This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/O5W4X-XBYeWAvMUfvIjNuACgFkg.asa
File:                     O5W4X-XBYeWAvMUfvIjNuACgFkg.asa (raw, json)
Hash identifier:          7Z8pxKRz4YvwT86qT++qRx70dU1ZdttXNNnewjJqgt0=
Subject key identifier:   3B:95:B8:5F:E5:C1:61:E5:80:BC:C5:1F:BC:88:CD:B8:00:A0:16:48
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019B9F76DBCA667CD6F08280B784373F401B
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/O5W4X-XBYeWAvMUfvIjNuACgFkg.asa
Signing time:             Thu 08 Jan 2026 21:15:25 +0000
ASPA not before:          Thu 08 Jan 2026 21:15:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213527
Providers:                AS: 174
                          AS: 6204
                          AS: 6939
                          AS: 30823
                          AS: 35133
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:76:db:ca:66:7c:d6:f0:82:80:b7:84:37:3f:40:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Jan  8 21:15:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b95b85fe5c161e580bcc51fbc88cdb800a01648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:aa:cb:d8:f6:e1:a6:38:de:ea:86:b4:06:
                    d7:a3:90:5d:60:76:a8:61:10:f9:a9:e3:0f:06:cd:
                    bc:1f:e9:37:ca:e9:4c:68:d6:02:a8:68:33:0f:0e:
                    53:7a:8f:ea:28:c2:a9:29:48:c4:56:d3:7f:9a:9f:
                    01:cc:78:9d:c9:85:9e:17:13:d7:d3:1f:2b:b4:f3:
                    02:0a:70:aa:7d:a9:c6:38:58:27:ab:79:1c:f8:5b:
                    78:18:51:5e:5f:99:04:f8:30:e0:3d:d6:be:c3:15:
                    43:03:56:80:2d:09:18:ce:db:d5:af:6b:b6:e2:fd:
                    c3:b6:4a:48:9d:c3:58:39:84:98:c4:97:8f:02:4b:
                    a3:e0:fd:d2:d2:4f:aa:0d:1f:5e:bb:52:69:e7:d2:
                    c8:54:19:f2:0b:e0:60:00:d3:fa:9a:a0:78:fd:46:
                    78:75:26:ed:6c:91:96:22:fa:55:42:24:d5:b0:f9:
                    ab:db:0b:c8:5c:63:fe:f5:88:a5:40:61:b2:f0:40:
                    e8:6e:f3:41:ec:62:ac:b5:1f:2f:b2:d3:bc:e7:28:
                    01:8d:96:1c:42:e2:07:e6:bb:1d:61:65:1e:94:cb:
                    f4:39:57:5c:52:0e:68:5d:6f:7c:3d:ee:7c:a1:97:
                    e1:e8:46:fa:f9:ea:c4:46:b4:9e:3c:57:e8:8d:e7:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:95:B8:5F:E5:C1:61:E5:80:BC:C5:1F:BC:88:CD:B8:00:A0:16:48
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/O5W4X-XBYeWAvMUfvIjNuACgFkg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213527

    Signature Algorithm: sha256WithRSAEncryption
         a8:e0:5f:29:86:8c:64:df:56:77:65:e9:92:14:84:e8:b8:20:
         d4:44:15:29:e3:c4:82:e6:ce:07:f5:89:ab:c7:2e:d6:1a:03:
         a2:54:df:d5:e5:eb:03:72:65:31:8d:d7:5b:9a:45:c1:34:17:
         52:48:19:14:25:77:a5:b8:a7:77:88:14:28:b1:d6:0c:23:2d:
         bb:6a:a8:b6:69:ce:78:96:05:4d:a2:f7:9d:66:95:86:4f:4b:
         48:d3:54:67:58:32:cd:f7:c8:87:f7:e4:6c:1b:9b:47:e3:65:
         2f:56:97:d6:9e:cf:38:d9:59:e9:b8:b3:7c:a0:fa:9a:67:a7:
         fd:1f:60:2e:2d:05:63:ea:fc:cf:eb:30:1d:fd:5c:47:b7:c9:
         1a:99:13:ea:52:91:5c:86:fd:27:ab:5b:70:fe:16:61:5d:2c:
         22:8f:00:f2:51:e2:6c:89:52:2f:47:30:a4:ad:7c:47:8d:0f:
         55:7c:57:ce:16:e4:3a:a8:58:ce:8a:9e:2d:c3:f1:a4:b0:6a:
         39:ed:ac:06:a4:1c:e1:23:f7:bb:c4:83:54:89:57:53:29:17:
         8e:e9:5c:e0:a5:28:e3:08:dd:b3:d6:d1:b6:d7:b8:b6:59:29:
         96:ce:da:11:bd:bc:5c:cd:c0:f0:1b:1e:9b:17:c3:42:09:3b:
         65:e2:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:50:11 2026 by rpki-client