This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa
File:                     Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa (raw, json)
Hash identifier:          w5DoIaMOdhrQzX31C6GNjSJG7G7L2zsb0JalX8bgFEE=
Subject key identifier:   0A:2F:E3:A1:AA:06:77:E3:62:29:D2:8D:FB:14:A5:1D:96:47:8E:C5
Certificate issuer:       /CN=6290e6b0cdd7f4986be518d890a8493153504eda
Certificate serial:       019BC785DD0F60D9145DF3154CD6E1845109
Authority key identifier: 62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa
Signing time:             Fri 16 Jan 2026 15:56:37 +0000
ASPA not before:          Fri 16 Jan 2026 15:56:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202141
Providers:                AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c7:85:dd:0f:60:d9:14:5d:f3:15:4c:d6:e1:84:51:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6290e6b0cdd7f4986be518d890a8493153504eda
        Validity
            Not Before: Jan 16 15:56:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a2fe3a1aa0677e36229d28dfb14a51d96478ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:10:1e:da:3c:45:66:04:49:9d:7a:e0:db:ba:
                    9e:4f:e2:48:c8:4d:7e:9d:d4:cc:30:07:fb:aa:5b:
                    cd:c4:2b:a0:ca:8f:0c:cb:69:67:dd:3d:2f:55:4c:
                    2f:6f:51:9c:2c:5b:91:9e:8b:c0:b8:d6:84:c4:49:
                    b7:a3:c6:7c:b1:c5:82:26:e7:41:4f:b4:75:9e:5b:
                    60:ec:d1:7e:0f:1e:e9:d2:62:2b:f5:e3:a6:b1:b7:
                    55:96:e0:86:0f:68:41:05:a1:43:53:65:ee:01:18:
                    7c:c5:d1:11:5d:c8:5b:e4:e2:f3:76:0b:0b:bf:82:
                    5c:75:c0:b0:40:c4:75:93:7d:c9:f9:7a:ef:71:7d:
                    02:62:f6:3f:34:55:a7:dd:f1:f6:23:67:3d:46:f8:
                    13:ad:a7:32:17:b4:d5:a8:ae:bd:5c:38:98:76:02:
                    7f:b1:01:93:24:e6:78:b0:b5:97:b5:9c:7b:9b:22:
                    e3:ed:cc:f5:44:12:97:45:d6:e6:35:13:4b:f1:49:
                    60:80:6e:80:2f:17:f9:13:89:b4:a8:ab:94:ad:f7:
                    5b:2d:9d:fd:b3:16:5e:39:f7:9c:0e:c6:ab:33:1d:
                    bb:cf:cd:e3:a2:d9:df:f7:8f:ab:c4:9c:0d:6a:a3:
                    1b:ea:f8:d7:c2:4c:8f:46:38:45:2a:3c:4b:0a:c4:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:E3:A1:AA:06:77:E3:62:29:D2:8D:FB:14:A5:1D:96:47:8E:C5
            X509v3 Authority Key Identifier:
                keyid:62:90:E6:B0:CD:D7:F4:98:6B:E5:18:D8:90:A8:49:31:53:50:4E:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpDmsM3X9Jhr5RjYkKhJMVNQTto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/Ci_joaoGd-NiKdKN-xSlHZZHjsU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/58dc53-8188-4e5a-8a6e-a766829706d5/1/YpDmsM3X9Jhr5RjYkKhJMVNQTto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202141

    Signature Algorithm: sha256WithRSAEncryption
         1a:39:11:cb:3a:d9:df:f7:63:75:47:05:21:1b:85:13:38:59:
         21:77:20:b6:22:ba:63:83:d6:8b:f0:b8:5f:3e:93:0e:4e:6f:
         4f:b7:d7:10:0d:a8:37:f4:07:aa:d7:3d:84:28:f3:7f:b1:05:
         5b:fb:bb:aa:e0:79:70:75:45:b1:f5:6e:c3:bd:20:a2:11:75:
         ba:79:03:bc:e1:56:2e:43:e1:1c:de:f7:6f:12:f0:d8:50:ea:
         dc:51:64:ef:39:0b:38:aa:92:6d:4f:b0:66:8c:5c:a3:a9:e8:
         d1:30:e6:44:54:b4:6a:2f:80:e0:00:4b:e7:98:01:24:54:79:
         ae:7e:28:2a:e7:fd:4b:8b:80:85:e7:91:3d:27:93:63:68:d3:
         9d:b4:2a:3d:80:77:15:9a:84:5e:49:f7:ad:5d:9d:f1:51:56:
         ad:c2:f0:d4:d3:cd:3a:54:fe:6f:92:ec:55:e8:63:fc:cf:d4:
         73:ef:fb:82:4b:1e:0b:28:6d:c6:ed:af:39:a0:11:91:30:46:
         4f:9f:dd:b1:50:3a:02:21:47:3a:42:c9:75:97:e4:12:82:51:
         41:33:2d:d3:e5:00:46:36:4c:3c:4b:f3:2d:42:ce:92:95:a9:
         36:0d:ba:7a:b0:68:79:2a:de:a8:76:df:1b:5e:b2:86:21:86:
         84:2c:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:32 2026 by rpki-client