This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/2nUwwPJNj_s9fBPQ7yo03MqL_q4.asa
File:                     2nUwwPJNj_s9fBPQ7yo03MqL_q4.asa (raw, json)
Hash identifier:          CsSUMWf2oxlwJkwV4aRI69KhfP/gEtcH8Nazof9pyiY=
Subject key identifier:   DA:75:30:C0:F2:4D:8F:FB:3D:7C:13:D0:EF:2A:34:DC:CA:8B:FE:AE
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       019BDD872B8FB7BDEDF3CC2189EFD9AEC87F
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/2nUwwPJNj_s9fBPQ7yo03MqL_q4.asa
Signing time:             Tue 20 Jan 2026 22:29:41 +0000
ASPA not before:          Tue 20 Jan 2026 22:29:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203898
Providers:                AS: 1273
                          AS: 2860
                          AS: 8220
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:dd:87:2b:8f:b7:bd:ed:f3:cc:21:89:ef:d9:ae:c8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jan 20 22:29:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da7530c0f24d8ffb3d7c13d0ef2a34dcca8bfeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:74:85:5b:ce:a3:01:4d:ba:21:a4:9e:68:
                    f2:87:b7:f9:30:83:2a:79:a2:48:bd:19:20:a6:2b:
                    73:ab:a4:d7:c3:15:f8:03:2b:32:2e:b7:89:72:ea:
                    3a:a3:14:da:ad:74:ff:76:ed:86:0a:bf:ec:50:cc:
                    de:9a:28:76:5e:22:e5:ce:00:08:ee:0a:c5:f3:61:
                    64:df:8a:90:1d:64:99:e3:cf:47:58:7e:2c:0e:16:
                    40:9b:00:dc:13:7b:bc:88:b3:2a:8f:bb:c6:b5:bb:
                    52:b2:ad:79:d3:64:1b:13:38:52:e8:f9:19:64:4f:
                    e5:59:e5:89:73:dc:97:e6:c2:c5:4a:10:d7:ac:e2:
                    40:48:25:c6:28:95:c1:f4:17:5d:02:59:99:e3:66:
                    8e:f8:cf:6e:b4:9c:ba:bc:3f:c8:88:ac:36:bb:c6:
                    ed:91:06:32:bd:17:f5:d4:0b:76:96:78:c8:d1:b5:
                    11:f6:1e:f8:32:ca:e1:51:8f:00:75:3f:cd:5c:62:
                    ae:31:01:e6:2b:30:52:41:9d:05:21:15:7b:26:12:
                    e5:1a:0f:7e:20:d4:d6:42:3d:b3:81:93:b7:66:48:
                    57:92:96:04:2e:52:39:73:63:40:e0:8c:40:98:d6:
                    82:c2:aa:53:cc:f6:7a:8e:ad:20:cf:8b:c1:54:b1:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:75:30:C0:F2:4D:8F:FB:3D:7C:13:D0:EF:2A:34:DC:CA:8B:FE:AE
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/2nUwwPJNj_s9fBPQ7yo03MqL_q4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203898

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:8a:b0:f5:c5:42:2a:98:c1:6a:7e:bd:6b:d9:10:43:3e:
         5b:74:05:2b:2e:3f:f8:16:d6:a6:8a:14:1e:c6:5c:d8:fe:c4:
         05:bf:75:b7:3c:b2:f3:c4:ad:51:5d:df:9c:d3:72:7e:3d:a4:
         62:c9:54:fa:4e:da:4b:63:a5:e7:f7:dd:6c:2d:1d:ba:df:6e:
         d8:4c:eb:16:4b:5a:bf:fc:b7:d7:4b:1e:12:67:73:8b:ad:81:
         c0:98:50:3b:63:02:4c:74:db:64:cd:1e:65:0e:74:17:21:23:
         5f:af:8e:24:c3:91:1b:52:7b:1b:88:80:22:23:6e:ec:04:f4:
         9c:dc:d7:04:44:4d:76:f8:1e:b1:fe:7d:dd:92:92:6c:a1:93:
         d2:ca:14:52:51:07:65:e9:73:49:76:6c:78:94:96:07:69:fd:
         4e:17:41:1b:73:58:ab:31:19:b3:28:12:b0:bf:03:48:5b:3f:
         ae:22:64:26:bb:0d:52:74:74:5c:86:09:27:68:8c:71:8f:73:
         61:37:0a:32:74:6a:67:55:af:a2:75:26:af:53:31:5a:4e:e5:
         46:46:24:ac:ae:b5:5b:71:0e:21:cf:29:de:14:6b:89:2a:9b:
         cf:84:d5:58:b3:0e:8e:47:3f:4f:dc:9a:f4:62:7c:e3:e0:74:
         eb:4e:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:37 2026 by rpki-client