This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa
File:                     FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (raw, json)
Hash identifier:          glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=
Subject key identifier:   15:9C:34:A6:0A:6A:97:34:F9:5F:27:88:B3:B3:C5:A0:66:05:C0:50
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019BBCB99AEF20DA4DD58854698416DD79E3
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa
Signing time:             Wed 14 Jan 2026 13:37:18 +0000
ASPA not before:          Wed 14 Jan 2026 13:37:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            2602
Providers:                AS: 6661
                          AS: 20965
                          AS: 21320
                          AS: 56665
                          AS: 208374
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bc:b9:9a:ef:20:da:4d:d5:88:54:69:84:16:dd:79:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jan 14 13:37:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=159c34a60a6a9734f95f2788b3b3c5a06605c050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:a7:5c:e3:b5:0e:63:6a:af:26:99:28:32:
                    80:b5:8e:d2:ad:77:86:27:75:37:ac:f7:c2:2a:f6:
                    54:11:3c:e7:05:28:94:c1:af:9d:02:96:7d:5a:f6:
                    9b:8e:74:ec:70:20:eb:c8:57:b3:4b:8e:e6:a5:1f:
                    a9:de:0f:68:de:33:ae:86:91:a3:99:18:40:59:16:
                    8e:d3:a0:3b:08:40:f8:01:6d:bb:fd:96:e3:84:7e:
                    c8:38:a3:e4:0a:cc:01:23:05:ed:8c:8e:09:17:87:
                    9c:98:69:10:99:58:cf:9f:46:d2:ba:f3:07:36:cc:
                    e9:35:c6:ac:91:3d:0c:48:c2:83:f1:d4:04:fd:cb:
                    06:74:fa:85:00:7e:b0:bd:1b:fa:99:17:5c:75:8d:
                    3c:52:77:fd:ee:c5:bd:b2:25:77:0b:5b:1c:80:02:
                    82:cb:09:90:88:13:35:1b:7d:9a:91:f0:0b:25:64:
                    3d:26:2e:d9:cf:7b:c6:e6:f9:d9:a1:17:f2:8f:9b:
                    39:2f:6d:80:c4:7c:47:28:ef:42:48:c5:5c:e5:0d:
                    df:ef:f1:31:db:d0:80:1d:c9:db:8b:b2:05:40:77:
                    6e:37:46:b8:e8:0f:7f:9c:7f:06:96:07:f0:18:da:
                    fb:5e:09:25:27:62:01:e9:1a:4f:a6:40:1f:ab:94:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9C:34:A6:0A:6A:97:34:F9:5F:27:88:B3:B3:C5:A0:66:05:C0:50
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2602

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:57:21:bc:78:07:06:e9:ad:c3:0a:1d:6e:88:5c:c0:74:
         a5:72:63:54:92:b4:d3:e6:b5:fd:33:40:ed:13:54:3c:e8:dc:
         28:f1:6e:75:67:a3:37:62:0d:44:eb:c5:bb:37:04:bf:7e:9a:
         1d:0f:f5:e6:fe:33:34:43:6c:91:8c:0e:48:23:16:d7:64:cd:
         7e:32:05:c4:17:86:99:a4:52:94:52:b5:69:12:fe:92:46:66:
         4a:c3:69:71:ed:94:ca:90:8e:f8:3a:ad:aa:fc:ba:96:73:09:
         12:c6:22:bd:18:6c:9c:68:e6:9d:61:62:2e:c6:9a:7b:42:af:
         f3:5c:e9:5d:24:63:3b:6b:8b:72:2a:f3:6d:c8:eb:33:02:a1:
         4d:17:87:d7:b3:d4:e3:b4:22:ae:ee:db:97:34:4c:aa:2e:8c:
         82:d1:0f:84:57:4d:e5:77:af:bf:02:00:86:ca:87:5a:a6:f4:
         07:c2:c0:3e:79:78:b4:1f:e7:fe:56:fa:a3:22:06:8b:66:7d:
         ea:88:8b:9b:fb:ad:ec:97:ea:a8:cf:04:f3:ab:66:83:d0:7d:
         1a:fa:3c:4b:45:8b:c2:1a:60:85:38:77:cb:5a:3f:ab:f2:5d:
         b9:f6:5e:05:82:29:c9:18:42:25:aa:93:47:c1:d2:f1:e0:fc:
         fb:4c:a8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:41:58 2026 by rpki-client