This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/draI0Cjc4C6_RI6Dss79xlrr8uQ.asa
File:                     draI0Cjc4C6_RI6Dss79xlrr8uQ.asa (raw, json)
Hash identifier:          NISnvZNJdodDTScf7hvZCAyYZKv+C3I1Mf07uJ3IQSw=
Subject key identifier:   76:B6:88:D0:28:DC:E0:2E:BF:44:8E:83:B2:CE:FD:C6:5A:EB:F2:E4
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       019B9FC6F31CBB1A626D091188161413AFB0
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/draI0Cjc4C6_RI6Dss79xlrr8uQ.asa
Signing time:             Thu 08 Jan 2026 22:42:54 +0000
ASPA not before:          Thu 08 Jan 2026 22:42:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            35634
Providers:                AS: 30893
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:c6:f3:1c:bb:1a:62:6d:09:11:88:16:14:13:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Jan  8 22:42:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76b688d028dce02ebf448e83b2cefdc65aebf2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:33:3b:a8:bd:0e:79:c6:07:60:38:0e:34:
                    84:59:c5:51:1b:1d:b6:b1:e7:65:09:66:f9:4c:f7:
                    39:b1:54:4b:77:63:f6:ec:cb:51:9e:7b:09:af:60:
                    d0:f1:d4:1a:bf:96:16:d1:2e:bf:1e:8b:85:d8:54:
                    99:68:0d:17:b8:ed:ce:58:90:4b:03:08:84:c3:ef:
                    90:b8:a5:f8:e8:58:ba:20:55:77:ea:1c:b9:a5:35:
                    89:ce:a8:27:49:cc:33:0a:db:81:14:6e:b0:00:1b:
                    81:a6:e2:eb:e6:e6:2c:33:02:15:b3:fd:7f:43:b2:
                    40:97:d0:89:86:43:07:e9:4f:f1:34:70:90:a3:a6:
                    b8:21:ae:55:7b:bc:93:86:c4:ac:80:65:99:d3:79:
                    63:64:38:9e:3f:17:0a:db:40:6a:f8:ca:d4:c3:d4:
                    97:ce:99:9a:0f:ca:a8:fe:52:5e:b5:1e:02:82:35:
                    aa:22:97:84:88:82:de:e3:b1:ec:24:58:b5:02:d4:
                    e0:52:ba:ed:dc:26:d7:ae:22:66:38:b2:5c:c0:b9:
                    02:9a:42:65:63:91:16:6e:0e:20:3d:75:f9:9c:dc:
                    79:09:1a:cb:bb:3b:38:93:4c:99:6b:a3:03:ed:88:
                    66:29:c9:7b:a1:25:00:8b:ff:18:6d:5b:20:7d:1a:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B6:88:D0:28:DC:E0:2E:BF:44:8E:83:B2:CE:FD:C6:5A:EB:F2:E4
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/draI0Cjc4C6_RI6Dss79xlrr8uQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35634

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:4c:44:d9:31:80:64:06:b6:80:59:18:95:a5:1f:6f:15:
         16:07:69:15:d0:85:8d:78:bd:89:d2:4c:1e:15:dd:4c:cd:63:
         44:2c:6e:27:64:1c:b8:01:74:02:ac:99:32:bc:f9:b2:5c:11:
         57:9b:95:47:fb:8b:59:e4:83:f3:37:20:e4:bc:01:cf:c2:a5:
         26:1c:0e:2f:4f:60:22:e4:11:0d:ff:99:2b:6a:e7:fa:f7:91:
         ba:39:e5:4b:de:d2:7e:92:53:21:e0:d2:65:d8:91:e4:23:42:
         57:6a:8b:3b:02:94:43:34:8f:91:4e:38:73:81:4a:fc:42:57:
         27:f4:53:cd:ba:e7:99:18:d2:76:e4:61:8e:c4:dc:27:38:20:
         38:96:fe:d6:71:fe:74:b6:40:77:45:b9:d7:1a:44:c5:68:d0:
         c5:4d:90:a2:56:5a:d0:51:77:2b:b3:66:8e:a2:83:37:29:b4:
         4e:fa:17:df:e1:8f:55:f8:74:be:d3:b8:ac:fd:30:03:4f:90:
         7a:ab:4d:f5:17:e9:a7:4b:08:a5:92:82:1e:02:0d:39:43:cd:
         df:c8:7f:15:d6:ea:48:82:d0:0f:7e:4f:02:30:27:fe:3a:01:
         a9:30:1f:c7:5a:9c:d3:89:bb:ed:14:80:c2:c7:e0:78:f6:5b:
         3d:63:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:21 2026 by rpki-client