This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa
File:                     2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa (raw, json)
Hash identifier:          MpQCPMnmPtD2sJGqmtD1rBnmiwGX8J1+k78/7G1N5Nw=
Subject key identifier:   D8:D6:9C:82:DA:D3:02:63:C3:55:0F:65:2A:AE:42:13:A1:21:86:7C
Certificate issuer:       /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial:       019B0921FDE758B9E6518AFA3D18AC282F0D
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa
Signing time:             Wed 10 Dec 2025 16:39:41 +0000
ASPA not before:          Wed 10 Dec 2025 16:39:41 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            208016
Providers:                AS: 3320
                          AS: 8220
                          AS: 8881
                          AS: 34549
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:09:21:fd:e7:58:b9:e6:51:8a:fa:3d:18:ac:28:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
        Validity
            Not Before: Dec 10 16:39:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d8d69c82dad30263c3550f652aae4213a121867c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:7e:2f:83:17:df:1a:7f:de:0e:40:c3:16:
                    93:09:30:ee:7e:47:68:79:e6:1b:d1:eb:74:15:cb:
                    e8:33:91:63:f2:70:94:8c:93:ec:e2:5b:cf:bd:b8:
                    39:c8:6f:f0:bb:0c:4a:06:52:cf:42:0c:22:72:80:
                    38:a9:04:e8:32:22:e9:60:63:ec:62:9a:6d:aa:c0:
                    18:ff:4f:4b:19:53:76:72:7f:6f:a7:66:51:47:2a:
                    13:f4:42:e7:ef:90:8f:0f:cc:49:a1:65:a4:c7:14:
                    34:05:df:f5:50:9b:56:45:a9:24:65:83:e0:6a:5b:
                    3d:8f:9b:2c:b9:43:89:ee:95:7f:84:f0:44:cb:ad:
                    da:80:ac:2e:09:08:67:b2:c4:09:65:b5:9d:21:fe:
                    7e:04:5c:17:df:5e:d9:6f:ef:10:ea:68:2c:8e:50:
                    9f:f6:52:9c:74:05:cb:c8:18:7c:a0:79:83:65:ce:
                    a5:64:67:1c:f4:34:bb:61:46:11:94:a0:df:7b:e3:
                    70:bb:33:a4:33:fe:d7:fd:75:96:9a:c6:c2:84:50:
                    fe:d6:66:cb:ee:38:f5:12:26:27:e2:3b:d0:90:3c:
                    5a:6e:d4:39:07:c0:3a:84:ea:2e:95:a8:90:92:ef:
                    76:57:3e:54:4f:7d:7a:d4:dd:32:f2:60:41:88:e8:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:9C:82:DA:D3:02:63:C3:55:0F:65:2A:AE:42:13:A1:21:86:7C
            X509v3 Authority Key Identifier:
                keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208016

    Signature Algorithm: sha256WithRSAEncryption
         35:b4:31:ff:8f:ad:d5:ea:da:6a:1b:9f:a3:1a:c4:57:b5:fb:
         11:ee:d9:e9:e2:e2:b3:be:97:8f:e2:57:ea:f4:65:b4:55:e4:
         f3:78:de:86:00:9a:78:e1:69:5e:59:22:0e:47:da:1b:70:9b:
         a5:78:d6:27:88:80:e2:b3:4a:06:6f:36:a2:c7:fd:d8:6d:fa:
         69:a0:e3:67:8c:70:e2:f4:41:66:49:6e:f8:cc:61:e9:ba:70:
         98:c2:1b:70:48:b0:c6:3d:6f:30:6c:5c:db:07:7d:fa:e8:5b:
         64:63:ac:30:43:9b:32:b7:f4:cf:30:f3:c4:b0:b6:5e:57:88:
         8b:21:6e:2b:3a:33:b4:58:60:f7:75:01:55:09:0c:13:45:62:
         84:e8:28:37:c6:47:fd:5f:9e:6d:b4:c2:00:6f:40:f2:ce:ca:
         01:89:09:99:81:60:d4:ab:56:05:bd:b7:0e:ed:25:4e:c1:fc:
         08:ef:20:11:cb:e5:38:82:94:07:7c:9e:88:98:05:6b:ba:21:
         99:dd:9b:a5:34:ad:2f:26:9b:26:a3:c0:2f:b6:11:20:1a:5e:
         32:e8:b5:0f:ca:55:28:fe:5d:63:91:56:dc:66:32:48:f3:bb:
         65:a0:83:c3:2f:5f:f2:09:c4:50:ae:45:55:f4:8c:96:d1:f3:
         57:d0:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 06:13:35 2025 by rpki-client