This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/_d50tgZOaaHxAsvsHHjmYCktf-E.asa
File:                     _d50tgZOaaHxAsvsHHjmYCktf-E.asa (raw, json)
Hash identifier:          OHNXsl9BXwPqg9JQv0/mmVOU1cOIGA7WbshHHxiswuM=
Subject key identifier:   FD:DE:74:B6:06:4E:69:A1:F1:02:CB:EC:1C:78:E6:60:29:2D:7F:E1
Certificate issuer:       /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial:       019BB3810016547C8DC58BABD7CDA2EFADAE
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/_d50tgZOaaHxAsvsHHjmYCktf-E.asa
Signing time:             Mon 12 Jan 2026 18:38:54 +0000
ASPA not before:          Mon 12 Jan 2026 18:38:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212234
Providers:                AS: 50338
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b3:81:00:16:54:7c:8d:c5:8b:ab:d7:cd:a2:ef:ad:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
        Validity
            Not Before: Jan 12 18:38:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fdde74b6064e69a1f102cbec1c78e660292d7fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:8c:9d:f6:9e:0b:38:c6:60:09:d4:8c:b3:
                    54:b2:67:f2:f8:12:e6:a2:63:05:b4:00:97:1d:31:
                    89:fe:23:ba:8d:ca:d8:cf:1d:80:c8:64:93:07:f9:
                    48:f4:f1:29:2a:a8:c3:58:cc:a4:08:15:36:89:57:
                    e0:13:22:0a:26:78:e2:44:49:3d:5d:ef:6d:11:ea:
                    9b:3a:55:b3:f4:56:38:f9:68:be:21:cc:85:e6:d4:
                    29:60:47:29:6d:bb:4a:a0:0d:88:6e:80:8a:38:80:
                    a3:52:20:e9:a9:7d:ec:4b:21:52:d0:7f:68:d1:3f:
                    03:dd:63:01:4f:3b:42:db:21:97:2d:30:df:a5:3e:
                    69:ca:82:7b:76:30:50:81:85:64:6b:8f:3d:4f:b0:
                    5a:5d:8c:b9:c3:56:70:24:ad:c1:67:2b:29:81:62:
                    90:2a:2c:5d:fa:f2:0f:6a:12:74:53:5d:9a:97:9f:
                    40:c4:de:cb:ad:9f:e9:9f:58:87:9d:cf:f6:2a:85:
                    8b:1c:22:9e:b1:83:00:60:0b:41:c1:86:b0:d5:01:
                    49:66:46:67:f5:f9:e8:15:c4:e1:f5:58:d6:d6:3d:
                    54:41:f2:4d:78:0e:0e:03:41:0e:c9:45:29:0b:b1:
                    7d:a5:b7:18:13:e7:b8:ab:3d:93:7d:be:6e:11:d0:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:74:B6:06:4E:69:A1:F1:02:CB:EC:1C:78:E6:60:29:2D:7F:E1
            X509v3 Authority Key Identifier:
                keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/_d50tgZOaaHxAsvsHHjmYCktf-E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212234

    Signature Algorithm: sha256WithRSAEncryption
         c5:b9:7e:92:c9:04:38:89:f8:4c:c7:71:cc:f6:b6:f4:b2:82:
         e8:7a:ab:7b:cb:f1:73:c4:b5:59:d5:b4:79:99:66:5a:19:05:
         96:95:00:e9:d9:6a:c5:4e:2c:dd:c3:26:b0:ab:10:b7:1e:ad:
         2f:29:b1:23:a3:f4:77:d2:5e:c4:34:39:3a:5a:0a:a9:dc:ed:
         33:cc:e3:48:e7:d3:9c:18:4f:a3:1c:20:7c:77:11:a5:19:24:
         e9:27:fa:99:05:0a:65:04:c0:e4:c3:76:5e:02:5d:89:ce:44:
         c7:e4:05:86:4b:26:9f:bd:38:86:e6:c5:88:66:57:8b:f1:40:
         b2:b1:6d:ed:48:29:73:e6:23:4d:df:40:87:3a:39:ac:62:c5:
         de:56:45:07:87:c5:37:8e:f6:cd:ed:89:81:8e:d7:99:dc:eb:
         f5:33:10:c7:de:06:4d:ea:01:03:98:96:2f:e3:d2:8a:b9:6b:
         50:1f:25:1e:e2:79:98:50:be:ee:d3:37:be:a5:48:0c:64:31:
         e0:6f:ec:88:bb:b4:58:66:9e:3f:83:c2:bb:12:c1:32:dd:14:
         a1:8c:c0:3d:19:07:db:03:d0:7f:4d:bc:eb:76:f4:6f:b7:d4:
         b8:1e:31:c3:fe:83:1d:08:da:1e:67:88:1f:16:d1:5c:9f:c1:
         cd:f3:a9:b6
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZuzgQAWVHyNxYur182i762uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2JiYzgxNzk2MTUxOWNhNWEzMThlODRlNzVhZDliYjNk
Y2M3ZTYwHhcNMjYwMTEyMTgzODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGRlNzRiNjA2NGU2OWExZjEwMmNiZWMxYzc4ZTY2MDI5MmQ3ZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpOMnfaeCzjGYAnUjLNUsmfy+BLm
omMFtACXHTGJ/iO6jcrYzx2AyGSTB/lI9PEpKqjDWMykCBU2iVfgEyIKJnjiREk9
Xe9tEeqbOlWz9FY4+Wi+IcyF5tQpYEcpbbtKoA2IboCKOICjUiDpqX3sSyFS0H9o
0T8D3WMBTztC2yGXLTDfpT5pyoJ7djBQgYVka489T7BaXYy5w1ZwJK3BZyspgWKQ
Kixd+vIPahJ0U12al59AxN7LrZ/pn1iHnc/2KoWLHCKesYMAYAtBwYaw1QFJZkZn
9fnoFcTh9VjW1j1UQfJNeA4OA0EOyUUpC7F9pbcYE+e4qz2Tfb5uEdD8gQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFP3edLYGTmmh8QLL7Bx45mApLX/hMB8GA1UdIwQY
MBaAFAA7vIF5YVGcpaMY6E51rZuz3MfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTkt
MTQyMWQ3YzU0ZmE1LzEvX2Q1MHRnWk9hYUh4QXN2c0hIam1ZQ2t0Zi1FLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTktMTQyMWQ3YzU0ZmE1
LzEvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM9CjANBgkqhkiG
9w0BAQsFAAOCAQEAxbl+kskEOIn4TMdxzPa29LKC6Hqre8vxc8S1WdW0eZlmWhkF
lpUA6dlqxU4s3cMmsKsQtx6tLymxI6P0d9JexDQ5OloKqdztM8zjSOfTnBhPoxwg
fHcRpRkk6Sf6mQUKZQTA5MN2XgJdic5Ex+QFhksmn704hubFiGZXi/FAsrFt7Ugp
c+YjTd9Ahzo5rGLF3lZFB4fFN472ze2JgY7Xmdzr9TMQx94GTeoBA5iWL+PSirlr
UB8lHuJ5mFC+7tM3vqVIDGQx4G/siLu0WGaeP4PCuxLBMt0UoYzAPRkH2wPQf028
63b0b7fUuB4xw/6DHQjaHmeIHxbRXJ/BzfOptg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:37 2026 by rpki-client