This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/nJR_NliYFB-V9T4gAy6T3mjTukw.asa File: nJR_NliYFB-V9T4gAy6T3mjTukw.asa (raw, json) Hash identifier: lVinzgYc0skkJP4xD+sknPRiLs/Ljwi13qaQW4UVh8Y= Subject key identifier: 9C:94:7F:36:58:98:14:1F:95:F5:3E:20:03:2E:93:DE:68:D3:BA:4C Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533 Certificate serial: 019B4BA78A7D748764A85BAB49505FA6ABA4 Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/nJR_NliYFB-V9T4gAy6T3mjTukw.asa Signing time: Tue 23 Dec 2025 14:40:29 +0000 ASPA not before: Tue 23 Dec 2025 14:40:29 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 213158 Providers: AS: 2116 AS: 25400 AS: 41164 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:a7:8a:7d:74:87:64:a8:5b:ab:49:50:5f:a6:ab:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533 Validity Not Before: Dec 23 14:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9c947f365898141f95f53e20032e93de68d3ba4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:3e:17:77:2d:0d:34:a0:00:7b:0a:0e:68: a0:71:77:1b:01:55:31:66:b5:fe:fc:99:10:f6:99: 51:29:42:a2:c3:6f:c3:da:a1:46:87:93:95:32:7d: 29:bf:ef:11:10:92:63:75:53:b7:72:b2:6f:d7:7c: 1a:f7:54:72:c9:54:bf:34:fd:15:18:72:46:3f:fe: 43:20:27:f0:6e:72:61:fe:e0:80:4d:59:a1:2b:78: af:9b:4c:2a:37:d1:5f:bf:c1:1f:3f:5d:d4:86:7e: 97:3e:0f:45:63:c9:36:72:40:5c:79:d1:bc:61:81: 7c:cc:5e:3f:00:a7:ca:eb:b3:19:86:0d:a6:a4:e2: 7b:e8:4d:a0:e2:6f:fc:96:4c:0b:4d:e0:9c:2a:05: 8b:b4:45:d7:5d:a2:fa:8c:9b:82:ba:93:5d:28:09: c5:a7:ff:52:f2:ee:5a:b8:56:68:46:ae:00:dc:cf: d2:26:b1:4b:d0:15:c0:db:cf:b4:ba:f3:38:42:ac: 49:7c:10:3b:70:31:64:ab:d0:67:b9:cc:b7:ad:35: 72:39:f3:cf:07:93:11:f3:53:36:15:bd:b4:0b:1b: d3:05:ad:65:f1:a4:47:51:4e:94:eb:97:58:75:b4: 7b:ef:4f:36:a8:4e:a0:0d:41:cf:1f:55:13:6c:58: 39:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:94:7F:36:58:98:14:1F:95:F5:3E:20:03:2E:93:DE:68:D3:BA:4C X509v3 Authority Key Identifier: keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/nJR_NliYFB-V9T4gAy6T3mjTukw.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213158 Signature Algorithm: sha256WithRSAEncryption 64:f6:23:24:0e:40:c7:42:6f:b2:1d:29:ad:94:d8:18:d4:21: 8b:6f:09:0b:37:60:cf:7e:5b:a3:49:b0:d3:34:74:7d:ca:ce: 2b:25:2c:8a:df:ed:cd:15:d8:25:e0:30:f8:50:f7:c4:92:3d: 64:4a:8b:37:da:ac:6f:32:c5:59:ca:bb:72:20:70:23:a2:23: 0d:19:cc:00:d2:71:61:7c:82:ed:0d:80:e0:3b:46:f6:9f:d9: 61:5e:cb:83:2b:21:36:1f:35:14:bb:1b:64:16:68:46:cd:95: ff:51:5b:e8:6f:e3:45:2d:a5:05:06:d6:a3:f5:25:ef:dd:49: 61:90:88:8d:20:e9:cb:81:6f:67:2f:00:a4:bf:39:74:77:d6: 7a:03:d0:e8:cb:f0:90:4d:c4:64:0c:ca:21:ad:5e:54:f7:4d: 5d:45:78:41:77:44:63:f3:78:e6:53:29:94:7d:a3:1e:52:cb: 4d:df:ce:5b:79:e1:ba:c3:c7:2c:86:b6:a0:04:24:96:71:4f: b2:ca:8a:ec:2b:3f:61:33:26:e1:5b:1e:30:74:4a:8a:d3:e2: 9b:ba:7d:ea:66:b4:fa:08:f6:84:86:e1:80:f0:00:54:78:37: 1c:a7:2a:7c:aa:8c:3e:91:97:5d:b2:b8:e8:d5:96:77:d1:24: 3d:32:54:63 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZtLp4p9dIdkqFurSVBfpqukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNWE4YjY4OGRlYWRiYjkxZWZiZTA3NzIzMDhiYWM5ZjMw NGE1MzMwHhcNMjUxMjIzMTQ0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzk0N2YzNjU4OTgxNDFmOTVmNTNlMjAwMzJlOTNkZTY4ZDNiYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k8+F3ctDTSgAHsKDmigcXcbAVUx ZrX+/JkQ9plRKUKiw2/D2qFGh5OVMn0pv+8REJJjdVO3crJv13wa91RyyVS/NP0V GHJGP/5DICfwbnJh/uCATVmhK3ivm0wqN9Ffv8EfP13Uhn6XPg9FY8k2ckBcedG8 YYF8zF4/AKfK67MZhg2mpOJ76E2g4m/8lkwLTeCcKgWLtEXXXaL6jJuCupNdKAnF p/9S8u5auFZoRq4A3M/SJrFL0BXA28+0uvM4QqxJfBA7cDFkq9Bnucy3rTVyOfPP B5MR81M2Fb20CxvTBa1l8aRHUU6U65dYdbR77082qE6gDUHPH1UTbFg5nwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFJyUfzZYmBQflfU+IAMuk95o07pMMB8GA1UdIwQY MBaAFDJai2iN6tu5HvvgdyMIusnzBKUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjIt YmI0YTg2NzJjYzBjLzEvbkpSX05saVlGQi1WOVQ0Z0F5NlQzbWpUdWt3LmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9hMzViYzktNzJlNi00OTc5LWI0NjItYmI0YTg2NzJjYzBj LzEvTWxxTGFJM3EyN2tlLS1CM0l3aTZ5Zk1FcFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNApjANBgkqhkiG 9w0BAQsFAAOCAQEAZPYjJA5Ax0Jvsh0prZTYGNQhi28JCzdgz35bo0mw0zR0fcrO KyUsit/tzRXYJeAw+FD3xJI9ZEqLN9qsbzLFWcq7ciBwI6IjDRnMANJxYXyC7Q2A 4DtG9p/ZYV7LgyshNh81FLsbZBZoRs2V/1Fb6G/jRS2lBQbWo/Ul791JYZCIjSDp y4FvZy8ApL85dHfWegPQ6MvwkE3EZAzKIa1eVPdNXUV4QXdEY/N45lMplH2jHlLL Td/OW3nhusPHLIa2oAQklnFPssqK7Cs/YTMm4VseMHRKitPim7p96ma0+gj2hIbh gPAAVHg3HKcqfKqMPpGXXbK46NWWd9EkPTJUYw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:25:00 2025 by rpki-client