This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/H_uYynhuG6l8wZqNzHCCCngrv6I.asa
File:                     H_uYynhuG6l8wZqNzHCCCngrv6I.asa (raw, json)
Hash identifier:          cNBW9xKMdJGhXlb3YQvmEsKCGDZEJR6jaSu58wTwgns=
Subject key identifier:   1F:FB:98:CA:78:6E:1B:A9:7C:C1:9A:8D:CC:70:82:0A:78:2B:BF:A2
Certificate issuer:       /CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
Certificate serial:       019C4234C02DD238C69ED3F46F2E933AC8AB
Authority key identifier: F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/H_uYynhuG6l8wZqNzHCCCngrv6I.asa
Signing time:             Mon 09 Feb 2026 11:41:19 +0000
ASPA not before:          Mon 09 Feb 2026 11:41:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209489
Providers:                AS: 29049
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:34:c0:2d:d2:38:c6:9e:d3:f4:6f:2e:93:3a:c8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e1a4e5dad9e4cc14e016910ec4b669d5e3ab9c
        Validity
            Not Before: Feb  9 11:41:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ffb98ca786e1ba97cc19a8dcc70820a782bbfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:97:c6:41:d4:b7:53:ce:c6:22:f1:18:7c:
                    50:24:24:e8:73:46:ae:f2:ab:78:23:15:12:19:91:
                    67:11:67:ff:90:cb:16:0a:7e:08:50:ad:0d:d8:83:
                    9e:bf:6c:31:aa:88:67:97:17:f6:b4:d0:41:d8:39:
                    50:14:ed:b3:a1:17:0a:1a:b1:f7:da:16:30:24:2c:
                    25:78:c7:62:72:23:51:51:d0:a8:f5:8f:2e:14:04:
                    48:c2:bb:2f:71:7e:cb:0f:1f:29:83:6e:35:c8:f4:
                    aa:e4:34:d2:a1:1d:6c:6a:bd:69:77:23:d0:f5:09:
                    4b:ea:1b:93:cf:56:e2:9a:d5:06:1c:b2:b7:0a:47:
                    91:7d:e7:61:72:05:2b:5c:f4:1b:f7:ba:2f:2e:d4:
                    0a:e0:a6:80:0e:2e:16:31:c5:b4:ff:8b:74:26:69:
                    6b:1b:9a:79:da:57:cd:cd:e9:8d:8b:d0:2c:67:eb:
                    76:b6:d5:37:2b:66:4c:6b:b1:e4:3c:78:dd:76:5d:
                    97:ea:1b:49:3f:22:76:98:1d:99:ec:de:68:db:14:
                    d5:cc:e0:90:e5:71:f5:45:0a:96:67:2d:cb:ce:81:
                    bc:46:5f:fc:a1:91:fd:41:34:b2:da:ea:15:8b:eb:
                    ec:20:59:a7:82:7b:31:ff:46:5b:e5:07:63:4c:29:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:98:CA:78:6E:1B:A9:7C:C1:9A:8D:CC:70:82:0A:78:2B:BF:A2
            X509v3 Authority Key Identifier:
                keyid:F6:E1:A4:E5:DA:D9:E4:CC:14:E0:16:91:0E:C4:B6:69:D5:E3:AB:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9uGk5drZ5MwU4BaRDsS2adXjq5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/H_uYynhuG6l8wZqNzHCCCngrv6I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/976df2-289b-4c65-8247-af34e83b91b6/1/9uGk5drZ5MwU4BaRDsS2adXjq5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209489

    Signature Algorithm: sha256WithRSAEncryption
         34:23:a2:de:81:fc:eb:f5:07:36:7f:4e:56:32:10:5e:a2:34:
         9d:7c:c3:ea:56:82:cb:a9:ab:65:f8:cf:b0:b0:e3:47:9e:03:
         2f:b3:47:b3:10:64:e8:ae:ff:89:20:60:02:4f:f7:9c:82:c6:
         d5:d0:3e:bd:09:96:8f:00:dc:8a:13:09:08:d3:7f:56:78:c4:
         85:c3:50:0b:c9:77:1d:12:04:16:5a:b8:d5:31:92:90:dc:08:
         70:2e:5c:1d:43:ff:ec:07:85:62:94:74:c2:24:46:eb:bf:e4:
         ec:8b:97:28:eb:74:13:10:cf:49:be:69:81:2a:5b:ba:a4:b3:
         64:5f:7b:85:67:ae:9e:12:e4:88:4d:dd:bb:75:21:f0:ad:c6:
         4d:6f:8d:a3:ae:64:af:c0:18:4f:40:f4:92:1d:c2:e0:ae:12:
         dd:c7:f3:81:5e:7b:f5:8c:e8:29:38:a9:61:da:8b:e8:28:12:
         c4:18:2d:6e:4b:74:92:4a:76:00:7c:40:87:d7:b0:c0:e8:8a:
         67:54:e3:5d:72:1a:5c:08:49:74:f1:2d:03:e8:a2:54:45:99:
         4b:42:39:03:65:f3:77:15:34:fc:20:5f:28:f9:a6:c5:cd:0f:
         05:fb:5d:01:72:d6:be:71:3d:c0:24:45:72:a9:ea:0c:82:55:
         29:42:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:07 2026 by rpki-client