This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/pTwEVEq8lsnikbVPE7gddvIm5IY.asa
File:                     pTwEVEq8lsnikbVPE7gddvIm5IY.asa (raw, json)
Hash identifier:          LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=
Subject key identifier:   A5:3C:04:54:4A:BC:96:C9:E2:91:B5:4F:13:B8:1D:76:F2:26:E4:86
Certificate issuer:       /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial:       019BA84553514671B4F3EC1DEA5EA2455252
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/pTwEVEq8lsnikbVPE7gddvIm5IY.asa
Signing time:             Sat 10 Jan 2026 14:17:54 +0000
ASPA not before:          Sat 10 Jan 2026 14:17:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            29670
Providers:                AS: 1273
                          AS: 2914
                          AS: 3320
                          AS: 5405
                          AS: 9002
                          AS: 9136
                          AS: 13030
                          AS: 33891
                          AS: 34549
                          AS: 47147
                          AS: 50629
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a8:45:53:51:46:71:b4:f3:ec:1d:ea:5e:a2:45:52:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
        Validity
            Not Before: Jan 10 14:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a53c04544abc96c9e291b54f13b81d76f226e486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:2d:8b:ca:b6:fc:68:f3:8b:a1:01:5c:24:
                    80:fd:44:7d:22:64:38:05:f6:be:c3:74:3a:99:48:
                    fb:39:20:9a:d6:35:33:45:35:25:a3:e6:f2:5d:c9:
                    79:8f:c4:e7:cd:b1:44:17:07:60:b1:ce:c7:5c:83:
                    e8:86:3e:94:e1:52:06:e6:e8:17:69:24:f0:9e:bf:
                    f1:12:2c:b4:bc:be:e8:74:af:42:35:96:b5:ed:bf:
                    91:ce:7d:09:4c:1c:4b:d7:53:55:16:36:a1:9e:9e:
                    59:c4:1a:f5:b7:8c:d8:cd:3d:1c:5c:f2:e7:b3:61:
                    61:20:36:34:3b:c1:91:94:f1:c4:0c:ce:b0:f5:8e:
                    ef:3d:3a:19:65:42:87:2d:0b:f6:f7:63:9a:a8:14:
                    49:d8:70:43:33:84:c6:ef:ea:1a:48:6e:db:19:50:
                    28:43:94:bd:4b:bd:f8:ad:fe:48:ca:fb:26:0a:36:
                    30:d5:20:a2:23:67:57:61:55:06:d6:7c:df:eb:30:
                    67:7c:8e:10:67:23:bc:eb:29:f9:55:77:65:25:00:
                    49:01:65:bd:cc:6c:e5:b1:ca:20:03:1c:b8:71:46:
                    6e:ef:e2:f7:93:d1:43:d6:9e:4b:2e:19:00:b1:57:
                    67:56:93:07:fa:b5:80:22:17:4a:ee:61:4e:6d:0d:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:04:54:4A:BC:96:C9:E2:91:B5:4F:13:B8:1D:76:F2:26:E4:86
            X509v3 Authority Key Identifier:
                keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/pTwEVEq8lsnikbVPE7gddvIm5IY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29670

    Signature Algorithm: sha256WithRSAEncryption
         90:64:f1:c0:fc:83:fd:91:46:2b:df:f3:3c:e8:ed:fc:8b:0d:
         16:3c:9b:1e:0e:cf:48:84:06:25:d3:36:76:da:5c:4d:66:93:
         46:21:4e:83:ba:7c:9a:ea:e9:5b:c4:7c:42:44:b8:7a:97:43:
         76:b8:d6:a6:6c:c2:89:83:5c:b9:57:36:ee:f1:eb:3b:61:8a:
         ff:97:68:23:d9:e7:8a:9c:92:4c:a6:1d:8d:8d:22:a6:68:8a:
         16:8b:bf:7f:b2:56:52:8c:c0:32:95:7e:9f:1f:2d:e0:f7:48:
         02:37:28:24:40:21:a6:97:ed:f3:25:c7:7a:74:28:7a:4f:43:
         4e:05:95:38:ac:23:a9:da:1e:2f:b7:e8:7b:c7:b8:d0:5d:c3:
         e6:9d:de:18:5e:f1:d9:19:a6:76:95:b5:7d:b4:40:86:33:13:
         e1:9b:e1:de:22:7a:b2:3b:4a:96:7f:f7:4c:47:e7:90:3c:ae:
         bc:ab:db:1a:ca:0e:55:75:c9:d2:91:99:3a:25:ee:a6:33:83:
         be:ba:cf:d7:01:d9:2d:1e:96:31:f3:9e:68:85:0c:4d:a6:57:
         0a:07:0c:61:0c:99:fc:bb:d9:0c:5b:ba:a9:ec:16:fa:dc:33:
         ee:e5:13:ec:2a:12:f4:34:01:c1:4a:50:99:cb:61:21:d9:56:
         4b:38:9b:33
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgISAZuoRVNRRnG08+wd6l6iRVJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl
YzEwNWUwHhcNMjYwMTEwMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTNjMDQ1NDRhYmM5NmM5ZTI5MWI1NGYxM2I4MWQ3NmYyMjZlNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hUti8q2/Gjzi6EBXCSA/UR9ImQ4
Bfa+w3Q6mUj7OSCa1jUzRTUlo+byXcl5j8TnzbFEFwdgsc7HXIPohj6U4VIG5ugX
aSTwnr/xEiy0vL7odK9CNZa17b+Rzn0JTBxL11NVFjahnp5ZxBr1t4zYzT0cXPLn
s2FhIDY0O8GRlPHEDM6w9Y7vPToZZUKHLQv292OaqBRJ2HBDM4TG7+oaSG7bGVAo
Q5S9S734rf5IyvsmCjYw1SCiI2dXYVUG1nzf6zBnfI4QZyO86yn5VXdlJQBJAWW9
zGzlscogAxy4cUZu7+L3k9FD1p5LLhkAsVdnVpMH+rWAIhdK7mFObQ2vtQIDAQAB
o4ICBTCCAgEwHQYDVR0OBBYEFKU8BFRKvJbJ4pG1TxO4HXbyJuSGMB8GA1UdIwQY
MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1
LTM4MjM1NWZjMmZmMS8xL3BUd0VWRXE4bHNuaWtiVlBFN2dkZHZJbTVJWS5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1LTM4MjM1NWZjMmZm
MS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICc+YwDQYJKoZI
hvcNAQELBQADggEBAJBk8cD8g/2RRivf8zzo7fyLDRY8mx4Oz0iEBiXTNnbaXE1m
k0YhToO6fJrq6VvEfEJEuHqXQ3a41qZswomDXLlXNu7x6zthiv+XaCPZ54qckkym
HY2NIqZoihaLv3+yVlKMwDKVfp8fLeD3SAI3KCRAIaaX7fMlx3p0KHpPQ04FlTis
I6naHi+36HvHuNBdw+ad3hhe8dkZpnaVtX20QIYzE+Gb4d4ierI7SpZ/90xH55A8
rryr2xrKDlV1ydKRmTol7qYzg766z9cB2S0eljHznmiFDE2mVwoHDGEMmfy72Qxb
uqnsFvrcM+7lE+wqEvQ0AcFKUJnLYSHZVks4mzM=
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:07 2026 by rpki-client