This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/1-cpJlLFm8w9sISCPdZtGH5DqnzY.asa
File:                     1-cpJlLFm8w9sISCPdZtGH5DqnzY.asa (raw, json)
Hash identifier:          pXKJkPKtXpV4CiWiVBSkc3KR+EQoBCKoeLVAVXWTVGU=
Subject key identifier:   F9:CA:49:94:B1:66:F3:0F:6C:21:20:8F:75:9B:46:1F:90:EA:9F:36
Certificate issuer:       /CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Certificate serial:       019BEF6B610B35A64C4FBF812755F0D1E2C6
Authority key identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/1-cpJlLFm8w9sISCPdZtGH5DqnzY.asa
Signing time:             Sat 24 Jan 2026 09:52:30 +0000
ASPA not before:          Sat 24 Jan 2026 09:52:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214933
Providers:                AS: 17433
                          AS: 53808
                          AS: 151194
                          AS: 153376
                          AS: 154185
                          AS: 198025
                          AS: 203031
                          AS: 203168
                          AS: 204539
                          AS: 207303
                          AS: 210352
                          AS: 210440
                          AS: 212895
                          AS: 213605
                          AS: 214439
                          AS: 214955
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:6b:61:0b:35:a6:4c:4f:bf:81:27:55:f0:d1:e2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
        Validity
            Not Before: Jan 24 09:52:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f9ca4994b166f30f6c21208f759b461f90ea9f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:7d:7e:fb:1d:1d:64:fe:c8:91:ca:1a:ee:
                    8c:31:50:15:8a:95:d8:e9:32:a2:3c:fa:85:c0:f1:
                    1b:63:52:6c:82:e7:b0:62:91:c0:4e:48:d9:4a:19:
                    ac:24:9c:5c:40:d1:72:17:73:67:53:fd:55:bd:d2:
                    16:a5:7d:05:4e:42:b4:12:f6:4b:f0:a0:6c:50:d8:
                    5c:a6:11:25:c9:7b:d2:db:03:7f:2d:af:0a:20:a3:
                    2c:5b:19:6f:fa:ca:a0:84:10:74:cd:f4:da:56:3c:
                    0d:23:bd:18:47:f7:2b:dd:19:7c:b3:f9:78:04:8e:
                    08:fc:f9:10:ef:f5:29:d1:78:dd:19:62:93:aa:93:
                    11:85:5d:12:59:22:aa:f9:02:61:db:66:a0:a3:a4:
                    ba:85:6b:bf:29:8b:64:d9:75:ca:c4:23:4b:18:12:
                    df:8a:ea:58:d5:b6:e5:7d:d5:c4:6f:8a:12:53:86:
                    72:69:57:62:a6:1e:b3:6f:1d:54:1e:7e:fa:16:ec:
                    d3:9b:d2:54:2a:e0:e2:70:5c:90:e1:97:47:1d:a5:
                    ae:39:e3:d8:5e:7b:8e:13:08:5d:5d:a6:9d:46:a8:
                    e5:f3:5c:ac:97:5b:58:b5:6d:38:14:de:d0:e1:32:
                    e8:b3:e8:97:94:e4:d8:92:fa:6b:ca:7e:20:f9:b8:
                    4a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CA:49:94:B1:66:F3:0F:6C:21:20:8F:75:9B:46:1F:90:EA:9F:36
            X509v3 Authority Key Identifier:
                keyid:57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/1-cpJlLFm8w9sISCPdZtGH5DqnzY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214933

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:df:1b:86:c9:81:7d:6d:66:b1:a9:8c:80:a0:0a:00:02:
         72:70:e0:85:1f:b4:aa:20:df:7c:de:06:3f:f1:c6:16:70:f3:
         4c:5b:08:6a:97:82:7b:1e:16:65:8e:8b:3d:96:39:0f:0f:93:
         b4:9b:76:1f:39:bc:6f:fa:8f:84:a8:91:38:5f:17:17:f2:70:
         e3:6b:21:bb:91:d7:f3:b2:68:46:c8:a5:6d:59:1d:6d:18:5c:
         be:e3:35:a5:38:56:c3:f6:28:e4:7a:d8:b7:4d:04:f4:72:fe:
         1f:c0:a3:ab:79:99:96:71:f1:29:aa:06:6e:a9:20:63:e7:fb:
         8e:8b:4d:fe:54:fd:b4:dd:88:c3:54:f4:86:e1:59:5d:b4:8f:
         45:0b:00:15:b7:4f:fc:93:92:d8:ed:2d:df:c3:80:1d:b6:51:
         4e:92:bb:8b:72:45:a7:d7:45:06:47:35:2e:35:5e:26:18:21:
         c8:e4:6f:1c:10:65:f5:91:c8:0b:27:30:8f:8f:02:a2:7f:2e:
         cd:57:d1:66:2f:23:a2:15:0f:7a:e1:e5:d9:5d:93:a5:a6:5f:
         86:91:2d:ac:64:9a:a2:5b:4a:e0:0a:d0:11:f6:34:43:37:0d:
         5c:96:ad:78:09:03:b9:93:fb:c9:2d:17:8b:6a:36:42:7d:50:
         d3:52:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:35 2026 by rpki-client