This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa
File:                     qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa (raw, json)
Hash identifier:          +Jw2Q4FKG2QkwU/uXp8CWjul2mV/WblFFkYVNeXAnL8=
Subject key identifier:   A8:E2:89:CC:4B:6A:D8:85:8A:38:A7:20:17:A4:A9:7B:D9:03:38:89
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       019BB2E81AD905C60F0244DB3DC8A1886A6F
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa
Signing time:             Mon 12 Jan 2026 15:51:54 +0000
ASPA not before:          Mon 12 Jan 2026 15:51:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208437
Providers:                AS: 9002
                          AS: 41720
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b2:e8:1a:d9:05:c6:0f:02:44:db:3d:c8:a1:88:6a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: Jan 12 15:51:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a8e289cc4b6ad8858a38a72017a4a97bd9033889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:48:d8:e5:bf:a6:25:5b:c5:3e:ad:04:26:
                    22:9b:f8:0f:03:d9:10:58:32:43:6e:af:bb:16:f6:
                    57:65:f1:11:45:82:70:cc:08:0c:a6:5d:3a:53:40:
                    17:8f:7c:81:aa:ce:8f:e3:b0:c3:9c:b4:5b:ae:92:
                    50:33:9a:6b:bf:23:95:84:67:8c:a2:f2:df:89:0b:
                    6b:03:11:2d:92:81:1e:c0:0e:3d:83:ca:f1:2f:d2:
                    f4:8f:6f:8b:8c:4e:2e:9f:a8:88:36:c8:e0:08:b9:
                    75:28:8e:be:90:13:19:13:f7:d1:34:ef:eb:ef:c7:
                    fb:af:5a:dc:29:45:c9:cf:dd:dc:a4:f2:15:89:73:
                    ca:b5:47:4c:0b:df:8f:54:2c:85:38:5f:07:06:74:
                    ff:c7:1a:ff:49:a5:1c:dc:46:82:04:e9:28:08:8f:
                    87:e7:b1:22:b1:df:0d:75:35:73:2d:69:83:c4:cc:
                    9f:18:96:41:0f:a1:60:14:60:2e:3c:15:d7:5d:11:
                    2c:8d:ae:a2:48:bd:13:43:32:96:66:da:d6:78:6c:
                    01:3a:24:8a:74:a6:8a:5a:dd:74:21:ff:4b:4f:f1:
                    20:77:4d:ac:35:83:8b:6d:6e:06:08:bc:93:0b:68:
                    66:af:91:fc:77:a0:8d:57:6b:d4:8f:95:05:da:89:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E2:89:CC:4B:6A:D8:85:8A:38:A7:20:17:A4:A9:7B:D9:03:38:89
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/qOKJzEtq2IWKOKcgF6Spe9kDOIk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208437

    Signature Algorithm: sha256WithRSAEncryption
         b0:2a:17:94:1c:eb:28:68:ea:69:ec:18:5c:04:48:e7:e5:f5:
         3c:07:1e:94:7f:ab:02:53:65:22:81:d7:51:7c:6d:fd:c9:36:
         cf:7a:76:56:0a:7c:a3:9f:67:e1:1e:b9:ca:ba:7e:69:35:25:
         b2:59:b9:03:dd:ff:71:7d:9f:b0:25:ca:b7:75:73:8e:b2:4d:
         f8:c3:fd:05:05:a3:44:0e:8c:83:55:cd:f4:be:d1:b2:4f:7c:
         38:bf:8c:e8:47:21:66:3b:22:03:4f:3a:bf:f0:67:70:9f:28:
         5a:4a:9e:01:d5:80:df:c0:fc:7d:16:ef:33:0f:6c:48:62:b4:
         0b:40:4d:86:ff:c4:1b:2a:7a:55:88:8b:b6:f7:fe:2b:22:37:
         63:70:8b:93:f1:ca:d2:28:0a:c8:0a:02:db:83:c6:a0:61:b3:
         46:35:40:f1:3d:bb:ee:26:53:93:7c:cf:cc:6e:74:14:ff:c6:
         37:e0:9c:e8:b6:b3:39:3d:36:9e:8c:30:c1:8f:74:54:24:fe:
         69:dd:ab:56:ee:82:1e:df:84:bf:56:2d:55:25:50:e3:eb:f6:
         87:e8:45:c0:9d:76:ed:b4:19:48:07:bd:62:26:18:cc:48:37:
         b4:a1:83:e7:db:77:5c:b0:1e:d2:15:22:22:64:30:8b:8a:ef:
         44:40:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:08:29 2026 by rpki-client