This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/NnEIJrnmhkwELld_U_QBTUbqU90.asa File: NnEIJrnmhkwELld_U_QBTUbqU90.asa (raw, json) Hash identifier: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4= Subject key identifier: 36:71:08:26:B9:E6:86:4C:04:2E:57:7F:53:F4:01:4D:46:EA:53:DD Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Certificate serial: 019B65A324E45351F6BE0C8D7CC741C5DCA8 Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/NnEIJrnmhkwELld_U_QBTUbqU90.asa Signing time: Sun 28 Dec 2025 15:45:49 +0000 ASPA not before: Sun 28 Dec 2025 15:45:49 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 204310 Providers: AS: 553 AS: 21473 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:a3:24:e4:53:51:f6:be:0c:8d:7c:c7:41:c5:dc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a Validity Not Before: Dec 28 15:45:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36710826b9e6864c042e577f53f4014d46ea53dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:bf:5c:7a:84:ee:fe:3a:fc:9c:56:08:c2: f1:60:c0:5d:15:5e:8c:e3:b8:4d:d2:28:1d:48:fa: dc:66:2d:9c:93:69:4c:60:ca:91:0c:33:89:c9:12: 0e:0b:d6:87:c8:b2:b6:9c:13:42:c8:67:45:b3:6a: b0:bd:9c:24:9e:36:ad:54:38:3b:e5:3c:0e:4f:41: 49:9d:d7:ea:f9:bd:2b:36:b2:bb:db:6a:29:70:91: 55:3d:c5:7c:f4:65:0b:62:fa:39:d4:c7:48:fe:b3: a6:29:4c:ab:c4:41:27:c4:78:b4:14:e5:df:cf:6f: 0c:4e:fb:0b:71:09:b3:f5:c9:37:0f:13:34:33:bb: 69:a0:fb:2f:ff:8b:a5:2d:87:75:82:06:35:20:c3: 4b:9e:42:85:a1:27:d3:9d:59:c3:ea:36:9c:37:a9: 55:df:a6:fc:ff:53:04:40:fe:2d:d2:f9:1c:77:40: 34:ed:39:60:f0:7b:40:67:f9:50:b0:e6:d3:22:f6: 92:a6:87:1a:9a:7d:f3:28:6a:ac:ae:70:d8:4e:83: 4d:f3:ec:8c:03:03:23:09:18:c5:dd:66:06:a3:cf: 37:81:0e:39:15:c2:69:78:c5:14:04:34:55:f4:23: 54:d2:e5:c1:92:25:37:7d:c4:93:37:1f:cd:93:12: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:71:08:26:B9:E6:86:4C:04:2E:57:7F:53:F4:01:4D:46:EA:53:DD X509v3 Authority Key Identifier: keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/NnEIJrnmhkwELld_U_QBTUbqU90.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 204310 Signature Algorithm: sha256WithRSAEncryption 8b:c8:18:ae:36:60:63:1a:3f:82:7d:99:88:84:c9:2f:eb:d6: 02:e2:40:d0:19:81:3a:79:18:25:5b:66:f6:69:f2:74:30:64: 6a:7a:c2:2d:17:f0:bc:cb:01:8d:da:82:9d:91:e1:20:b6:03: 5e:1a:33:4f:57:ae:73:4f:25:7b:78:fc:c7:60:64:08:af:59: 43:65:fe:bc:87:1b:35:a1:94:48:52:f0:53:82:5b:3f:b7:37: 4f:e8:a6:9e:94:99:7e:a1:60:f8:40:cd:6e:2e:7c:80:55:ed: 60:bb:9d:a3:00:da:23:13:c3:0d:0f:27:4e:7e:f0:f8:2e:b3: 7d:1c:5d:f3:10:48:42:ed:54:37:15:c8:95:4b:d0:3b:16:63: f2:e7:2f:12:74:5b:13:30:b4:72:c1:41:cc:5b:3c:98:41:29: 8c:c1:13:8f:23:61:84:7d:81:2e:03:bc:2d:ef:3a:dc:a4:47: e6:42:f7:41:7e:4e:c8:a3:c0:29:be:f5:25:b1:91:73:de:8b: 23:a2:1d:62:e5:22:7f:1c:39:5d:e7:6e:e8:76:3b:a0:6f:b1: 62:30:5a:5d:4d:0c:47:fa:cf:ac:8e:b0:10:29:62:89:3b:4c: 97:f1:87:6e:9e:25:db:43:d2:01:1a:f7:3a:e2:3a:6f:fd:92: 20:e4:ef:67 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtloyTkU1H2vgyNfMdBxdyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OGIwYzMzNzc2NjYzY2I0MzIxYTEwOGYyZjRkMTYzNWI1 ZDJkOGEwHhcNMjUxMjI4MTU0NTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjcxMDgyNmI5ZTY4NjRjMDQyZTU3N2Y1M2Y0MDE0ZDQ2ZWE1M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu2/XHqE7v46/JxWCMLxYMBdFV6M 47hN0igdSPrcZi2ck2lMYMqRDDOJyRIOC9aHyLK2nBNCyGdFs2qwvZwknjatVDg7 5TwOT0FJndfq+b0rNrK722opcJFVPcV89GULYvo51MdI/rOmKUyrxEEnxHi0FOXf z28MTvsLcQmz9ck3DxM0M7tpoPsv/4ulLYd1ggY1IMNLnkKFoSfTnVnD6jacN6lV 36b8/1MEQP4t0vkcd0A07Tlg8HtAZ/lQsObTIvaSpocamn3zKGqsrnDYToNN8+yM AwMjCRjF3WYGo883gQ45FcJpeMUUBDRV9CNU0uXBkiU3fcSTNx/NkxKkdwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDZxCCa55oZMBC5Xf1P0AU1G6lPdMB8GA1UdIwQY MBaAFASLDDN3ZmPLQyGhCPL00WNbXS2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUt MjQxMTZjYjZlOTg2LzEvTm5FSUpybm1oa3dFTGxkX1VfUUJUVWJxVTkwLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC80YmI3ZjQtOTcwOS00MTA5LWIzMGUtMjQxMTZjYjZlOTg2 LzEvQklzTU0zZG1ZOHRESWFFSTh2VFJZMXRkTFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMeFjANBgkqhkiG 9w0BAQsFAAOCAQEAi8gYrjZgYxo/gn2ZiITJL+vWAuJA0BmBOnkYJVtm9mnydDBk anrCLRfwvMsBjdqCnZHhILYDXhozT1euc08le3j8x2BkCK9ZQ2X+vIcbNaGUSFLw U4JbP7c3T+imnpSZfqFg+EDNbi58gFXtYLudowDaIxPDDQ8nTn7w+C6zfRxd8xBI Qu1UNxXIlUvQOxZj8ucvEnRbEzC0csFBzFs8mEEpjMETjyNhhH2BLgO8Le863KRH 5kL3QX5OyKPAKb71JbGRc96LI6IdYuUifxw5Xedu6HY7oG+xYjBaXU0MR/rPrI6w ECliiTtMl/GHbp4l20PSARr3OuI6b/2SIOTvZw== -----END CERTIFICATE-----Generated at Mon Feb 2 04:43:24 2026 by rpki-client