This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/VFigvxiioVp_z41f3Wvp6F5J9nU.asa
File:                     VFigvxiioVp_z41f3Wvp6F5J9nU.asa (raw, json)
Hash identifier:          gCXKzk5x+T9R6DTeXi9kC1UIethWxH5rZC/fh9KZfTo=
Subject key identifier:   54:58:A0:BF:18:A2:A1:5A:7F:CF:8D:5F:DD:6B:E9:E8:5E:49:F6:75
Certificate issuer:       /CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
Certificate serial:       019BDB9F30DE8D436BB33BC83E41BE732695
Authority key identifier: DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/VFigvxiioVp_z41f3Wvp6F5J9nU.asa
Signing time:             Tue 20 Jan 2026 13:36:41 +0000
ASPA not before:          Tue 20 Jan 2026 13:36:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213392
Providers:                AS: 34549
                          AS: 34872
                          AS: 34927
                          AS: 200482
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:db:9f:30:de:8d:43:6b:b3:3b:c8:3e:41:be:73:26:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defb3e95cbba1948bd986a92be6f0f647e6dc6c4
        Validity
            Not Before: Jan 20 13:36:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5458a0bf18a2a15a7fcf8d5fdd6be9e85e49f675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:32:a5:b3:e4:ff:d0:0d:f9:5d:41:ff:32:
                    a8:46:30:d2:7a:52:09:c0:56:b0:63:6f:ca:94:f5:
                    d2:12:d1:e6:e3:c6:17:b1:85:d0:88:f7:9d:22:0b:
                    44:d3:35:20:45:57:16:a3:ff:52:9f:75:e1:cb:89:
                    df:29:ba:66:04:d5:5b:e1:35:a4:8e:d0:93:97:ed:
                    b2:87:6d:f4:b1:cc:c7:4a:75:69:e6:3f:11:6d:7f:
                    49:63:64:2e:50:82:b5:21:95:c6:96:50:7d:d4:98:
                    c7:f9:40:d7:14:3e:a9:5e:7c:24:de:d9:d1:6b:cf:
                    95:b3:85:b6:95:43:8b:f1:5b:86:fb:09:33:fd:ec:
                    53:7c:6f:4b:48:03:22:eb:94:b9:57:60:ce:b8:ef:
                    df:06:cd:b8:70:b9:ec:cc:49:1d:96:44:61:80:46:
                    e7:bc:95:69:99:75:d8:cb:8a:07:2f:4a:a4:81:5e:
                    e8:a6:db:9d:b7:0a:5f:ca:50:57:6f:8c:f8:af:9f:
                    c5:81:7e:d2:30:ee:79:1f:bc:12:33:3e:21:bc:0a:
                    af:c1:45:5c:72:cf:6c:15:c6:d8:16:29:e0:06:80:
                    90:bf:a3:02:a0:07:da:13:6b:1e:f1:e3:eb:30:cf:
                    43:b6:9f:f6:5d:b9:85:1f:54:63:21:34:da:f6:ae:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:A0:BF:18:A2:A1:5A:7F:CF:8D:5F:DD:6B:E9:E8:5E:49:F6:75
            X509v3 Authority Key Identifier:
                keyid:DE:FB:3E:95:CB:BA:19:48:BD:98:6A:92:BE:6F:0F:64:7E:6D:C6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vs-lcu6GUi9mGqSvm8PZH5txsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/VFigvxiioVp_z41f3Wvp6F5J9nU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/3vs-lcu6GUi9mGqSvm8PZH5txsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213392

    Signature Algorithm: sha256WithRSAEncryption
         90:96:ce:ef:a4:c3:a0:05:2a:0d:51:e7:77:78:1c:8a:ce:9e:
         44:d2:4c:82:45:f1:23:7b:80:8e:92:58:74:12:27:fd:2a:35:
         5c:ed:5d:ef:cc:e4:32:35:96:bd:bc:39:e2:20:4f:ee:7d:e8:
         73:d4:65:28:fc:de:c1:c3:1d:43:d5:ef:63:85:81:ca:e6:fb:
         8c:d9:a9:ad:57:50:83:71:1a:47:85:a6:2d:53:db:5f:9c:08:
         ba:65:26:6c:c1:03:db:84:65:ff:f1:a3:d8:c1:56:14:26:6b:
         c1:6e:2c:3d:7f:e9:79:09:e7:68:63:e5:99:1b:2d:db:53:e6:
         3f:dc:b4:9a:b2:54:70:95:71:9e:78:2f:6e:c3:d1:3a:56:59:
         77:31:91:fa:8a:3b:55:71:c8:7e:e3:ed:39:c9:e7:f1:64:89:
         37:3a:81:3e:79:43:5c:ff:6e:b7:83:89:60:da:91:61:9b:5e:
         fa:ad:77:88:80:db:43:c3:5b:4f:d9:a8:95:df:3d:58:7a:1a:
         5b:b9:ae:49:4d:4f:49:92:2c:8e:e1:38:eb:29:3d:6f:57:8d:
         2d:cb:96:9d:7f:88:99:93:5e:4f:d7:88:a6:cc:48:ac:b8:ec:
         93:9d:e8:a7:34:fb:47:ad:ed:86:11:d2:56:1e:8d:3f:9f:54:
         49:4e:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:09:01 2026 by rpki-client