This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Dj17YO7HbdYhrlszRZcVGHooOSk.asa
File:                     Dj17YO7HbdYhrlszRZcVGHooOSk.asa (raw, json)
Hash identifier:          VPbBekLjuZ5VGctqJAL3rNUq/TMi3GHdtgrxOZNiX2M=
Subject key identifier:   0E:3D:7B:60:EE:C7:6D:D6:21:AE:5B:33:45:97:15:18:7A:28:39:29
Certificate issuer:       /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial:       019B5C9865C51F3EFDB9DA3254479433242D
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Dj17YO7HbdYhrlszRZcVGHooOSk.asa
Signing time:             Fri 26 Dec 2025 21:37:29 +0000
ASPA not before:          Fri 26 Dec 2025 21:37:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215536
Providers:                AS: 211358
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5c:98:65:c5:1f:3e:fd:b9:da:32:54:47:94:33:24:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
        Validity
            Not Before: Dec 26 21:37:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0e3d7b60eec76dd621ae5b33459715187a283929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:95:74:cb:c2:b7:d2:6f:f0:5e:d3:a7:86:
                    10:de:09:86:f5:25:6a:de:f5:f1:89:b0:f6:4c:8a:
                    6d:c8:40:13:70:e4:dc:a0:f8:f4:d5:92:de:2b:a1:
                    f6:05:b9:92:f5:2e:c0:33:bf:b2:42:f7:7d:6a:dd:
                    a0:37:0a:58:18:84:fa:31:b8:90:6e:26:36:03:e4:
                    ab:ef:72:22:62:9a:6e:44:e4:19:db:19:16:ac:52:
                    fd:e6:e4:12:cb:70:36:1a:67:12:cd:89:89:44:cb:
                    de:5d:28:14:ea:98:a5:af:a1:d4:46:08:5a:68:be:
                    ba:c2:07:1e:58:ab:a0:1d:a8:d6:ec:db:83:85:1c:
                    26:ee:ca:22:33:14:b5:96:5c:54:2c:03:ac:3f:ec:
                    be:e0:93:0e:3e:0a:6c:32:b6:19:cc:ed:da:3f:dc:
                    d9:90:d2:da:ae:3f:02:e1:1d:d7:c1:7e:45:b9:86:
                    41:e5:aa:dc:17:bd:d5:04:bd:8f:b8:7f:b0:e0:45:
                    df:62:5b:54:d5:e4:0a:92:a5:b2:9c:97:8a:36:6b:
                    a2:2e:2d:5a:c9:2c:5b:32:79:90:2e:86:36:66:91:
                    91:d1:f3:d0:e5:53:b4:0b:55:87:7d:86:ca:29:ea:
                    49:59:3f:03:1d:f3:db:56:98:0a:c2:17:c4:0a:5a:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3D:7B:60:EE:C7:6D:D6:21:AE:5B:33:45:97:15:18:7A:28:39:29
            X509v3 Authority Key Identifier:
                keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Dj17YO7HbdYhrlszRZcVGHooOSk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215536

    Signature Algorithm: sha256WithRSAEncryption
         cb:ed:98:b0:48:d3:b1:17:1a:4b:32:84:e7:08:b6:f1:fd:5b:
         36:b6:a9:ed:c1:ac:d8:38:72:a0:3c:5c:ce:0c:69:e4:32:28:
         1c:cf:82:82:4b:fe:a0:3f:10:f7:62:d2:f4:65:c7:d0:56:21:
         5a:4f:6d:93:7e:ae:39:79:ae:05:3a:93:c4:5f:17:cc:9e:dc:
         2a:66:c4:ec:bc:0f:e8:7f:2a:ad:98:c9:70:d1:57:6a:67:d4:
         5d:66:b7:71:38:56:3f:76:39:e8:f0:e1:12:c4:bc:4f:91:c2:
         92:c1:99:90:89:25:9b:0b:1d:cf:64:77:67:dd:60:3f:e9:08:
         88:f5:d3:63:9d:60:cb:4b:9d:58:54:a2:75:35:7b:31:42:25:
         43:54:01:ad:10:aa:70:0c:8d:48:3e:dd:17:b7:59:2c:6d:ed:
         0b:bc:0a:b2:d6:1f:ce:fa:36:13:4a:ac:1d:e0:9f:9e:6a:20:
         3f:5a:68:0d:a2:4a:64:6c:2c:31:87:aa:6f:ea:c5:f4:ba:04:
         d4:5d:c7:53:c3:09:6c:82:0a:9a:58:1f:cd:c7:d6:fe:88:4e:
         0d:cb:34:3f:85:3c:c7:05:13:ce:ef:02:72:5d:52:a8:e4:3f:
         ac:fe:14:2f:32:9c:aa:31:b0:6f:c6:e3:cc:35:42:ee:02:20:
         bd:ab:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:40:32 2026 by rpki-client