This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/2VmhrnY1R-y6rxXotPMotrQDcR8.asa
File:                     2VmhrnY1R-y6rxXotPMotrQDcR8.asa (raw, json)
Hash identifier:          Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=
Subject key identifier:   D9:59:A1:AE:76:35:47:EC:BA:AF:15:E8:B4:F3:28:B6:B4:03:71:1F
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       019BD930A153FB2DD886D57BD39620D3C9C7
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/2VmhrnY1R-y6rxXotPMotrQDcR8.asa
Signing time:             Tue 20 Jan 2026 02:16:41 +0000
ASPA not before:          Tue 20 Jan 2026 02:16:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205610
Providers:                AS: 6939
                          AS: 10111
                          AS: 20473
                          AS: 38008
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d9:30:a1:53:fb:2d:d8:86:d5:7b:d3:96:20:d3:c9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Jan 20 02:16:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d959a1ae763547ecbaaf15e8b4f328b6b403711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:35:0f:9c:d0:1f:77:ba:31:de:02:0f:cb:
                    97:97:e1:22:2f:19:0c:11:55:1c:c1:8a:bb:de:7a:
                    f1:e1:62:ae:d0:34:02:60:05:e8:c6:b8:cd:6c:46:
                    d6:aa:5f:9a:e9:6f:0f:73:9a:60:e3:fe:f6:7d:ac:
                    1d:b9:ea:2f:92:fb:6d:57:3a:7f:c4:11:b2:f0:7a:
                    38:71:c1:72:3d:06:ba:11:83:e7:04:5b:06:18:a4:
                    0a:a9:60:ea:17:fa:95:6e:b1:99:16:38:ef:94:cb:
                    56:cf:8b:26:c0:7b:5a:c4:00:32:02:92:42:ce:37:
                    91:2f:65:c4:67:ed:03:23:ee:64:27:8a:e5:99:39:
                    56:4b:04:69:45:09:1f:f4:29:2c:06:02:77:90:31:
                    62:fe:1f:d4:78:1e:c1:fa:57:42:1e:ec:6c:b6:fe:
                    55:a4:36:33:67:4d:d1:80:84:a7:7f:5a:c1:3c:e8:
                    ea:b2:1d:a6:41:5f:c4:5c:5c:b9:a3:56:58:22:8c:
                    6c:3d:54:82:b7:55:00:35:ff:3c:30:dc:ba:a6:b2:
                    16:80:2c:ad:76:de:67:98:be:4b:d0:e1:08:3c:ba:
                    66:82:ef:1e:34:49:b7:e7:91:87:7e:fb:df:ae:9b:
                    b2:42:c9:bf:a9:b2:ff:45:55:db:0a:7b:ae:a1:3a:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:59:A1:AE:76:35:47:EC:BA:AF:15:E8:B4:F3:28:B6:B4:03:71:1F
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/2VmhrnY1R-y6rxXotPMotrQDcR8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205610

    Signature Algorithm: sha256WithRSAEncryption
         47:87:fe:bc:eb:4f:06:48:39:6e:d3:f8:0c:55:d2:1b:1f:ed:
         40:d1:61:fd:75:31:5b:cc:2e:36:7d:43:23:c3:75:63:6c:0c:
         e9:29:23:34:29:6d:38:1a:b6:8c:5d:cf:eb:cd:b4:e2:e4:17:
         14:eb:39:84:43:e0:0a:3f:3e:9f:34:9e:50:89:88:2e:64:bb:
         84:c7:76:36:87:d1:b5:22:b5:be:4a:29:4b:8e:57:ff:44:bd:
         c9:ed:92:a6:35:07:94:3c:9e:61:bb:c3:5e:dd:da:a8:96:a9:
         e2:26:c0:8f:0e:89:fe:df:6c:09:1b:66:ed:09:e2:b7:be:fe:
         16:2c:cb:15:43:2a:61:90:a8:8f:f6:49:8e:4e:65:6c:f9:2d:
         b7:8d:02:82:82:8c:8e:7c:d5:a6:f3:a3:f1:2d:c3:5e:ff:86:
         fc:a0:05:89:53:15:01:6c:4a:f4:45:04:99:05:f6:f5:31:1f:
         fc:33:5b:6d:02:30:b5:0e:22:fb:4b:b0:35:23:f6:d8:af:65:
         52:29:cc:eb:f2:a6:d5:e9:1b:5d:72:11:82:2d:2e:1b:55:0f:
         16:21:e4:45:fb:b5:3f:80:bb:a2:8e:e4:b1:94:0a:18:30:ff:
         65:bd:c9:07:00:51:5c:25:4c:7a:c8:67:dd:7d:84:64:31:31:
         09:a1:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:42:44 2026 by rpki-client