This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/pnnodEIfZquOWuX0y07TWspln6c.asa File: pnnodEIfZquOWuX0y07TWspln6c.asa (raw, json) Hash identifier: C3Hpu+scL5kOpXPlMI5stoiSoiNUyScLSjYeEYySHr0= Subject key identifier: A6:79:E8:74:42:1F:66:AB:8E:5A:E5:F4:CB:4E:D3:5A:CA:65:9F:A7 Certificate issuer: /CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Certificate serial: 019ADB732686C56D7CF1E9E39443964A7759 Authority key identifier: AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/pnnodEIfZquOWuX0y07TWspln6c.asa Signing time: Mon 01 Dec 2025 19:45:48 +0000 ASPA not before: Mon 01 Dec 2025 19:45:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 205941 Providers: AS: 57050 AS: 60900 AS: 210464 AS: 212895 AS: 213449 AS: 214639 AS: 214757 AS: 214809 AS: 215828 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.mft rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:73:26:86:c5:6d:7c:f1:e9:e3:94:43:96:4a:77:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa65515617d777b5611dd0e0b3d00253ea329a07 Validity Not Before: Dec 1 19:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a679e874421f66ab8e5ae5f4cb4ed35aca659fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:8a:cb:20:f1:59:ec:47:dc:a6:16:ab:39: 72:7d:06:48:f8:3f:41:c9:23:ba:fb:14:88:de:6d: dd:10:90:e4:35:65:a6:d6:85:9a:c1:05:8f:a0:7f: 93:47:09:fa:78:dd:fe:8b:cb:7d:cc:cb:4e:48:03: 47:48:c4:eb:99:b7:0a:65:c7:98:50:2f:ba:aa:ec: 2e:0c:54:64:59:8d:09:6b:4e:18:80:1f:29:c2:48: 7e:ac:7d:a9:f2:5d:13:0e:57:c3:a7:ee:90:75:f4: 7d:67:ac:cd:7e:a7:b7:f7:29:fa:93:c8:97:cb:eb: 28:97:85:03:09:e4:c7:63:60:50:c9:9d:b5:fa:3f: b5:90:4d:4a:e5:5d:83:bd:0e:d0:72:dc:5b:57:fc: 7b:8a:49:07:2d:d0:76:50:f0:8c:a1:fa:9a:56:20: 4d:6f:3a:38:f8:13:9e:73:ad:95:81:8f:81:82:97: 0f:a4:ef:b9:60:56:34:29:4b:c1:7b:76:41:fe:6b: d0:5b:f1:c7:ce:bd:10:b5:de:11:56:b7:33:66:99: cd:d1:f4:fb:bd:3a:68:8c:0d:9d:49:ff:54:84:71: ed:8a:6f:09:20:e4:ec:48:7d:5b:9c:07:4f:75:d7: 8d:8b:38:65:fe:ff:05:e7:10:a4:07:97:3e:1f:0c: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:79:E8:74:42:1F:66:AB:8E:5A:E5:F4:CB:4E:D3:5A:CA:65:9F:A7 X509v3 Authority Key Identifier: keyid:AA:65:51:56:17:D7:77:B5:61:1D:D0:E0:B3:D0:02:53:EA:32:9A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVRVhfXd7VhHdDgs9ACU-oymgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/pnnodEIfZquOWuX0y07TWspln6c.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/cd9b89-7568-47b1-8e51-e592c7d35ff2/1/qmVRVhfXd7VhHdDgs9ACU-oymgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205941 Signature Algorithm: sha256WithRSAEncryption 49:89:08:56:3a:4e:3e:36:fa:81:c2:d5:76:5b:a0:d9:b1:1b: 9d:b2:01:c5:83:54:74:3d:f7:5d:36:36:ce:ac:05:0c:e1:7e: a6:d2:3c:58:70:3f:35:44:42:7a:39:45:d7:cf:1d:ab:1f:2b: f2:53:dd:29:59:3b:e0:bc:c5:39:fe:09:92:a7:9f:2a:f1:ab: 1f:18:22:e1:f3:77:0a:b8:b6:de:9a:74:50:dc:d2:6f:65:48: 89:f9:fc:8b:8e:bd:72:80:b5:2e:2b:cf:2d:9f:cf:8e:b6:8c: 4c:f5:13:68:0e:b3:1c:6a:63:2c:82:4e:3a:84:5b:06:70:6d: f0:8c:d3:f0:a0:a2:77:a3:c2:8b:bc:3d:5d:b7:c6:f6:ee:64: 94:38:2e:8f:cf:16:c2:0e:4d:81:57:8e:79:bf:cc:89:21:6c: 09:b0:d0:4c:9e:93:19:34:91:11:59:73:1f:93:c1:dc:d6:c6: 97:6e:d1:c9:07:2b:ec:57:39:21:6e:e9:aa:4a:02:53:2e:c4: 54:cc:a3:45:38:2a:f0:fd:fb:05:98:c0:29:f3:79:de:f3:bc: 0e:7a:93:64:ba:99:ef:3a:4a:c5:68:31:24:99:09:80:e6:8a: fb:fc:3f:3a:41:55:88:45:bb:cc:83:dc:57:e9:f1:db:16:7e: fe:ce:89:4a -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrbcyaGxW188enjlEOWSndZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjU1MTU2MTdkNzc3YjU2MTFkZDBlMGIzZDAwMjUzZWEz MjlhMDcwHhcNMjUxMjAxMTk0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjc5ZTg3NDQyMWY2NmFiOGU1YWU1ZjRjYjRlZDM1YWNhNjU5ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiqKyyDxWexH3KYWqzlyfQZI+D9B ySO6+xSI3m3dEJDkNWWm1oWawQWPoH+TRwn6eN3+i8t9zMtOSANHSMTrmbcKZceY UC+6quwuDFRkWY0Ja04YgB8pwkh+rH2p8l0TDlfDp+6QdfR9Z6zNfqe39yn6k8iX y+sol4UDCeTHY2BQyZ21+j+1kE1K5V2DvQ7QctxbV/x7ikkHLdB2UPCMofqaViBN bzo4+BOec62VgY+BgpcPpO+5YFY0KUvBe3ZB/mvQW/HHzr0Qtd4RVrczZpnN0fT7 vTpojA2dSf9UhHHtim8JIOTsSH1bnAdPddeNizhl/v8F5xCkB5c+HwwQ6wIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFKZ56HRCH2arjlrl9MtO01rKZZ+nMB8GA1UdIwQY MBaAFKplUVYX13e1YR3Q4LPQAlPqMpoHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEt ZTU5MmM3ZDM1ZmYyLzEvcG5ub2RFSWZacXVPV3VYMHkwN1RXc3BsbjZjLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jZDliODktNzU2OC00N2IxLThlNTEtZTU5MmM3ZDM1ZmYy LzEvcW1WUlZoZlhkN1ZoSGREZ3M5QUNVLW95bWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMkdTANBgkqhkiG 9w0BAQsFAAOCAQEASYkIVjpOPjb6gcLVdlug2bEbnbIBxYNUdD33XTY2zqwFDOF+ ptI8WHA/NURCejlF188dqx8r8lPdKVk74LzFOf4JkqefKvGrHxgi4fN3Cri23pp0 UNzSb2VIifn8i469coC1LivPLZ/PjraMTPUTaA6zHGpjLIJOOoRbBnBt8IzT8KCi d6PCi7w9XbfG9u5klDguj88Wwg5NgVeOeb/MiSFsCbDQTJ6TGTSREVlzH5PB3NbG l27RyQcr7Fc5IW7pqkoCUy7EVMyjRTgq8P37BZjAKfN53vO8DnqTZLqZ7zpKxWgx JJkJgOaK+/w/OkFViEW7zIPcV+nx2xZ+/s6JSg== -----END CERTIFICATE-----Generated at Thu Dec 4 07:38:20 2025 by rpki-client