This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/rELVahjt1c8lTGoZpqa7vRSAnPI.asa
File:                     rELVahjt1c8lTGoZpqa7vRSAnPI.asa (raw, json)
Hash identifier:          Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=
Subject key identifier:   AC:42:D5:6A:18:ED:D5:CF:25:4C:6A:19:A6:A6:BB:BD:14:80:9C:F2
Certificate issuer:       /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial:       019BDB4A0D802372F441491E751CE1526F7D
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/rELVahjt1c8lTGoZpqa7vRSAnPI.asa
Signing time:             Tue 20 Jan 2026 12:03:41 +0000
ASPA not before:          Tue 20 Jan 2026 12:03:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207767
Providers:                AS: 196945
                          AS: 198477
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:db:4a:0d:80:23:72:f4:41:49:1e:75:1c:e1:52:6f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
        Validity
            Not Before: Jan 20 12:03:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac42d56a18edd5cf254c6a19a6a6bbbd14809cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:00:fe:2a:cc:a5:ad:9e:5c:61:b0:b7:ba:
                    12:03:bc:56:bb:80:83:74:70:ec:cb:d9:52:20:99:
                    8d:64:c5:1f:67:e5:3f:e5:5a:33:56:c9:8c:0e:f2:
                    a4:71:4f:c2:e7:24:9e:f9:4f:56:77:c6:aa:47:e3:
                    e9:4f:b0:18:20:c7:95:41:be:1b:2d:82:b3:e7:28:
                    91:b4:14:05:12:3e:0a:8b:71:ba:99:f9:71:eb:df:
                    d3:75:c9:d4:30:73:b2:2f:b1:6e:06:6e:6c:e4:af:
                    e0:0e:2d:ab:c4:49:93:46:e0:1f:ee:17:e2:80:d8:
                    d8:2f:70:d3:4a:71:61:00:61:ad:60:ca:d3:0d:61:
                    8d:13:92:60:00:2e:c7:91:a4:33:e9:5a:87:a0:15:
                    42:a1:2d:8d:1a:5c:07:c5:66:61:ee:cd:cb:27:ed:
                    9d:b1:64:86:1f:9c:4b:ab:6e:2c:15:90:74:5d:90:
                    93:6e:4f:9d:90:ca:32:c5:9f:c3:48:d7:8c:f4:50:
                    13:61:1c:cc:f5:c5:d3:c3:ee:97:bc:b7:89:3b:3a:
                    1e:2d:39:2b:1a:a7:2c:7a:92:7d:21:52:5c:4e:be:
                    97:9d:c5:5a:51:e5:9c:fe:a2:76:28:9e:41:5a:e1:
                    65:a4:22:c9:76:3b:0f:f1:3a:34:95:e8:b6:42:7b:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:D5:6A:18:ED:D5:CF:25:4C:6A:19:A6:A6:BB:BD:14:80:9C:F2
            X509v3 Authority Key Identifier:
                keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/rELVahjt1c8lTGoZpqa7vRSAnPI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207767

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:75:e3:94:a0:70:6b:37:a1:5f:9f:05:1a:95:c7:e4:f4:
         7f:c3:e2:5e:86:c9:70:6c:a0:f9:57:7f:e1:24:df:b7:81:bc:
         39:e4:3d:f8:4b:17:66:16:be:13:6b:23:4f:b5:86:40:e6:d0:
         90:ea:99:6f:0a:60:48:37:fa:fa:e6:01:95:dd:45:d8:1b:9e:
         33:0c:9a:0b:3b:68:f0:9e:d4:70:86:35:d0:79:80:7b:25:37:
         5d:a4:5a:c8:ef:ba:f3:9e:1d:9a:bd:07:90:29:7f:d3:15:db:
         c7:e0:41:9b:7b:e2:3a:aa:18:e0:34:22:fa:fb:8e:e9:38:3b:
         3d:ec:0c:eb:c5:03:e3:a8:0d:d8:b2:88:0f:85:b2:c2:ca:e7:
         5a:b5:c3:80:06:6f:22:f2:86:97:86:95:21:6f:df:12:14:52:
         b2:28:03:c7:e6:90:43:d6:14:20:04:6b:54:f0:35:62:3f:54:
         16:2d:58:09:6f:17:ef:2c:fc:05:fb:ae:34:82:c7:8c:21:47:
         d6:c1:38:2c:7c:95:f9:93:f8:db:14:65:bf:82:55:92:d8:a1:
         4c:de:93:97:b2:e2:78:89:3b:45:30:1b:7a:8c:e5:7e:92:6b:
         75:e6:d4:e0:b6:48:31:43:83:b2:e2:e5:83:22:b5:30:72:66:
         54:f8:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:44 2026 by rpki-client