This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa
File:                     1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (raw, json)
Hash identifier:          A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=
Subject key identifier:   D5:7F:8C:F7:E3:9B:F3:39:FF:01:46:D1:91:0E:76:13:E7:E4:0E:3F
Certificate issuer:       /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial:       019BEC2C656D8301D5119E6B1DCFCDFFC25B
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa
Signing time:             Fri 23 Jan 2026 18:44:51 +0000
ASPA not before:          Fri 23 Jan 2026 18:44:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216127
Providers:                AS: 49418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ec:2c:65:6d:83:01:d5:11:9e:6b:1d:cf:cd:ff:c2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
        Validity
            Not Before: Jan 23 18:44:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d57f8cf7e39bf339ff0146d1910e7613e7e40e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:83:fd:c5:1a:76:22:ab:fd:0b:ee:f1:0c:
                    cf:3d:ab:2c:7e:5e:01:64:0f:ca:da:cd:8a:1f:29:
                    c5:0c:3f:f7:53:3f:0f:fa:1f:f5:8e:02:bb:c3:c9:
                    70:ef:8e:ad:2a:ce:d5:c2:61:94:ad:80:fb:b1:cd:
                    cb:e6:7f:d0:88:3b:1e:d5:2b:a4:c0:b5:76:e6:9d:
                    02:f4:2b:e2:bc:96:c7:9e:5c:f9:b2:4b:54:db:2c:
                    e5:f1:b9:ca:ce:6d:dd:ae:ee:d6:dd:86:1e:3d:9e:
                    f1:df:68:f7:de:7d:03:80:f1:66:1b:7b:46:af:79:
                    2c:59:26:97:35:d6:5e:f0:92:91:70:d7:98:2c:ef:
                    5c:e7:3d:b2:12:26:e0:80:8a:4a:76:35:33:cf:b3:
                    32:a2:3d:e0:e7:b2:a8:80:7b:fe:44:70:4f:5b:cd:
                    99:a6:7d:c8:5e:d9:82:bb:de:95:91:3c:ae:6e:e0:
                    20:0a:f2:4a:83:e6:48:b0:29:30:55:62:5e:3b:8f:
                    e9:33:c3:e6:24:dd:43:19:2d:d7:5e:77:b9:55:3c:
                    7d:7e:50:3c:b5:d3:52:45:0f:9c:01:5a:07:04:0c:
                    6a:a1:b7:a8:bd:02:88:e3:9d:b0:2e:4d:12:6d:03:
                    77:fc:21:c8:4b:f1:dd:54:88:bb:76:e7:84:9f:9f:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7F:8C:F7:E3:9B:F3:39:FF:01:46:D1:91:0E:76:13:E7:E4:0E:3F
            X509v3 Authority Key Identifier:
                keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216127

    Signature Algorithm: sha256WithRSAEncryption
         02:ce:49:23:12:68:dd:09:1b:d7:57:ea:ca:d3:97:04:3f:95:
         8a:05:e0:d2:a7:9f:24:d8:64:53:b0:41:04:eb:41:c2:84:5e:
         9f:2c:a2:ff:e8:20:70:32:1e:f6:e9:77:34:64:c7:7e:ab:79:
         52:b5:d8:ef:b2:29:01:1a:71:a3:63:62:3d:a0:42:c5:4f:1e:
         3f:89:ea:65:62:a1:e8:6d:a7:c4:47:b8:3b:cb:a4:3b:b8:b3:
         b9:eb:da:76:bd:4b:4c:7a:fb:70:95:6b:30:f9:8e:54:a4:47:
         3b:db:c5:b9:bb:cd:fd:f4:02:45:2c:22:11:f0:07:a0:6a:3b:
         e3:e4:2a:c7:78:af:ce:8d:2f:07:aa:e6:21:b4:e4:2f:12:73:
         b2:b6:d5:40:7f:da:99:27:33:a8:3f:16:11:4b:06:e6:e7:4c:
         79:2b:2d:6c:9d:bf:b4:91:85:2a:ec:f9:f0:35:6f:b0:fa:45:
         3e:39:ff:60:24:02:08:8c:f5:f9:3e:39:fb:49:dc:85:72:c5:
         f1:8c:22:f8:d7:56:e8:66:d1:79:6c:cc:e8:99:77:6f:84:4d:
         2d:3e:d1:50:63:16:19:10:05:01:eb:b3:ed:8e:0a:dc:0e:c5:
         a8:bf:58:49:8b:ef:61:fd:c9:a6:18:17:61:4b:a6:3b:40:cf:
         c4:5f:5b:4a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvsLGVtgwHVEZ5rHc/N/8JbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGZlNWExOTljNzU0MzljNTI2NDkwNDU0YjRhYmQ1NDAy
MTM3YTkwHhcNMjYwMTIzMTg0NDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTdmOGNmN2UzOWJmMzM5ZmYwMTQ2ZDE5MTBlNzYxM2U3ZTQwZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEmD/cUadiKr/Qvu8QzPPassfl4B
ZA/K2s2KHynFDD/3Uz8P+h/1jgK7w8lw746tKs7VwmGUrYD7sc3L5n/QiDse1Suk
wLV25p0C9CvivJbHnlz5sktU2yzl8bnKzm3dru7W3YYePZ7x32j33n0DgPFmG3tG
r3ksWSaXNdZe8JKRcNeYLO9c5z2yEibggIpKdjUzz7Myoj3g57KogHv+RHBPW82Z
pn3IXtmCu96VkTyubuAgCvJKg+ZIsCkwVWJeO4/pM8PmJN1DGS3XXne5VTx9flA8
tdNSRQ+cAVoHBAxqobeovQKI452wLk0SbQN3/CHIS/HdVIi7dueEn5/cMwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNV/jPfjm/M5/wFG0ZEOdhPn5A4/MB8GA1UdIwQY
MBaAFLJP5aGZx1Q5xSZJBFS0q9VAITepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82ZDRmMmItYjdiMS00MTYwLThkYjUt
YzE5OWRjYWY1YTEzLzEvMVgtTTktT2I4em5fQVViUmtRNTJFLWZrRGo4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82ZDRmMmItYjdiMS00MTYwLThkYjUtYzE5OWRjYWY1YTEz
LzEvc2tfbG9abkhWRG5GSmtrRVZMU3IxVUFoTjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMPzANBgkqhkiG
9w0BAQsFAAOCAQEAAs5JIxJo3Qkb11fqytOXBD+VigXg0qefJNhkU7BBBOtBwoRe
nyyi/+ggcDIe9ul3NGTHfqt5UrXY77IpARpxo2NiPaBCxU8eP4nqZWKh6G2nxEe4
O8ukO7izuevadr1LTHr7cJVrMPmOVKRHO9vFubvN/fQCRSwiEfAHoGo74+Qqx3iv
zo0vB6rmIbTkLxJzsrbVQH/amSczqD8WEUsG5udMeSstbJ2/tJGFKuz58DVvsPpF
Pjn/YCQCCIz1+T45+0nchXLF8Ywi+NdW6GbReWzM6Jl3b4RNLT7RUGMWGRAFAeuz
7Y4K3A7FqL9YSYvvYf3JphgXYUumO0DPxF9bSg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:05:38 2026 by rpki-client