This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa
File:                     h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (raw, json)
Hash identifier:          sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=
Subject key identifier:   87:EF:47:F0:1B:E6:C1:23:06:FB:69:21:D5:85:C9:62:D5:D6:63:A6
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019B9322910A06317475A9D2D853303FFF14
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa
Signing time:             Tue 06 Jan 2026 11:47:54 +0000
ASPA not before:          Tue 06 Jan 2026 11:47:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210440
Providers:                AS: 6939
                          AS: 154185
                          AS: 203031
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:93:22:91:0a:06:31:74:75:a9:d2:d8:53:30:3f:ff:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Jan  6 11:47:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=87ef47f01be6c12306fb6921d585c962d5d663a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:80:ea:df:a0:aa:c4:fe:6c:e8:05:4e:c6:
                    ab:01:19:76:7a:09:c8:0e:b0:cb:5a:03:0b:1e:88:
                    2e:56:77:4d:1e:f6:92:e0:ef:f0:9d:1d:51:10:e2:
                    6e:9e:de:17:27:43:df:af:af:52:ef:c3:9d:2d:e6:
                    0e:53:b6:6d:c2:eb:f7:f9:19:98:62:2e:e3:e3:89:
                    5b:30:2a:0c:95:4c:cc:b7:91:2c:b4:e7:a8:ce:b0:
                    69:b1:fe:39:70:3b:90:bc:a9:d7:fa:3e:bf:1d:9b:
                    7f:b0:2a:a1:20:66:81:04:36:d0:09:8c:eb:e2:9c:
                    29:83:d1:95:89:70:0f:cb:25:fc:89:50:8d:91:19:
                    ab:01:e1:2f:fb:16:21:f8:e6:e1:ab:dc:15:b7:30:
                    6a:8f:cf:fc:7d:21:61:73:e1:4b:e8:e8:7d:2f:2a:
                    f3:e1:60:bc:d0:ea:39:61:16:b0:70:28:8c:a3:1e:
                    63:c6:0e:7c:69:3d:0a:6e:d3:8e:12:34:6b:de:f3:
                    f5:dc:52:f6:78:3d:8b:b1:ee:1b:61:d9:2c:a8:a4:
                    27:48:78:38:0c:44:c8:3c:a4:36:e0:3c:f3:4b:80:
                    06:56:91:f7:e4:87:4d:9d:d9:1c:03:bd:61:98:00:
                    71:45:29:06:49:da:2b:ec:38:78:22:7c:f4:c4:cf:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:47:F0:1B:E6:C1:23:06:FB:69:21:D5:85:C9:62:D5:D6:63:A6
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210440

    Signature Algorithm: sha256WithRSAEncryption
         62:f2:ad:17:48:ad:17:e6:33:4d:54:59:b8:d4:f0:5f:b7:7e:
         f2:64:84:f6:03:95:64:6d:9c:6f:b4:53:66:c8:e6:38:9e:28:
         9c:98:60:28:bc:1c:8b:ef:38:e1:21:fa:fe:83:b1:a5:17:54:
         55:2a:a6:e9:ff:e5:f9:dc:4b:ea:49:7f:3e:05:8d:0f:1e:68:
         d8:32:a4:31:92:61:41:24:ee:1c:b1:1b:8b:86:31:0a:b5:c3:
         3c:a1:1c:52:f1:00:8f:70:28:6d:f6:6a:07:8c:91:38:15:77:
         b4:56:7a:d0:d1:a1:f8:65:ad:4b:3f:84:ff:7b:0e:b9:be:81:
         d2:e3:c3:dd:7f:3d:9f:d3:92:6a:2f:2f:db:20:50:f6:91:15:
         b4:53:f7:73:64:74:2e:ff:f3:46:ff:6d:22:db:2d:f7:cd:cd:
         df:39:49:8b:b3:74:b5:b7:3f:2a:e9:4f:c5:d9:c4:dc:ce:67:
         39:c2:88:8a:32:37:f8:7e:92:84:e2:e9:c1:84:2c:6f:f6:f5:
         21:af:93:f7:93:85:2b:2d:fd:02:72:e5:86:03:89:a6:d4:f3:
         86:45:64:06:91:02:2e:f9:d6:d0:ec:27:1d:d7:bf:8d:fe:6a:
         16:ba:a4:4b:dc:6d:74:ef:e5:9e:2d:3b:ae:c0:43:51:bb:2b:
         03:a3:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:35 2026 by rpki-client