This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/NncLDck5QCsXoP-zdGMzAoehMpc.asa File: NncLDck5QCsXoP-zdGMzAoehMpc.asa (raw, json) Hash identifier: Ct9G108vU2K9LuYOAFXT37wdYPmx9qzQzjeMUoqKDE8= Subject key identifier: 36:77:0B:0D:C9:39:40:2B:17:A0:FF:B3:74:63:33:02:87:A1:32:97 Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2 Certificate serial: 019AE9436E7566BC14D136F51A59AE9FCEB5 Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/NncLDck5QCsXoP-zdGMzAoehMpc.asa Signing time: Thu 04 Dec 2025 12:08:21 +0000 ASPA not before: Thu 04 Dec 2025 12:08:21 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 50633 Providers: AS: 3326 AS: 35297 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:43:6e:75:66:bc:14:d1:36:f5:1a:59:ae:9f:ce:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2 Validity Not Before: Dec 4 12:08:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=36770b0dc939402b17a0ffb37463330287a13297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:65:48:2f:d7:1c:f8:84:36:a3:38:ab:ca:a1: 31:26:70:cb:1c:61:94:c1:95:10:36:db:85:dc:82: ff:85:c6:e4:5f:37:84:45:56:2e:4f:b5:e6:77:40: 6f:13:d9:c8:22:60:d9:a3:37:78:e4:91:c6:0e:1f: 8b:24:57:a0:0e:97:c8:62:77:00:8f:1b:18:a8:68: 20:df:20:a1:c1:e5:27:df:28:f1:04:41:7f:84:ef: 41:0f:f4:89:1a:f1:3e:de:e3:eb:40:6d:08:46:bb: 28:41:ae:71:c3:58:3b:9e:86:c2:3c:49:6f:cb:71: ce:e6:e9:c3:64:34:4e:24:34:a9:cd:db:08:5a:e4: 3d:09:ba:af:82:9b:00:9e:c3:fb:6e:db:6e:b3:73: 63:cc:5c:6c:d0:8c:39:80:3c:21:0b:08:91:be:15: d0:95:3e:f0:9b:a8:1b:72:71:02:33:90:c1:41:43: 3e:9a:56:00:ae:6e:dd:9b:ab:81:ac:55:7f:6a:2f: 80:c4:43:3d:ed:f5:32:48:f4:99:4b:62:b1:03:a2: a4:0c:5f:c6:f5:30:b9:52:f5:70:07:53:41:90:87: 76:34:5b:f9:c6:24:ba:73:4d:2e:13:be:ac:42:65: 54:3f:ea:4c:bb:a7:0c:4a:08:47:f5:21:33:1a:32: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:77:0B:0D:C9:39:40:2B:17:A0:FF:B3:74:63:33:02:87:A1:32:97 X509v3 Authority Key Identifier: keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/NncLDck5QCsXoP-zdGMzAoehMpc.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 50633 Signature Algorithm: sha256WithRSAEncryption 61:02:c2:ab:9d:60:75:eb:6b:12:01:f1:0f:c7:0b:95:f1:55: 32:4c:4b:fa:45:fa:e1:c7:8d:29:cb:9a:95:63:91:5f:e3:32: 57:c2:e4:d2:e9:fe:fb:0e:b8:22:29:48:63:a6:53:a7:a9:7f: b4:0b:00:4f:06:4d:da:e1:3b:55:ed:c3:aa:77:8f:57:12:02: 05:32:0f:8e:61:5c:3f:9c:3a:12:e7:f7:9b:17:aa:fc:93:70: a5:f8:49:cc:2b:4d:3e:96:d5:48:66:97:4f:f7:75:95:71:e6: 83:8d:32:d1:07:6e:7b:a0:51:d4:c8:cc:e9:d9:e6:a4:e8:f9: 56:8f:e1:2d:18:88:37:6f:9b:13:42:9b:7c:87:dc:ea:58:19: 68:83:69:22:4b:54:14:19:d1:4a:c5:84:89:3d:a0:8d:b6:3f: 8f:b3:e4:23:7f:33:f9:0e:99:39:8b:27:db:7e:21:0c:2e:b0: c4:25:4a:be:88:52:05:11:5e:d5:9e:46:f7:58:db:1e:4c:85: dd:8b:94:42:6e:9d:2d:7c:ab:64:8b:58:67:b9:4e:b7:2c:d9: 09:bf:a4:b4:46:7a:92:08:a1:7e:57:49:1c:36:69:19:9e:11: bd:08:ef:5f:f2:0d:6e:d3:0a:6b:24:58:89:9a:43:65:a9:f9: 18:af:73:55 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZrpQ251ZrwU0Tb1Glmun861MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OGQ0OTgzYzljNjNiZDhhMTU4MDAzYzU4NWY0M2Q5OTRj MTJkYzIwHhcNMjUxMjA0MTIwODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjc3MGIwZGM5Mzk0MDJiMTdhMGZmYjM3NDYzMzMwMjg3YTEzMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWVIL9cc+IQ2oziryqExJnDLHGGU wZUQNtuF3IL/hcbkXzeERVYuT7Xmd0BvE9nIImDZozd45JHGDh+LJFegDpfIYncA jxsYqGgg3yChweUn3yjxBEF/hO9BD/SJGvE+3uPrQG0IRrsoQa5xw1g7nobCPElv y3HO5unDZDROJDSpzdsIWuQ9CbqvgpsAnsP7bttus3NjzFxs0Iw5gDwhCwiRvhXQ lT7wm6gbcnECM5DBQUM+mlYArm7dm6uBrFV/ai+AxEM97fUySPSZS2KxA6KkDF/G 9TC5UvVwB1NBkId2NFv5xiS6c00uE76sQmVUP+pMu6cMSghH9SEzGjLJhwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFDZ3Cw3JOUArF6D/s3RjMwKHoTKXMB8GA1UdIwQY MBaAFKWNSYPJxjvYoVgAPFhfQ9mUwS3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYt Y2UzMGQ0YTM5OGUwLzEvTm5jTERjazVRQ3NYb1AtemRHTXpBb2VoTXBjLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYtY2UzMGQ0YTM5OGUw LzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFyTANBgkqhkiG 9w0BAQsFAAOCAQEAYQLCq51gdetrEgHxD8cLlfFVMkxL+kX64ceNKcualWORX+My V8Lk0un++w64IilIY6ZTp6l/tAsATwZN2uE7Ve3DqnePVxICBTIPjmFcP5w6Euf3 mxeq/JNwpfhJzCtNPpbVSGaXT/d1lXHmg40y0Qdue6BR1MjM6dnmpOj5Vo/hLRiI N2+bE0KbfIfc6lgZaINpIktUFBnRSsWEiT2gjbY/j7PkI38z+Q6ZOYsn234hDC6w xCVKvohSBRFe1Z5G91jbHkyF3YuUQm6dLXyrZItYZ7lOtyzZCb+ktEZ6kgihfldJ HDZpGZ4RvQjvX/INbtMKayRYiZpDZan5GK9zVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 04:12:27 2025 by rpki-client