This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa
File:                     u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa (raw, json)
Hash identifier:          D6JOFCXQmCbms2DaHL0CRRDHnlHYcP1xLAqC2NoBZd8=
Subject key identifier:   BB:70:B3:DF:5D:C5:A5:B8:3C:03:45:20:40:FD:63:78:08:42:C8:A8
Certificate issuer:       /CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
Certificate serial:       019C03323FFBC5EC88B13C5ACB44950A3D49
Authority key identifier: 51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa
Signing time:             Wed 28 Jan 2026 06:02:30 +0000
ASPA not before:          Wed 28 Jan 2026 06:02:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            13214
Providers:                AS: 30893
                          AS: 61229
                          AS: 215551
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:03:32:3f:fb:c5:ec:88:b1:3c:5a:cb:44:95:0a:3d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=519a75cabc3f9bcbeb6820797ffd73cefc1bf97f
        Validity
            Not Before: Jan 28 06:02:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb70b3df5dc5a5b83c03452040fd63780842c8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:0c:da:de:84:d0:7d:e4:e0:50:c0:bc:41:
                    29:07:dc:31:0f:23:63:ea:1a:2a:cf:9b:1d:c6:a9:
                    5c:9a:6c:d2:d8:69:e5:b3:11:04:74:61:ae:93:7f:
                    85:b0:43:21:c6:a4:5a:29:24:e3:f7:a5:25:73:46:
                    2a:49:21:74:0c:60:15:96:fa:f9:ca:2a:b3:de:2f:
                    8b:a8:92:c4:59:f2:c3:56:11:e4:62:71:73:35:2f:
                    c7:68:34:74:b2:28:9e:8e:d7:26:b5:e2:c6:11:a9:
                    9c:64:45:93:6c:53:95:1c:32:f5:bb:92:78:b3:f7:
                    21:97:41:ce:63:d2:b1:cc:c3:5e:96:71:9c:18:62:
                    d7:03:12:cd:30:3c:17:88:37:a1:e5:0f:f8:ea:03:
                    f5:19:0b:26:11:af:ec:ee:87:aa:73:4f:20:1a:bc:
                    36:1d:e7:b3:66:8a:09:35:35:8b:0c:e7:5f:9f:ac:
                    07:29:d7:8e:e1:55:37:21:62:17:b4:eb:70:c7:9e:
                    d6:48:da:c0:97:2a:f5:23:9d:1c:00:16:cb:cc:54:
                    4e:b1:8e:6d:93:49:6f:77:cf:91:01:ad:d5:6f:92:
                    d0:90:a5:d6:26:c4:3b:66:03:72:93:55:7b:9b:7b:
                    69:cb:19:f3:8c:03:be:49:18:74:32:49:de:4b:70:
                    6d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:B3:DF:5D:C5:A5:B8:3C:03:45:20:40:FD:63:78:08:42:C8:A8
            X509v3 Authority Key Identifier:
                keyid:51:9A:75:CA:BC:3F:9B:CB:EB:68:20:79:7F:FD:73:CE:FC:1B:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZp1yrw_m8vraCB5f_1zzvwb-X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/u3Cz313Fpbg8A0UgQP1jeAhCyKg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/UZp1yrw_m8vraCB5f_1zzvwb-X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13214

    Signature Algorithm: sha256WithRSAEncryption
         94:67:3d:9c:9d:a2:55:89:95:f4:dd:db:cd:47:58:b3:08:d8:
         36:91:35:66:30:2f:76:d8:82:86:b9:de:b7:2d:d0:df:7c:f5:
         52:d8:7c:7e:15:88:b2:2b:bf:50:3f:19:be:96:42:78:40:0d:
         04:f0:75:5f:58:f7:d1:be:c7:c8:92:a2:91:98:d8:1d:26:86:
         e6:3a:27:ec:52:a2:9d:fd:c2:13:29:90:39:0a:a8:fb:8c:96:
         ca:17:2a:cf:72:b1:67:12:38:0d:87:ae:a2:a5:1e:d5:10:99:
         0d:98:b6:65:70:89:b9:27:48:85:99:6d:55:ae:3c:ff:e3:65:
         bd:4e:6d:0e:4c:2a:7e:7c:e8:7b:22:47:ad:2f:ca:d3:51:63:
         00:71:fe:1a:59:60:13:c1:e6:af:f7:fa:86:d1:7e:dd:eb:a4:
         89:11:aa:40:ef:86:e1:e8:c8:13:33:68:9a:1d:f6:2e:c4:e4:
         23:09:99:3d:6e:16:4f:58:59:ae:24:2e:c0:67:b5:cb:e1:65:
         0b:81:59:06:07:38:bd:04:bf:cb:20:2b:66:fc:9b:3b:78:8c:
         69:f4:9d:d3:5c:b7:92:aa:72:b8:47:0b:79:35:1c:f9:f0:42:
         e3:5e:8e:36:f8:ad:2a:49:4f:e4:fd:46:50:36:41:eb:39:8f:
         6a:20:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:12 2026 by rpki-client