This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/AES9SB0fhiTGChsZatUC-DRtqc4.asa
File:                     AES9SB0fhiTGChsZatUC-DRtqc4.asa (raw, json)
Hash identifier:          LB2o4rN2W8//ketFHM9+xy88JPNt+Igv051R6Og1/E4=
Subject key identifier:   00:44:BD:48:1D:1F:86:24:C6:0A:1B:19:6A:D5:02:F8:34:6D:A9:CE
Certificate issuer:       /CN=55d25170750c4dbc2717b0c1771c8d8e45472318
Certificate serial:       019BAFD116DA62DD3B41881D7E579E312888
Authority key identifier: 55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/AES9SB0fhiTGChsZatUC-DRtqc4.asa
Signing time:             Mon 12 Jan 2026 01:27:54 +0000
ASPA not before:          Mon 12 Jan 2026 01:27:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203168
Providers:                AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:af:d1:16:da:62:dd:3b:41:88:1d:7e:57:9e:31:28:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d25170750c4dbc2717b0c1771c8d8e45472318
        Validity
            Not Before: Jan 12 01:27:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0044bd481d1f8624c60a1b196ad502f8346da9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:ad:c2:76:6d:ee:a6:22:67:d6:bf:ca:ed:
                    e1:27:5a:3a:9a:93:c6:05:40:9d:4a:5f:50:1b:df:
                    12:25:04:fc:1b:8d:f9:cf:cd:52:5b:12:b4:26:d3:
                    16:c8:6b:40:cf:25:4e:72:99:06:48:ff:93:68:c1:
                    60:03:06:bf:04:dd:a9:cc:1e:64:b6:4c:6b:89:bf:
                    68:77:30:44:8f:86:26:7c:a6:b2:5c:bc:7f:8a:7d:
                    eb:12:14:53:d2:66:64:79:f7:e1:3b:d8:9c:7e:77:
                    d9:11:ed:58:d7:28:c4:d9:b9:7d:4b:d4:ac:9c:30:
                    41:75:9d:d4:2a:98:25:b4:eb:36:08:56:a2:03:10:
                    26:b2:02:51:0e:50:8f:7a:b7:25:ed:ab:79:38:0d:
                    d0:52:a1:2b:1e:ae:0d:87:fb:4d:a7:ab:52:58:3f:
                    00:1c:35:09:e3:2e:9d:de:4f:eb:f2:52:35:bf:fb:
                    b0:32:51:59:d8:5e:14:3c:34:fb:65:a9:c4:82:3d:
                    7f:37:eb:77:d0:b0:79:37:5c:2d:4c:b6:99:55:d2:
                    3f:ff:08:e8:9e:dc:0a:9a:42:e5:de:a0:eb:ed:6c:
                    9f:be:bb:d7:2b:66:00:c7:bf:8e:34:d1:84:5e:43:
                    c8:69:55:ac:d6:12:4a:1c:cb:c4:44:9e:16:34:4e:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:44:BD:48:1D:1F:86:24:C6:0A:1B:19:6A:D5:02:F8:34:6D:A9:CE
            X509v3 Authority Key Identifier:
                keyid:55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/AES9SB0fhiTGChsZatUC-DRtqc4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203168

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:23:3b:73:0f:c4:04:91:ba:0a:92:fc:36:c3:6c:be:f5:
         2d:ce:37:e1:e8:2e:a8:7e:68:02:c9:51:02:7a:25:4a:6b:e2:
         7f:8a:cb:45:90:17:30:09:f8:0c:38:d0:26:1c:f7:ef:0d:da:
         ed:f2:00:b4:4d:f7:17:a5:6c:ce:01:12:39:f8:c3:b8:30:94:
         ba:75:45:77:b6:34:3e:0a:ed:6b:6b:7f:dd:6b:d1:2f:10:d4:
         0b:fb:10:7a:b8:f9:bf:41:f2:4d:70:7e:10:79:4f:d8:31:37:
         d1:3c:4a:00:03:2b:06:4b:ff:db:dc:71:e5:55:aa:af:ec:57:
         1e:07:eb:f6:58:e4:19:c2:84:56:85:fe:8b:d4:28:02:6a:7a:
         73:9d:67:a8:ee:2d:35:fe:ae:9a:83:98:00:37:af:0c:77:07:
         02:88:a2:28:fb:ea:48:68:4a:87:88:41:01:c0:08:7c:bd:ce:
         1c:aa:4e:80:25:54:b6:5b:d4:fa:6c:79:6a:53:a4:89:7b:b9:
         a0:51:26:b7:b3:1c:14:43:2e:28:8e:0e:ae:5d:e0:a4:99:56:
         be:e0:b6:28:b4:ea:74:16:be:3e:3a:d1:a0:0d:eb:e1:e1:ce:
         aa:f0:dd:28:03:3f:1f:ee:0b:2a:51:b5:03:57:89:b3:0b:23:
         70:b4:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:56 2026 by rpki-client