This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/Je3-dQyZGrjEpidj8pgBzIq8514.asa
File:                     Je3-dQyZGrjEpidj8pgBzIq8514.asa (raw, json)
Hash identifier:          Phq+3kUlN1dLNHjVvwmOmZqN/Lk0LOlZzti0ZU6t6DQ=
Subject key identifier:   25:ED:FE:75:0C:99:1A:B8:C4:A6:27:63:F2:98:01:CC:8A:BC:E7:5E
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       019B985DBD7EBE930618C45C6815DDE9FAE3
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/Je3-dQyZGrjEpidj8pgBzIq8514.asa
Signing time:             Wed 07 Jan 2026 12:10:38 +0000
ASPA not before:          Wed 07 Jan 2026 12:10:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211571
Providers:                AS: 212238
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:98:5d:bd:7e:be:93:06:18:c4:5c:68:15:dd:e9:fa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Jan  7 12:10:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=25edfe750c991ab8c4a62763f29801cc8abce75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:3a:96:84:45:b4:75:d7:58:a3:94:92:d1:
                    70:3b:44:0c:b0:c6:4e:e4:cb:7f:e7:b8:b3:6e:9c:
                    7e:43:44:92:6d:8b:ff:75:fc:ec:d3:08:e5:52:6f:
                    b7:6e:c9:17:8d:44:cc:bb:ad:4f:bd:28:51:d6:78:
                    8e:9c:da:1f:14:ef:6d:4a:bb:d1:be:73:e2:7a:90:
                    7b:74:c5:2f:55:14:53:79:5a:fe:25:dd:67:40:bc:
                    96:58:9d:47:3b:c0:c5:b9:09:46:dd:47:9f:da:97:
                    45:6b:ed:0e:4c:bf:ce:37:75:85:ab:0f:06:ea:de:
                    f5:bb:2e:c2:99:fe:2c:15:28:b6:60:62:08:73:43:
                    0c:de:ce:cc:17:d0:e9:69:92:ec:13:9a:25:1b:b3:
                    7b:f1:7d:6b:ae:2a:35:e7:09:79:45:c5:0f:ea:a6:
                    b3:0c:17:92:80:2b:10:35:09:6e:ae:24:c4:3a:06:
                    33:83:cf:fa:46:9a:43:4c:43:45:5c:aa:b8:a0:55:
                    73:56:f0:f8:1b:75:56:d7:7c:40:41:1b:17:6d:1a:
                    6a:ab:15:31:86:7c:a2:96:d7:2b:3d:1e:5c:13:aa:
                    28:39:f9:6b:60:d4:59:37:49:62:25:a4:3c:d4:0b:
                    a9:11:4b:c3:81:10:3d:44:79:3f:9e:59:d1:6d:94:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:FE:75:0C:99:1A:B8:C4:A6:27:63:F2:98:01:CC:8A:BC:E7:5E
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/Je3-dQyZGrjEpidj8pgBzIq8514.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211571

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:3d:df:22:9d:b0:ee:d2:50:c8:1b:02:5e:14:5b:47:fa:
         f3:ef:e0:7b:a3:fd:75:6b:08:47:b1:e2:82:0d:b1:ef:fa:b1:
         15:26:53:b1:fe:c1:3a:5d:ec:2a:04:b7:3a:46:ba:50:e6:29:
         e1:32:f7:61:5f:88:1d:40:5a:84:27:6f:63:f8:00:73:81:49:
         c3:5c:5b:49:75:9c:3d:9d:bb:49:f0:17:17:0f:a7:a6:33:fe:
         d8:0c:95:eb:a1:e8:b2:ce:7f:a0:0e:9b:8c:e9:5d:9d:c9:41:
         12:fa:0f:47:2f:38:2c:8f:81:ac:db:f2:42:3e:15:66:4b:6c:
         47:c5:d2:14:a7:09:d7:52:df:5c:a7:b2:2d:a0:8d:be:04:88:
         f6:3e:6a:3d:63:6e:9d:73:d6:8f:a2:40:26:a3:5a:0e:6e:d0:
         4e:34:41:1c:9d:c2:7c:50:a6:49:29:5c:85:9f:ac:e9:ae:cc:
         27:03:f0:a0:1b:be:28:64:6e:34:74:50:ef:df:ab:8e:c9:7e:
         0b:87:34:d2:85:a3:f7:df:23:9d:d1:2a:4a:90:bc:46:34:90:
         d8:25:ff:0a:43:5f:a1:d2:ea:29:ea:9f:cd:8f:73:0c:be:32:
         87:5f:0d:ef:21:91:05:18:22:b3:03:fc:81:fa:98:07:26:63:
         37:82:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:03 2026 by rpki-client