This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/LwR4VXrBpkRMHSbEFyenX6LXrCE.asa
File:                     LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (raw, json)
Hash identifier:          jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=
Subject key identifier:   2F:04:78:55:7A:C1:A6:44:4C:1D:26:C4:17:27:A7:5F:A2:D7:AC:21
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019B932290A23EE13CCEF2E6AC8096553F30
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/LwR4VXrBpkRMHSbEFyenX6LXrCE.asa
Signing time:             Tue 06 Jan 2026 11:47:54 +0000
ASPA not before:          Tue 06 Jan 2026 11:47:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203031
Providers:                AS: 154185
                          AS: 210440
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:93:22:90:a2:3e:e1:3c:ce:f2:e6:ac:80:96:55:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Jan  6 11:47:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f0478557ac1a6444c1d26c41727a75fa2d7ac21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ad:5a:cb:46:bd:73:03:71:d1:48:83:a7:27:
                    d0:22:a0:47:90:49:45:56:8b:75:4b:3c:50:37:42:
                    97:de:eb:81:70:0c:78:ef:97:26:2e:fb:41:59:65:
                    a9:0f:5a:e4:fc:f0:f6:60:ec:7c:98:84:c1:e6:f3:
                    cf:6a:b3:80:81:09:fe:c3:6e:fd:00:ce:75:71:e8:
                    28:96:7c:92:6b:9e:c5:b6:78:9a:f2:b4:21:d9:e8:
                    5f:e4:51:c0:81:cd:88:13:a0:f6:43:e6:aa:f0:d9:
                    0b:e6:25:51:95:68:41:10:e6:57:e8:ff:cc:73:a7:
                    5c:56:6b:a9:9f:72:7f:15:bb:6d:3a:be:55:90:2e:
                    44:50:01:cc:b4:3a:8c:24:0d:b3:84:59:a2:82:db:
                    6a:2c:38:b2:c2:7f:6f:0e:76:f7:07:0f:b6:89:d6:
                    15:da:a1:b7:6a:bb:47:b7:ff:9e:da:26:2e:7e:f9:
                    85:32:9b:53:5a:d7:a2:de:12:90:4c:ab:b6:71:00:
                    a1:d3:e5:26:3c:b8:c4:c5:c0:b4:42:fa:99:d4:31:
                    4d:c5:7b:9d:75:98:f3:35:27:fd:16:68:b7:bb:7f:
                    bf:cb:dd:c8:a6:f8:8e:4a:e6:ce:68:dc:e7:8c:85:
                    60:e1:c0:d3:81:9f:f5:34:ea:f0:d1:43:a2:0d:00:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:78:55:7A:C1:A6:44:4C:1D:26:C4:17:27:A7:5F:A2:D7:AC:21
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/LwR4VXrBpkRMHSbEFyenX6LXrCE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203031

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:c7:db:4b:8a:cd:c7:10:5f:cf:a3:ec:42:16:07:9b:34:
         09:6d:6c:3b:2a:26:60:13:d6:2f:f9:7f:cb:6f:38:c6:11:cc:
         93:0c:07:12:71:c0:29:7c:4a:ca:20:a2:f1:09:8a:dd:35:e1:
         b7:dc:5f:eb:26:ec:40:5e:6d:14:ff:99:f4:f6:e7:bd:64:56:
         c2:aa:0f:71:a3:b2:ac:5e:1f:e6:f3:fe:e2:4e:e1:57:2d:05:
         2b:4e:e3:91:74:81:34:40:26:ca:3a:36:f6:30:52:bc:3c:48:
         e3:8e:71:2e:06:9d:e5:8c:76:16:a1:b5:31:65:ea:1c:09:3e:
         8a:e5:cc:b4:1a:bf:0d:67:f2:5b:9d:96:64:9f:cd:92:d1:11:
         8d:5b:ef:7c:c6:e4:9c:8c:8e:cf:a9:b5:a8:2e:1f:f2:1e:81:
         82:0a:36:d8:17:1e:03:a1:94:02:f5:20:c9:38:09:99:65:4d:
         a9:0f:3c:24:9c:c1:5a:e5:7e:a7:b5:76:6f:f6:11:f8:62:1a:
         df:bf:bf:c4:0e:18:8d:4d:cf:5a:8e:55:83:1b:7a:89:40:88:
         0a:ea:ee:9f:7d:ed:fe:45:c3:29:9d:66:ae:f5:cf:df:0e:a8:
         9f:ee:49:42:b1:18:5e:ed:8e:c0:e1:bc:ea:70:72:f9:71:bb:
         e7:70:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:02:40 2026 by rpki-client