Subject key identifier: 91:7F:64:28:FC:E2:2A:20:ED:FC:E0:AF:1B:4D:3C:2A:83:D3:8B:D4 Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a Certificate serial: 019B23063B62C9A496871839B23E02AB4AB9 Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/kX9kKPziKiDt_OCvG008KoPTi9Q.asa Signing time: Mon 15 Dec 2025 17:19:29 +0000 ASPA not before: Mon 15 Dec 2025 17:19:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 204911 Providers: AS: 1273 AS: 3320 AS: 5405 AS: 9002 AS: 50629 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:06:3b:62:c9:a4:96:87:18:39:b2:3e:02:ab:4a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a Validity Not Before: Dec 15 17:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=917f6428fce22a20edfce0af1b4d3c2a83d38bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:0c:97:b3:ee:f4:f2:75:31:94:9a:e0:f6: 14:12:26:ea:b1:af:d9:fc:81:9a:54:ce:e4:aa:eb: c4:c0:ea:1b:89:15:f6:b9:42:b4:6b:96:71:4c:fb: b0:db:c6:e1:86:be:39:a8:71:d1:00:ce:39:52:d8: 9b:1e:e1:26:73:9a:c5:c8:f1:4a:cc:01:7d:94:0b: 65:8c:d8:56:68:a8:83:19:8c:9a:70:73:c5:b3:75: 16:f2:05:84:46:89:5b:a9:7e:04:7e:62:6a:21:a2: 10:23:68:17:81:8d:dc:c5:df:c0:32:35:4b:14:0b: b0:67:05:c1:12:7c:1a:da:87:5e:09:b7:3f:34:05: 25:c7:09:fd:3e:24:6a:ee:f2:20:78:09:23:32:50: a1:48:66:33:a5:78:5c:43:05:3e:26:1d:e1:7a:78: 31:ba:4a:94:89:8c:2a:00:ec:a2:74:ce:73:c6:7b: c4:ed:43:af:8f:a9:fd:36:c2:98:03:4a:bb:77:fa: 0a:61:74:1d:ee:78:99:c4:15:2f:8d:5a:bd:8b:50: 20:7d:4a:3c:7b:44:77:57:4d:7f:d3:d8:28:2d:1d: 20:64:ce:36:a8:e8:5b:aa:dd:31:f1:6e:a7:94:87: 0f:51:99:11:4f:89:83:08:50:c4:82:2b:9d:74:fd: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7F:64:28:FC:E2:2A:20:ED:FC:E0:AF:1B:4D:3C:2A:83:D3:8B:D4 X509v3 Authority Key Identifier: keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/kX9kKPziKiDt_OCvG008KoPTi9Q.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204911 Signature Algorithm: sha256WithRSAEncryption 22:e7:af:18:18:92:40:11:4f:23:00:57:93:85:eb:52:46:c8: 8d:62:ac:ed:23:8d:0b:75:41:76:e2:9f:cb:ba:87:64:32:4e: 72:7d:83:4c:fc:c5:45:5a:ae:56:67:87:9d:00:b3:2b:0c:65: 05:d8:fd:c8:5d:fb:dd:5a:eb:8c:3d:40:94:38:34:6a:cc:48: 2b:58:2c:99:57:7d:5f:3d:b5:49:dd:85:26:c2:41:3b:0b:b8: 38:c5:c6:fb:88:5f:b9:5e:c5:3f:35:72:ac:21:fd:47:62:c6: b3:48:a8:cc:08:b7:3e:b1:d4:17:63:4f:81:28:c9:d9:28:9a: 75:bf:d6:06:c2:56:29:f5:c6:91:a2:80:ef:42:64:b2:d7:f7: fb:61:2e:14:f6:6e:97:12:27:66:35:ff:06:16:60:b7:64:f3: 8c:40:7b:c6:66:bf:52:6d:e6:40:a0:a3:f3:c1:0d:57:3d:77: 64:6a:da:48:5b:32:d5:eb:5a:51:21:7c:aa:4f:a7:a9:78:cd: 90:10:59:5f:3e:0e:06:9a:6c:69:e1:53:83:ad:19:0f:d0:6f: 26:fd:a1:23:13:79:5c:64:92:49:10:0d:38:a3:2c:07:32:54: 03:60:f6:b8:27:97:4b:14:5b:0c:fe:61:78:30:2f:74:f1:48: e3:75:b0:16 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZsjBjtiyaSWhxg5sj4Cq0q5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz YTA1N2EwHhcNMjUxMjE1MTcxOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTdmNjQyOGZjZTIyYTIwZWRmY2UwYWYxYjRkM2MyYTgzZDM4YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k0Ml7Pu9PJ1MZSa4PYUEibqsa/Z /IGaVM7kquvEwOobiRX2uUK0a5ZxTPuw28bhhr45qHHRAM45UtibHuEmc5rFyPFK zAF9lAtljNhWaKiDGYyacHPFs3UW8gWERolbqX4EfmJqIaIQI2gXgY3cxd/AMjVL FAuwZwXBEnwa2odeCbc/NAUlxwn9PiRq7vIgeAkjMlChSGYzpXhcQwU+Jh3hengx ukqUiYwqAOyidM5zxnvE7UOvj6n9NsKYA0q7d/oKYXQd7niZxBUvjVq9i1AgfUo8 e0R3V01/09goLR0gZM42qOhbqt0x8W6nlIcPUZkRT4mDCFDEgiuddP3OFwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJF/ZCj84iog7fzgrxtNPCqD04vUMB8GA1UdIwQY MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt NDAxMGEzNmQ5Y2RkLzEva1g5a0tQemlLaUR0X09DdkcwMDhLb1BUaTlRLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMgbzANBgkqhkiG 9w0BAQsFAAOCAQEAIuevGBiSQBFPIwBXk4XrUkbIjWKs7SONC3VBduKfy7qHZDJO cn2DTPzFRVquVmeHnQCzKwxlBdj9yF373VrrjD1AlDg0asxIK1gsmVd9Xz21Sd2F JsJBOwu4OMXG+4hfuV7FPzVyrCH9R2LGs0iozAi3PrHUF2NPgSjJ2Siadb/WBsJW KfXGkaKA70Jkstf3+2EuFPZulxInZjX/BhZgt2TzjEB7xma/Um3mQKCj88ENVz13 ZGraSFsy1etaUSF8qk+nqXjNkBBZXz4OBppsaeFTg60ZD9BvJv2hIxN5XGSSSRAN OKMsBzJUA2D2uCeXSxRbDP5heDAvdPFI43WwFg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:03 2025 by rpki-client