This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/lj9BME9ANJ8XxD4qQD5tTVNccsk.asa
File:                     lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (raw, json)
Hash identifier:          SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=
Subject key identifier:   96:3F:41:30:4F:40:34:9F:17:C4:3E:2A:40:3E:6D:4D:53:5C:72:C9
Certificate issuer:       /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial:       019BE6EED5B09587855757EAD69B1FBD356D
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/lj9BME9ANJ8XxD4qQD5tTVNccsk.asa
Signing time:             Thu 22 Jan 2026 18:19:30 +0000
ASPA not before:          Thu 22 Jan 2026 18:19:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211184
Providers:                AS: 34927
                          AS: 47272
                          AS: 47630
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e6:ee:d5:b0:95:87:85:57:57:ea:d6:9b:1f:bd:35:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
        Validity
            Not Before: Jan 22 18:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=963f41304f40349f17c43e2a403e6d4d535c72c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ce:93:1c:76:16:88:03:4e:28:16:9b:2e:13:
                    da:89:d5:a1:a6:b7:73:fb:74:d1:d2:cc:8b:c4:47:
                    a3:f6:c7:fc:29:7e:cc:78:38:0b:cf:99:49:88:b7:
                    ca:04:7d:04:ad:6e:8e:db:05:bf:b3:c1:a1:6e:a8:
                    b2:54:4e:51:c9:43:95:40:09:5a:ce:0a:13:61:73:
                    2e:22:8c:1e:2a:5a:52:2b:60:d8:8c:71:bd:cc:d6:
                    99:54:38:2f:d9:f5:6d:4a:67:6c:80:30:69:eb:50:
                    4d:67:77:78:11:e3:ab:c2:95:b2:52:4a:c9:f9:7d:
                    f3:aa:03:59:ae:38:59:bd:c7:c6:78:d3:cf:11:ad:
                    fd:5e:6a:bc:21:9e:c5:41:2c:34:23:8c:93:72:ab:
                    79:83:34:c0:9a:df:7e:95:d8:74:8d:f7:71:90:ec:
                    a3:99:a9:2d:d1:4c:e0:cc:71:b2:c5:d1:0b:78:63:
                    76:ac:25:1c:ed:1e:5b:dc:43:2c:7b:8c:f0:9e:3f:
                    f7:a7:16:97:46:33:8b:c2:14:21:36:2d:a8:48:cd:
                    51:7f:c6:e9:32:88:d5:ca:b8:52:27:d6:48:a3:af:
                    ae:a7:30:f6:53:04:9a:72:8d:4d:73:6f:f8:d6:f6:
                    cc:db:9c:48:6b:99:c5:52:d6:fa:01:ef:78:e8:a7:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3F:41:30:4F:40:34:9F:17:C4:3E:2A:40:3E:6D:4D:53:5C:72:C9
            X509v3 Authority Key Identifier:
                keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/lj9BME9ANJ8XxD4qQD5tTVNccsk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211184

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:f0:2c:c7:70:71:f8:d1:31:6e:56:0f:45:86:29:58:66:
         78:f0:67:85:4f:23:95:ea:d7:19:f2:98:51:9d:27:20:34:3b:
         0c:f4:e0:0f:ea:10:f3:5e:2a:81:51:84:00:28:55:75:2b:c6:
         d6:cb:0c:89:17:00:7a:1f:36:78:66:69:09:27:76:6e:f7:c7:
         f3:0d:26:ba:c8:23:e2:24:a1:e2:a5:d4:d0:b9:a5:be:71:b2:
         51:cc:e3:31:4d:db:ff:fc:dc:cc:94:30:e4:89:a7:00:3d:cc:
         8e:eb:f3:1f:c5:f7:8a:b8:8c:a2:d1:0e:ff:91:07:5e:8e:73:
         10:8e:75:5a:bb:b3:d8:4e:fb:50:94:2e:15:3f:9e:90:eb:49:
         8b:31:87:4d:0b:a4:0f:6f:d9:d4:a0:07:f4:97:75:43:63:1f:
         72:75:77:00:b8:de:c0:ea:96:c4:c2:53:4a:5a:4b:d5:33:ce:
         5b:8a:a7:59:7c:1a:3f:71:32:3f:5f:ac:cf:31:88:6a:8d:da:
         68:4e:a2:98:96:0e:c7:dd:b8:d1:de:44:03:fd:5b:be:2a:99:
         c0:47:46:c9:a5:90:2b:f1:b3:6e:18:18:71:74:03:22:4b:f6:
         56:74:cc:79:90:2d:44:53:2b:92:5e:ca:26:92:c6:34:10:4c:
         af:c9:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:25:09 2026 by rpki-client