This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/qMkdURgl5v8iVuM-fHHXRCMHBok.asa
File:                     qMkdURgl5v8iVuM-fHHXRCMHBok.asa (raw, json)
Hash identifier:          KT0x4APoSA9EBXsj4uU5Mno2FoqnMrb2Le5rpuVOb0U=
Subject key identifier:   A8:C9:1D:51:18:25:E6:FF:22:56:E3:3E:7C:71:D7:44:23:07:06:89
Certificate issuer:       /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial:       019BB33518176E9AE341C5D4062BBDAD76B6
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/qMkdURgl5v8iVuM-fHHXRCMHBok.asa
Signing time:             Mon 12 Jan 2026 17:15:59 +0000
ASPA not before:          Mon 12 Jan 2026 17:15:59 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210329
Providers:                AS: 174
                          AS: 3257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b3:35:18:17:6e:9a:e3:41:c5:d4:06:2b:bd:ad:76:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
        Validity
            Not Before: Jan 12 17:15:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a8c91d511825e6ff2256e33e7c71d74423070689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:12:d7:0d:62:ce:27:e5:cd:75:ba:f9:0a:
                    f4:ed:97:af:08:54:82:95:ad:5e:b6:57:20:37:ae:
                    c1:b7:96:88:71:29:cd:7a:f0:ca:bc:a4:6b:ce:85:
                    da:a1:3a:13:67:06:8b:0a:98:1f:35:80:39:27:fc:
                    88:f0:d5:6f:48:28:69:13:76:da:f0:59:ff:d2:d3:
                    31:a2:1a:df:60:60:28:64:4f:24:0a:7f:97:94:26:
                    7f:ed:8b:d1:2c:da:3e:4f:2c:bf:74:60:e4:77:93:
                    4d:f2:5d:e6:b5:a5:9c:c5:a5:0a:08:ff:41:16:51:
                    c7:97:b3:c7:c5:f4:d6:34:ea:7a:40:b1:44:d6:7d:
                    55:0a:c0:e9:45:c6:f2:46:64:82:df:ba:f7:13:78:
                    00:a8:e2:69:1b:1b:bb:33:d1:8a:ee:50:6e:9c:de:
                    3a:3c:62:b7:59:5f:21:2d:7c:20:f7:bb:05:d6:bc:
                    93:13:34:43:9f:37:13:cc:54:b6:ac:fe:6f:db:bf:
                    02:3a:d0:b0:56:2a:20:f0:00:9f:6f:5f:ed:c8:90:
                    a6:8f:23:ef:a4:9a:e0:61:dd:36:47:66:16:3e:65:
                    f4:ee:b9:65:18:61:9f:d7:07:3f:34:df:e1:86:f8:
                    bc:ca:b0:03:1f:e5:92:6b:b6:9a:cb:eb:61:a4:c1:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C9:1D:51:18:25:E6:FF:22:56:E3:3E:7C:71:D7:44:23:07:06:89
            X509v3 Authority Key Identifier:
                keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/qMkdURgl5v8iVuM-fHHXRCMHBok.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210329

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:72:4f:8c:c3:7d:2c:94:81:08:30:cc:16:87:78:14:de:
         2d:7c:ac:6e:c9:29:e6:06:a0:fb:b9:63:8f:74:bd:84:c9:46:
         4d:02:8c:e7:85:0e:cd:8e:2e:03:d5:a0:23:6b:7b:db:6a:cc:
         74:d9:3e:a0:ad:e8:90:95:7d:8e:a9:6c:2b:46:01:31:97:e9:
         dc:41:cb:f1:05:6d:c2:9a:c4:b8:cd:91:55:1a:5d:71:3a:50:
         60:d7:9e:77:d9:f1:50:e3:8c:d1:06:a6:0f:3d:d3:f3:c4:d9:
         0c:08:79:03:69:65:fa:fe:75:ca:c6:45:5b:c5:f1:d2:38:f2:
         53:f4:96:99:db:fa:14:be:e7:e7:f6:40:68:ad:a0:f0:f3:59:
         9a:81:f1:8f:9b:1f:76:1c:fb:e3:02:5b:52:87:93:9d:9b:eb:
         7d:5e:db:6d:f4:d1:40:93:09:02:3f:25:25:d2:81:17:7a:d7:
         b8:79:bc:64:0d:92:fd:59:f2:88:10:49:a1:ce:3a:18:33:64:
         2a:f8:74:f7:31:e0:60:e9:ae:87:69:64:0f:02:4f:fd:d3:ce:
         1c:78:b3:4c:1e:22:b6:54:ac:db:f8:27:65:68:1f:30:a1:55:
         20:3c:e8:88:fb:b6:77:88:8d:62:71:30:38:90:f0:0c:2e:38:
         df:b5:2d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:09 2026 by rpki-client