This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa
File:                     iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa (raw, json)
Hash identifier:          KlQBY6M94I1QY6KQo3uEfY4PPExUBLB4IqDYeIRa6Gw=
Subject key identifier:   89:79:A8:07:E8:51:6E:53:C3:70:9F:BC:2D:BC:E3:C3:91:49:5D:E1
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019B7E4DFA939E3BB80A222C2B95AC7527C3
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa
Signing time:             Fri 02 Jan 2026 10:43:18 +0000
ASPA not before:          Fri 02 Jan 2026 10:43:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213512
Providers:                AS: 200462
                          AS: 213527
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:4d:fa:93:9e:3b:b8:0a:22:2c:2b:95:ac:75:27:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Jan  2 10:43:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8979a807e8516e53c3709fbc2dbce3c391495de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:9b:20:d5:ad:df:11:8b:25:2e:af:20:5f:
                    ee:07:e7:f4:36:d6:e6:c6:3f:0b:e2:7d:58:f9:19:
                    6b:45:ad:6b:40:21:79:44:22:f1:88:ba:c0:e3:d5:
                    e7:39:d4:73:89:b4:b6:1a:a7:88:2e:56:ea:47:3f:
                    00:f7:16:57:4b:99:f7:15:76:c9:07:04:4c:dc:89:
                    de:bb:9e:c3:e9:65:5d:d2:09:97:fc:62:a0:7b:fc:
                    5d:52:c2:ab:8e:a0:9a:8a:de:47:f6:26:2d:b1:18:
                    11:8d:87:04:c9:fc:b7:c8:39:a3:8c:38:2d:0b:d8:
                    6c:78:1f:31:64:a9:43:a7:2b:49:39:f0:05:ae:4f:
                    db:a8:44:fc:a0:0a:40:a9:f8:4d:cd:db:ad:20:2c:
                    a3:23:6c:ac:c2:0c:86:8c:0a:4a:93:b9:6f:40:bd:
                    34:c7:d4:cd:8a:45:26:eb:ca:62:d6:2f:73:35:d1:
                    44:cc:85:04:78:b0:01:f3:4c:98:4b:f0:1f:91:8d:
                    0f:b2:62:ee:fa:03:1e:66:e6:c5:52:2f:dc:9a:82:
                    eb:c5:5b:a6:ad:f8:42:41:6b:54:47:97:86:28:6a:
                    76:da:7d:66:fe:0a:8e:82:ad:99:33:d1:1a:b1:ee:
                    a4:8b:cc:15:9b:d4:8a:ed:f3:c7:81:ad:56:85:83:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:A8:07:E8:51:6E:53:C3:70:9F:BC:2D:BC:E3:C3:91:49:5D:E1
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213512

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:d3:d4:a5:e5:90:76:f3:87:b2:8c:ea:91:4d:96:79:f8:
         88:b8:09:4f:61:1e:7e:07:3f:26:06:07:aa:f8:18:57:88:63:
         03:f9:e7:82:26:07:fc:19:a9:93:81:91:c8:c8:63:28:b8:95:
         af:e0:88:97:be:30:df:56:6d:d6:6f:0f:23:d1:fa:41:93:ad:
         44:9e:57:ef:5d:e9:35:75:f5:44:89:f5:af:c4:60:28:60:f5:
         b2:fc:50:3a:d8:51:a5:94:7f:83:66:63:6a:cc:54:3d:6e:5b:
         49:fb:a8:cd:86:32:49:e2:96:49:45:6c:f5:13:0f:38:1c:b9:
         10:4e:88:d4:1b:a7:6f:91:b5:ba:58:63:40:4b:3f:d1:ae:2b:
         9a:ad:4d:97:7c:b6:df:54:79:8d:1b:0e:3d:c2:e9:fd:bf:9c:
         5a:3a:f1:97:a8:01:64:97:96:bc:1b:c3:f7:e1:2f:1d:5b:85:
         50:6b:2a:a0:1e:c1:52:fc:70:86:b5:c4:9e:8a:18:7a:e7:e0:
         49:e2:ed:c9:11:bb:7b:df:b7:b8:ab:69:7e:8c:4c:41:a0:08:
         cd:b1:ed:1b:04:56:f0:47:56:02:37:95:ac:f5:5c:bf:35:3b:
         92:d1:c8:87:7d:b8:72:4c:1d:0e:1d:4d:02:c6:92:55:9d:8c:
         2e:94:89:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:58:34 2026 by rpki-client