This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/V34l5uFzYw3kKb1sTTfoMorRyxQ.asa
File:                     V34l5uFzYw3kKb1sTTfoMorRyxQ.asa (raw, json)
Hash identifier:          MTaS52CxVyh3Tkcvp3/p/Y0eCYEdwzDZPEbKIi5PiFI=
Subject key identifier:   57:7E:25:E6:E1:73:63:0D:E4:29:BD:6C:4D:37:E8:32:8A:D1:CB:14
Certificate issuer:       /CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
Certificate serial:       019BEC2E37DEC5E24413E7DC5BD664EA0FCA
Authority key identifier: 82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/V34l5uFzYw3kKb1sTTfoMorRyxQ.asa
Signing time:             Fri 23 Jan 2026 18:46:50 +0000
ASPA not before:          Fri 23 Jan 2026 18:46:50 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212701
Providers:                AS: 49418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ec:2e:37:de:c5:e2:44:13:e7:dc:5b:d6:64:ea:0f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823c0c5f5dfe53db3be0daa87eb80ff233a08555
        Validity
            Not Before: Jan 23 18:46:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=577e25e6e173630de429bd6c4d37e8328ad1cb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:b0:b4:29:0a:c0:05:14:ac:a5:b1:6b:39:
                    96:d1:76:d3:db:c0:4d:a0:5a:91:a8:ed:53:b5:ed:
                    56:76:ea:89:75:f3:74:d3:c0:75:d3:7a:3d:f7:bd:
                    c9:85:02:1d:ce:9a:3d:96:3f:7a:c4:f8:a4:b4:7c:
                    35:02:a5:c6:cc:e8:49:fe:0e:0e:60:22:4d:2e:3b:
                    15:fb:62:ef:b0:57:95:a6:0b:a9:3f:b2:16:e7:e8:
                    06:a0:4c:1b:7e:1f:d6:32:f2:ab:45:c1:dc:eb:3f:
                    61:20:78:80:3a:e1:a2:54:96:75:27:58:a8:9f:6d:
                    c5:d9:78:2c:cd:24:36:e8:57:8b:c3:de:8a:77:73:
                    6b:52:e0:b9:ff:7f:e2:fb:4a:18:72:5a:83:12:81:
                    e8:69:e4:8a:a3:44:db:b5:e0:18:4f:98:25:61:9e:
                    8a:f8:2a:d7:da:ad:b9:2f:77:d6:22:0a:73:e9:85:
                    77:5a:85:f7:f9:9e:c1:9e:2a:92:07:ea:d3:d7:94:
                    9c:b9:88:41:94:ae:df:92:b7:63:13:8b:28:00:f4:
                    87:d2:6d:ae:27:1d:65:83:9d:ce:dc:62:1d:51:84:
                    e7:ba:34:36:a4:73:f0:3c:03:62:94:22:e4:bc:52:
                    0b:04:fa:bf:b3:e9:81:ca:60:d2:24:91:d8:ee:a2:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7E:25:E6:E1:73:63:0D:E4:29:BD:6C:4D:37:E8:32:8A:D1:CB:14
            X509v3 Authority Key Identifier:
                keyid:82:3C:0C:5F:5D:FE:53:DB:3B:E0:DA:A8:7E:B8:0F:F2:33:A0:85:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjwMX13-U9s74NqofrgP8jOghVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/V34l5uFzYw3kKb1sTTfoMorRyxQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/025983-6e5e-4d33-863b-be66427eabfe/1/gjwMX13-U9s74NqofrgP8jOghVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212701

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:6e:35:45:6a:4f:26:26:ba:98:35:ff:00:ea:0d:4e:99:
         10:ca:72:a6:90:55:ea:a1:d6:da:32:a8:75:fc:94:d3:f8:c4:
         86:44:da:ba:05:f9:c4:c8:ed:45:d3:7c:c9:6f:6c:1f:15:1b:
         30:58:e9:e6:f5:35:d8:78:eb:83:a4:be:7f:5a:73:f5:b7:87:
         66:c5:45:6c:7a:2e:b6:f4:30:b4:f8:ba:57:17:58:4c:a5:df:
         5b:bb:bc:e0:36:02:45:b4:b5:46:ef:95:31:6c:07:e0:23:03:
         02:19:ee:de:a0:24:7d:fb:1c:01:f6:ce:79:9d:74:51:8c:75:
         2c:c1:6e:e1:d0:26:1b:b4:67:b6:5e:0c:4d:a4:da:42:52:61:
         9d:e2:dc:03:99:d0:b9:2b:9f:ec:f6:e5:fa:a6:5e:33:c2:fa:
         46:a3:26:0c:fc:1d:a6:8a:fa:9b:15:79:5e:79:bf:30:23:c9:
         b8:7c:69:11:7a:b5:0e:74:9a:b9:c9:4d:12:b6:a9:36:44:0f:
         e0:81:55:6e:83:ce:97:fd:75:24:12:38:06:f1:25:14:ae:28:
         14:9c:0d:16:e2:50:92:20:f2:62:1e:62:b8:d0:4b:a4:65:05:
         fa:43:4a:d1:b3:f7:d8:41:b5:bb:0b:a2:8f:86:81:2c:5e:26:
         b6:1f:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:51 2026 by rpki-client