This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/PoLelpD-vVDObA3W9X1DRy702_k.asa
File:                     PoLelpD-vVDObA3W9X1DRy702_k.asa (raw, json)
Hash identifier:          e7MjmkNoRQMHb7S+T625PuqQTwQ+g2DvsNKCC/z7lSM=
Subject key identifier:   3E:82:DE:96:90:FE:BD:50:CE:6C:0D:D6:F5:7D:43:47:2E:F4:DB:F9
Certificate issuer:       /CN=55d25170750c4dbc2717b0c1771c8d8e45472318
Certificate serial:       019BE41D65E432E0CD219B27FD4934D55F6D
Authority key identifier: 55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/PoLelpD-vVDObA3W9X1DRy702_k.asa
Signing time:             Thu 22 Jan 2026 05:11:30 +0000
ASPA not before:          Thu 22 Jan 2026 05:11:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215172
Providers:                AS: 6939
                          AS: 7720
                          AS: 34927
                          AS: 44324
                          AS: 53356
                          AS: 154185
                          AS: 199310
                          AS: 206216
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e4:1d:65:e4:32:e0:cd:21:9b:27:fd:49:34:d5:5f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d25170750c4dbc2717b0c1771c8d8e45472318
        Validity
            Not Before: Jan 22 05:11:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e82de9690febd50ce6c0dd6f57d43472ef4dbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:ba:34:1e:bb:95:20:0d:12:1f:ab:7b:3f:
                    9f:54:37:33:db:96:35:7b:7a:ee:7f:2b:ee:00:cb:
                    a9:dd:5b:3c:c1:2e:82:2a:7a:fb:f5:43:f3:48:08:
                    cc:8e:b4:2e:72:39:0b:4a:55:ef:8e:9a:0b:68:c1:
                    61:eb:45:37:d2:84:d8:f6:f8:78:04:08:65:d7:d1:
                    46:29:99:66:23:0e:63:c3:02:04:9c:99:18:50:bd:
                    d2:ca:ce:e2:bd:c6:e6:01:74:c1:bd:5d:77:a1:a7:
                    ae:44:b9:9b:0a:48:97:bc:68:17:2b:2a:80:1c:21:
                    8a:b9:c3:34:80:e4:7b:e1:55:a5:2b:56:a3:60:8e:
                    b9:24:1f:ee:b6:77:9d:25:b1:df:18:c4:71:d4:90:
                    11:dd:c0:79:45:7e:fa:be:54:2c:21:1a:b7:85:3b:
                    78:f6:98:b2:b8:73:52:e9:0f:26:ee:70:cd:9e:29:
                    d2:cf:21:87:06:de:22:8a:76:7a:65:42:38:15:bf:
                    c4:16:cf:28:bc:f5:99:74:1b:1c:e9:fd:2f:21:78:
                    a5:88:28:45:d7:c8:11:ee:e9:dd:2f:2f:29:c7:bd:
                    f8:e7:c8:b9:ef:34:ab:8c:1a:02:40:dd:75:7c:6f:
                    c9:2d:bb:0a:bb:8c:75:5f:db:ff:74:0a:45:58:db:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:82:DE:96:90:FE:BD:50:CE:6C:0D:D6:F5:7D:43:47:2E:F4:DB:F9
            X509v3 Authority Key Identifier:
                keyid:55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/PoLelpD-vVDObA3W9X1DRy702_k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215172

    Signature Algorithm: sha256WithRSAEncryption
         21:71:a3:8f:42:3d:d5:2d:07:9f:99:d5:ea:ef:c2:b9:8a:e8:
         92:d7:da:e9:5c:1c:79:71:47:16:30:15:dc:36:d6:dc:f7:38:
         8c:b9:17:65:bc:87:3d:7e:9f:7d:6d:9f:b5:17:12:ef:98:39:
         1c:ac:aa:40:e7:18:e0:bb:97:e0:12:1d:8b:0f:2e:48:d2:17:
         07:d1:b0:71:75:87:76:bf:b9:73:df:32:b6:91:0b:6d:ac:34:
         31:9c:23:fe:02:3a:33:09:0d:92:29:5c:05:98:cb:83:54:e9:
         d3:d6:04:eb:2e:c0:a0:1d:8b:d3:08:1e:2c:78:cf:8a:03:f9:
         ec:6e:94:69:17:1c:69:25:b3:96:f5:90:13:c9:78:8c:95:d5:
         c9:25:c4:e9:fc:80:c5:64:a5:d2:a0:81:3a:8e:38:33:c4:7b:
         00:74:12:3b:82:d2:58:29:c9:be:16:4f:df:43:20:a5:14:41:
         53:9e:bb:b8:10:07:c9:97:71:27:3a:ff:49:50:57:25:1a:11:
         9d:21:7c:98:67:4a:b0:e8:e8:09:c3:a3:36:3c:06:41:d7:46:
         c9:e6:49:61:9d:03:63:59:43:a9:0d:f0:0c:41:a7:3b:8a:37:
         8a:0e:d7:86:c0:4b:48:30:cd:2e:2d:ac:87:e0:56:b0:5e:4e:
         09:8b:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:50 2026 by rpki-client