This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/wRsM-J-_RdemGYQhUq06PflenDM.asa
File:                     wRsM-J-_RdemGYQhUq06PflenDM.asa (raw, json)
Hash identifier:          pjI+PT7nOc9seCJaC2jOV5Z3Ysbs3FSmgOLK6vNi+4g=
Subject key identifier:   C1:1B:0C:F8:9F:BF:45:D7:A6:19:84:21:52:AD:3A:3D:F9:5E:9C:33
Certificate issuer:       /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial:       019B7E580ADFCF1D76614896C8559D363591
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/wRsM-J-_RdemGYQhUq06PflenDM.asa
Signing time:             Fri 02 Jan 2026 10:54:17 +0000
ASPA not before:          Fri 02 Jan 2026 10:54:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            216441
Providers:                AS: 58299
                          AS: 59645
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:58:0a:df:cf:1d:76:61:48:96:c8:55:9d:36:35:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
        Validity
            Not Before: Jan  2 10:54:17 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c11b0cf89fbf45d7a619842152ad3a3df95e9c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:b2:56:a4:c2:38:eb:6a:16:7e:9b:f8:42:
                    28:bf:8b:a2:e2:0c:40:91:83:5a:23:6e:bd:59:3e:
                    51:4a:f2:0b:36:b3:0c:1b:4b:5d:9b:4f:1c:ab:48:
                    3b:a2:b6:05:70:ad:15:26:9c:74:a7:92:cb:0a:b7:
                    47:46:e5:d9:30:cc:16:3e:c3:15:f4:16:0e:98:cb:
                    a9:1c:9f:20:ee:34:19:77:0e:ef:4f:1d:72:5f:fd:
                    30:ad:29:64:aa:ed:67:6f:07:f7:b0:32:e7:b2:73:
                    64:04:aa:cd:29:0e:01:b3:fa:61:e4:75:c8:f8:d9:
                    67:31:dd:5b:02:75:3c:d8:4a:a1:6b:88:89:07:cb:
                    a8:9f:a6:ad:e4:c7:23:30:e7:8b:9c:94:82:f1:00:
                    b9:a5:65:0d:d2:b7:f4:1b:4a:11:72:03:0c:4d:51:
                    ad:ea:3c:8e:4c:e0:ca:7e:4e:62:36:b2:7f:fd:9c:
                    c1:af:6b:f9:a3:36:17:68:19:ab:5f:d3:66:04:b4:
                    5c:c2:e9:d7:e1:27:63:1c:7c:11:e2:36:69:05:db:
                    a0:66:3d:e3:18:3e:45:7a:24:2b:5f:53:d8:71:dc:
                    03:1e:d6:06:52:80:71:72:ac:a9:d8:d8:eb:a5:8f:
                    b3:02:7c:ac:05:7c:65:4f:14:63:cb:ba:f2:a4:1c:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:0C:F8:9F:BF:45:D7:A6:19:84:21:52:AD:3A:3D:F9:5E:9C:33
            X509v3 Authority Key Identifier:
                keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/wRsM-J-_RdemGYQhUq06PflenDM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216441

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:96:89:d9:ec:f3:fd:dc:1e:90:70:2f:37:10:a3:c6:df:
         37:76:c6:88:7b:74:3f:1f:b5:45:e5:bd:3f:2a:b4:94:c1:82:
         79:3d:d9:e4:4f:74:e7:e5:8c:91:c9:0a:01:c6:e2:25:68:97:
         90:28:9c:df:08:2b:25:fd:0f:a7:bc:eb:a4:d5:95:aa:f8:42:
         92:4e:b5:67:64:fa:31:ff:8b:86:2c:25:14:8e:78:f3:3f:03:
         a0:b4:c1:e9:f4:7d:8d:77:69:ef:76:e4:f9:80:26:07:02:66:
         62:58:6c:15:ef:40:92:a0:e4:6f:88:77:b1:d5:44:b2:15:9d:
         4e:d9:08:00:a4:0d:59:b5:25:c5:48:ad:0f:15:9a:9b:1c:e5:
         7c:b6:e0:b6:7e:df:ec:82:23:d6:d9:93:cd:36:8f:2f:2b:c2:
         33:cd:83:90:0c:7f:fd:df:40:8d:d6:18:42:7b:69:54:55:38:
         67:ae:1f:29:9c:85:3f:49:f2:39:c1:a6:73:02:e2:03:63:a5:
         40:34:b7:48:f0:c9:35:43:d2:89:91:dd:ff:f7:1d:a1:77:39:
         5f:8e:2c:f6:86:0b:12:f0:88:ad:9d:c8:be:f9:5a:75:37:99:
         1d:2e:49:74:a5:e5:c5:84:46:4f:00:f0:b3:29:4f:df:39:93:
         95:8d:0c:30
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZt+WArfzx12YUiWyFWdNjWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzI0ZTJhYzljZDUzMzk5NjUxNTkwY2YzOTFhZDZiYmYx
YjNlMjYwHhcNMjYwMTAyMTA1NDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTFiMGNmODlmYmY0NWQ3YTYxOTg0MjE1MmFkM2EzZGY5NWU5YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tSyVqTCOOtqFn6b+EIov4ui4gxA
kYNaI269WT5RSvILNrMMG0tdm08cq0g7orYFcK0VJpx0p5LLCrdHRuXZMMwWPsMV
9BYOmMupHJ8g7jQZdw7vTx1yX/0wrSlkqu1nbwf3sDLnsnNkBKrNKQ4Bs/ph5HXI
+NlnMd1bAnU82Eqha4iJB8uon6at5McjMOeLnJSC8QC5pWUN0rf0G0oRcgMMTVGt
6jyOTODKfk5iNrJ//ZzBr2v5ozYXaBmrX9NmBLRcwunX4SdjHHwR4jZpBdugZj3j
GD5FeiQrX1PYcdwDHtYGUoBxcqyp2NjrpY+zAnysBXxlTxRjy7rypBzJwQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMEbDPifv0XXphmEIVKtOj35XpwzMB8GA1UdIwQY
MBaAFG7CTirJzVM5llFZDPORrWu/Gz4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMt
N2E3NDczYzU0NWIxLzEvd1JzTS1KLV9SZGVtR1lRaFVxMDZQZmxlbkRNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMWY5NjItODhkNi00NjQyLWEyZDMtN2E3NDczYzU0NWIx
LzEvYnNKT0tzbk5Vem1XVVZrTTg1R3RhNzhiUGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNeTANBgkqhkiG
9w0BAQsFAAOCAQEAGrmWidns8/3cHpBwLzcQo8bfN3bGiHt0Px+1ReW9Pyq0lMGC
eT3Z5E905+WMkckKAcbiJWiXkCic3wgrJf0Pp7zrpNWVqvhCkk61Z2T6Mf+Lhiwl
FI548z8DoLTB6fR9jXdp73bk+YAmBwJmYlhsFe9AkqDkb4h3sdVEshWdTtkIAKQN
WbUlxUitDxWamxzlfLbgtn7f7IIj1tmTzTaPLyvCM82DkAx//d9AjdYYQntpVFU4
Z64fKZyFP0nyOcGmcwLiA2OlQDS3SPDJNUPSiZHd//cdoXc5X44s9oYLEvCIrZ3I
vvladTeZHS5JdKXlxYRGTwDwsylP3zmTlY0MMA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:24:43 2026 by rpki-client