This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/FD1D3tD8Wgemy0D_hjVkHNyyffA.asa
File:                     FD1D3tD8Wgemy0D_hjVkHNyyffA.asa (raw, json)
Hash identifier:          dC2+srWHZQSVqWN4gNxQ5m+5yJw+nSPbHERxoSOT3g8=
Subject key identifier:   14:3D:43:DE:D0:FC:5A:07:A6:CB:40:FF:86:35:64:1C:DC:B2:7D:F0
Certificate issuer:       /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial:       019BDB4CCAE7B1DF17077DAF9717D3E54B01
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/FD1D3tD8Wgemy0D_hjVkHNyyffA.asa
Signing time:             Tue 20 Jan 2026 12:06:41 +0000
ASPA not before:          Tue 20 Jan 2026 12:06:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            196945
Providers:                AS: 8280
                          AS: 39505
                          AS: 198477
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:db:4c:ca:e7:b1:df:17:07:7d:af:97:17:d3:e5:4b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
        Validity
            Not Before: Jan 20 12:06:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=143d43ded0fc5a07a6cb40ff8635641cdcb27df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:fb:b6:5a:6a:a4:48:b1:0e:2e:f9:27:72:
                    e5:12:1b:cf:29:e2:48:3e:45:70:6f:1e:47:d4:fc:
                    91:e1:2e:d5:7a:d4:88:89:35:bc:30:fd:ce:68:73:
                    6e:c6:56:1e:6e:7f:8b:fc:26:99:da:ee:cd:2e:19:
                    87:72:8e:20:4f:40:e6:78:e1:20:99:0d:c3:62:5d:
                    4a:2f:17:a5:4e:15:b2:6a:f1:c2:d6:1f:9a:09:2d:
                    a3:65:08:95:d3:25:c5:2d:62:06:1d:ea:e7:24:55:
                    c9:76:73:35:07:6e:7e:e4:e3:6c:e4:29:a2:d6:6f:
                    dd:4e:58:8c:55:c1:6c:4a:fd:54:15:41:81:41:d1:
                    35:e9:68:0a:36:82:1a:c2:e4:b3:85:a6:16:02:a5:
                    73:b2:0a:24:26:31:8e:34:1f:e1:fa:7f:e7:a0:0f:
                    1b:1d:79:bd:9e:a7:8d:d4:18:6a:31:36:2d:60:40:
                    08:91:6d:bc:be:8d:5c:ae:80:7a:c5:51:0d:a0:07:
                    50:e9:62:32:b6:d8:b3:a5:c5:e4:ce:03:e0:09:6a:
                    c8:43:b6:8b:ab:18:3f:b9:34:b4:94:fd:05:aa:b9:
                    fb:88:83:31:dd:ca:ef:8c:36:c3:f8:72:a6:c7:6a:
                    c8:ff:60:af:0d:d8:81:32:9a:ff:18:8e:a2:e3:28:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3D:43:DE:D0:FC:5A:07:A6:CB:40:FF:86:35:64:1C:DC:B2:7D:F0
            X509v3 Authority Key Identifier:
                keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/FD1D3tD8Wgemy0D_hjVkHNyyffA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196945

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:b2:24:d5:5d:7a:a9:9f:46:03:5b:b9:e8:e4:56:73:df:
         84:d4:dc:cd:81:73:a0:9d:66:8c:8f:9c:95:9f:6e:6d:75:5b:
         69:31:b9:40:08:3f:d2:b4:d4:b0:24:3a:14:6f:c6:93:6b:93:
         df:e0:92:a0:a4:8f:af:c5:54:15:ba:f4:10:46:88:ac:27:04:
         ad:35:30:7e:6c:29:f3:22:e8:89:b4:1d:68:20:c3:b1:55:e7:
         e1:2a:31:fb:a4:43:a5:16:49:9a:6c:c4:77:ff:92:85:1e:62:
         e7:39:ee:94:52:fe:b2:76:3c:4e:30:3d:13:37:e4:bf:5e:35:
         9b:54:3e:9b:8d:2f:71:b3:cd:39:c7:33:c8:31:4d:a2:28:e9:
         a4:1e:cf:35:3e:41:d1:dc:b6:4e:73:ff:fa:92:9a:dd:3a:3a:
         7b:8c:01:3d:24:e3:34:70:ea:dd:1f:2f:13:06:1c:81:58:c3:
         34:34:ec:f0:ff:bc:a4:79:31:b2:9e:82:4a:e4:b9:67:7d:30:
         58:16:26:4e:9c:1c:91:13:27:86:c7:c9:36:b8:bc:27:cd:89:
         38:c8:f4:ce:05:f8:e8:95:ed:01:10:e5:a3:e5:ec:9d:91:b4:
         a2:43:87:76:75:cd:b6:04:0c:b0:f0:87:1c:c3:76:c1:b9:93:
         b7:e4:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:37 2026 by rpki-client