This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/eraAzr1vH5BHOwJlejSOLyg-c-E.asa
File:                     eraAzr1vH5BHOwJlejSOLyg-c-E.asa (raw, json)
Hash identifier:          7D3E2z+0C8CMB9yIrMCzDvKLKq3x7w4pWDJCCkzPsBw=
Subject key identifier:   7A:B6:80:CE:BD:6F:1F:90:47:3B:02:65:7A:34:8E:2F:28:3E:73:E1
Certificate issuer:       /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial:       019C2DEE883009E195FB8E9307ED768ED358
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/eraAzr1vH5BHOwJlejSOLyg-c-E.asa
Signing time:             Thu 05 Feb 2026 13:12:12 +0000
ASPA not before:          Thu 05 Feb 2026 13:12:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214365
Providers:                AS: 39351
                          AS: 208453
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:ee:88:30:09:e1:95:fb:8e:93:07:ed:76:8e:d3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
        Validity
            Not Before: Feb  5 13:12:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ab680cebd6f1f90473b02657a348e2f283e73e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:4a:28:3c:78:e5:8d:fb:7c:f5:6e:00:4d:
                    80:1a:5a:f1:ba:c8:7f:bc:08:5e:85:19:d7:e9:99:
                    b7:eb:86:8a:08:d6:7c:00:48:b1:75:5d:50:83:7d:
                    b8:30:da:54:ce:b8:0a:cf:3f:9a:8b:92:62:49:c9:
                    5b:8c:68:4d:5b:78:a3:8d:46:b4:09:15:23:4b:b1:
                    dc:f4:06:0d:b2:f1:00:e9:93:0d:dc:11:50:33:fe:
                    89:50:4e:bd:ba:90:49:2a:c7:35:aa:65:60:02:62:
                    6b:4b:5d:c2:10:4b:d1:63:f0:1b:c2:28:6b:4d:04:
                    5c:47:9c:4e:d2:c0:6e:0f:56:ba:40:e2:d3:b9:c2:
                    13:31:74:13:9b:e8:3c:f0:b7:91:1f:75:83:d0:10:
                    56:a8:22:41:15:1b:07:3d:cc:55:47:aa:d5:44:0b:
                    8c:05:d7:c5:c5:1e:fd:5f:e4:22:cc:5e:4d:d6:8a:
                    f2:f0:26:08:8c:ec:a3:cd:a3:fc:86:9f:31:da:17:
                    55:bc:37:06:6b:02:b0:d0:78:26:88:53:ef:b2:d0:
                    a2:76:0c:4e:cf:c4:e8:4c:32:5c:a8:24:17:72:42:
                    db:43:ef:71:bb:0d:6a:0f:24:87:26:d1:16:f3:64:
                    4d:f0:ad:0b:63:af:0c:8b:be:d5:58:fa:45:b8:43:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B6:80:CE:BD:6F:1F:90:47:3B:02:65:7A:34:8E:2F:28:3E:73:E1
            X509v3 Authority Key Identifier:
                keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/eraAzr1vH5BHOwJlejSOLyg-c-E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214365

    Signature Algorithm: sha256WithRSAEncryption
         96:a3:b3:07:48:ed:1a:bf:bf:c5:3c:d7:08:50:51:ff:2a:40:
         af:1c:5c:af:b0:f9:fe:52:20:55:62:39:fe:bb:06:32:22:b7:
         bb:d0:0c:73:5c:c4:f1:01:57:12:40:fe:b3:e7:5f:81:f5:da:
         4e:f1:13:52:cc:17:33:1f:68:86:4b:d0:07:e6:b3:c2:ec:dc:
         0d:6b:33:b3:93:b4:a7:ab:ac:8a:2a:99:b1:5d:0e:18:6a:78:
         45:82:99:89:0d:9a:1c:4c:d4:79:04:62:68:74:17:2d:9b:cc:
         55:ef:64:c9:69:cf:1b:98:d6:c2:d9:3d:62:5a:90:1a:e8:69:
         9e:ea:65:ea:b8:df:b4:c3:4c:6c:e1:53:9c:19:e9:1e:6a:e0:
         b4:95:c6:3c:cc:ef:10:08:d1:dc:df:9f:0c:6c:8d:64:39:9b:
         04:5c:dd:a7:3d:a9:57:b3:82:15:55:cb:d4:f7:44:f9:5b:37:
         6f:b7:6b:49:a7:21:3d:d0:29:c0:7b:58:7d:4d:bf:d8:5f:df:
         ef:3d:15:48:14:1a:2a:b1:89:0b:ad:ed:69:1c:82:2d:63:86:
         d4:d2:81:cd:52:34:d9:8c:de:aa:f5:7f:20:33:9f:73:03:dd:
         29:1b:45:81:40:2e:b9:0a:09:cc:55:26:99:1f:f6:47:19:5e:
         87:a5:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:59 2026 by rpki-client