This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/fdU-_W7pJQSBmBoJTDifXFa_GuY.asa
File:                     fdU-_W7pJQSBmBoJTDifXFa_GuY.asa (raw, json)
Hash identifier:          pY4X0JVqDXNraFoIezzHS3/6wUYYjBfWWD16yB+Uzkk=
Subject key identifier:   7D:D5:3E:FD:6E:E9:25:04:81:98:1A:09:4C:38:9F:5C:56:BF:1A:E6
Certificate issuer:       /CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
Certificate serial:       019BD5A1AE7F76D59DBBB3106B94D38A8822
Authority key identifier: 34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/fdU-_W7pJQSBmBoJTDifXFa_GuY.asa
Signing time:             Mon 19 Jan 2026 09:41:41 +0000
ASPA not before:          Mon 19 Jan 2026 09:41:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211112
Providers:                AS: 197068
                          AS: 200449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:a1:ae:7f:76:d5:9d:bb:b3:10:6b:94:d3:8a:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34223e0da92d6a95c0e5e2b2f9a8da9958a74f36
        Validity
            Not Before: Jan 19 09:41:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7dd53efd6ee9250481981a094c389f5c56bf1ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:df:55:fe:19:0f:dc:6c:3a:4d:d0:82:10:
                    a9:16:f7:6b:6f:27:c5:5f:fd:96:1a:08:4c:dd:b6:
                    89:b5:ca:51:ef:1d:e8:7a:28:8e:78:0a:d8:95:99:
                    18:32:5a:e2:d9:e1:38:b1:d5:56:b3:18:a3:8e:b5:
                    84:83:f0:7c:c7:d5:85:3d:72:85:40:52:4e:6a:f3:
                    b3:94:4f:21:0b:0e:27:7b:be:60:83:aa:43:70:03:
                    13:32:f6:36:c3:b5:ef:85:c1:98:49:74:c1:f5:ea:
                    19:d7:cb:c4:ca:b9:a6:dd:69:56:4f:cf:9e:83:d4:
                    86:9c:4e:54:cd:8b:0a:10:76:69:75:cd:d7:27:b6:
                    b6:01:77:35:fd:cf:7f:f5:84:04:8b:42:ce:b1:6b:
                    d5:7a:32:83:a7:50:dd:5e:04:ac:ee:5a:26:ad:15:
                    fc:49:69:b9:68:27:96:53:b2:10:bd:8b:09:e0:03:
                    7e:51:da:3f:8f:1a:5e:16:2f:01:af:ea:31:6d:fe:
                    ee:81:14:82:4f:12:a9:95:6b:58:f1:98:2a:0b:98:
                    eb:9b:52:83:bb:33:29:b2:6c:09:eb:99:92:f4:ee:
                    64:60:aa:fa:a9:34:5d:18:ae:af:29:36:c5:da:b1:
                    2c:f7:25:b1:e8:50:e8:09:88:bd:3e:2f:0f:b8:ca:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D5:3E:FD:6E:E9:25:04:81:98:1A:09:4C:38:9F:5C:56:BF:1A:E6
            X509v3 Authority Key Identifier:
                keyid:34:22:3E:0D:A9:2D:6A:95:C0:E5:E2:B2:F9:A8:DA:99:58:A7:4F:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCI-DaktapXA5eKy-ajamVinTzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/fdU-_W7pJQSBmBoJTDifXFa_GuY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/445c48-1238-450d-80c4-6b5239779d8a/1/NCI-DaktapXA5eKy-ajamVinTzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211112

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:cd:3b:13:fd:bc:6f:57:bb:0e:10:f8:3b:cd:9d:aa:b1:
         66:f0:ae:ce:65:97:37:f9:3c:dc:42:05:79:ef:c0:f4:96:3c:
         d4:04:e9:02:25:fc:24:ed:c1:fa:4b:f9:03:f3:d6:ff:58:db:
         2c:08:c1:16:99:2b:6c:63:77:ac:94:5e:13:7a:b0:7d:a5:26:
         22:9f:f2:3f:f0:67:2e:8a:2d:d4:3a:15:dd:8f:23:44:18:10:
         b9:bc:f7:f1:99:a6:60:09:54:0d:d4:b3:15:57:91:00:a2:9d:
         a7:62:f4:3f:33:9a:84:82:67:39:45:d5:b7:ee:4d:9b:61:30:
         cf:54:88:05:1c:bb:40:18:9f:d0:1a:33:1b:07:87:66:ed:23:
         f8:d7:e1:d8:80:d8:21:04:14:7b:97:9d:fb:7d:e7:d5:43:4c:
         90:b0:57:94:39:e0:31:76:b5:5d:c0:c1:0e:83:d7:5a:48:bf:
         0c:ef:1d:03:d6:40:b1:f4:2e:16:df:42:ad:93:d6:a7:d2:3d:
         36:ea:bc:11:d9:28:25:48:ba:b6:dc:50:ca:d1:4c:66:5e:bd:
         3c:25:a8:54:21:2d:41:07:bd:75:6f:94:f5:98:2b:50:51:b1:
         45:43:91:25:93:c9:e9:ad:4c:7d:f2:ce:00:64:27:c1:fd:81:
         3a:a8:32:6e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvVoa5/dtWdu7MQa5TTiogiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MjIzZTBkYTkyZDZhOTVjMGU1ZTJiMmY5YThkYTk5NThh
NzRmMzYwHhcNMjYwMTE5MDk0MTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGQ1M2VmZDZlZTkyNTA0ODE5ODFhMDk0YzM4OWY1YzU2YmYxYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf3fVf4ZD9xsOk3QghCpFvdrbyfF
X/2WGghM3baJtcpR7x3oeiiOeArYlZkYMlri2eE4sdVWsxijjrWEg/B8x9WFPXKF
QFJOavOzlE8hCw4ne75gg6pDcAMTMvY2w7XvhcGYSXTB9eoZ18vEyrmm3WlWT8+e
g9SGnE5UzYsKEHZpdc3XJ7a2AXc1/c9/9YQEi0LOsWvVejKDp1DdXgSs7lomrRX8
SWm5aCeWU7IQvYsJ4AN+Udo/jxpeFi8Br+oxbf7ugRSCTxKplWtY8ZgqC5jrm1KD
uzMpsmwJ65mS9O5kYKr6qTRdGK6vKTbF2rEs9yWx6FDoCYi9Pi8PuMr/rQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFH3VPv1u6SUEgZgaCUw4n1xWvxrmMB8GA1UdIwQY
MBaAFDQiPg2pLWqVwOXisvmo2plYp082MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQt
NmI1MjM5Nzc5ZDhhLzEvZmRVLV9XN3BKUVNCbUJvSlREaWZYRmFfR3VZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80NDVjNDgtMTIzOC00NTBkLTgwYzQtNmI1MjM5Nzc5ZDhh
LzEvTkNJLURha3RhcFhBNWVLeS1hamFtVmluVHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM4qDANBgkqhkiG
9w0BAQsFAAOCAQEAPGzNOxP9vG9Xuw4Q+DvNnaqxZvCuzmWXN/k83EIFee/A9JY8
1ATpAiX8JO3B+kv5A/PW/1jbLAjBFpkrbGN3rJReE3qwfaUmIp/yP/BnLoot1DoV
3Y8jRBgQubz38ZmmYAlUDdSzFVeRAKKdp2L0PzOahIJnOUXVt+5Nm2Ewz1SIBRy7
QBif0BozGweHZu0j+Nfh2IDYIQQUe5ed+33n1UNMkLBXlDngMXa1XcDBDoPXWki/
DO8dA9ZAsfQuFt9CrZPWp9I9Nuq8EdkoJUi6ttxQytFMZl69PCWoVCEtQQe9dW+U
9ZgrUFGxRUORJZPJ6a1MffLOAGQnwf2BOqgybg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:58 2026 by rpki-client