This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa
File:                     kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa (raw, json)
Hash identifier:          59NmHjBSvzipBM//GfVuJezWtnTbIsL21l5xvXSlCcM=
Subject key identifier:   91:7A:0A:EA:CE:5A:69:A5:33:38:9C:71:51:C9:A6:86:A2:1A:48:B4
Certificate issuer:       /CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
Certificate serial:       019C00597BDBF63FE60233C5CD09982E6658
Authority key identifier: A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa
Signing time:             Tue 27 Jan 2026 16:46:30 +0000
ASPA not before:          Tue 27 Jan 2026 16:46:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214044
Providers:                AS: 199087
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:00:59:7b:db:f6:3f:e6:02:33:c5:cd:09:98:2e:66:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b62d3bf6b0c5247eddf4498c2cce60c0d1e508
        Validity
            Not Before: Jan 27 16:46:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=917a0aeace5a69a533389c7151c9a686a21a48b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:25:4d:e9:1d:b8:64:a1:9c:8e:c8:db:74:
                    fa:2f:93:27:8a:86:e9:d5:53:ac:b2:a1:f3:4c:56:
                    39:f6:ed:a1:31:03:04:d6:9e:89:47:4c:83:ad:c5:
                    80:ff:96:0b:be:72:91:7a:b3:f6:0a:95:c4:bd:b1:
                    d9:74:1e:eb:da:1e:eb:50:51:f4:a6:c0:7e:59:5e:
                    3b:c1:d9:0d:e2:e5:cf:fb:e8:17:6d:9a:51:b1:0a:
                    68:b2:dd:65:e7:fe:a8:e6:0c:2d:0a:a2:2d:b5:c6:
                    dd:93:5b:fb:9f:bd:c1:61:10:14:db:4d:34:b8:8e:
                    ff:5a:ec:0f:73:69:7b:62:d4:06:7e:08:d3:ea:e2:
                    61:3d:e1:c7:b6:f3:d9:4e:22:e4:c9:ef:35:57:fb:
                    a3:16:6b:b7:3b:14:e2:a7:59:a0:26:1a:90:36:6f:
                    9e:67:1b:b1:f7:33:8c:d9:36:ec:17:55:6e:1c:7c:
                    a6:33:a4:c7:6e:f2:49:5e:55:2a:42:ff:fc:1f:06:
                    21:df:cb:f3:8a:35:d0:89:01:e4:e0:67:4c:f5:10:
                    fa:d9:bb:fc:fc:0e:9d:38:c7:e4:a4:9e:6c:18:85:
                    61:f2:7e:eb:2f:8a:d5:3b:28:3b:71:d5:ea:76:99:
                    17:12:69:b9:08:1c:13:7c:a0:16:cb:11:52:2a:6e:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7A:0A:EA:CE:5A:69:A5:33:38:9C:71:51:C9:A6:86:A2:1A:48:B4
            X509v3 Authority Key Identifier:
                keyid:A2:B6:2D:3B:F6:B0:C5:24:7E:DD:F4:49:8C:2C:CE:60:C0:D1:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYtO_awxSR-3fRJjCzOYMDR5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/kXoK6s5aaaUzOJxxUcmmhqIaSLQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/83dc2d-5311-45a6-a08a-62bf15c4674a/1/orYtO_awxSR-3fRJjCzOYMDR5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214044

    Signature Algorithm: sha256WithRSAEncryption
         3c:1d:db:10:ca:d7:3d:ad:85:b4:9c:97:2a:ae:9c:81:a6:b2:
         ff:7e:3a:df:37:4c:c9:4d:d7:b7:c3:ed:82:51:8e:4e:14:a1:
         e3:84:b5:2b:58:f5:5c:8b:53:2a:07:c3:72:c3:2f:2f:98:97:
         1f:29:f8:c6:70:75:39:c2:49:11:2a:a1:c4:ec:03:f6:8d:4b:
         93:90:d8:72:af:1a:25:2a:1e:8a:6f:b4:15:52:88:73:f6:13:
         f5:0c:84:b8:02:5f:8c:3a:b9:fd:60:7c:45:a3:84:70:fe:dc:
         61:e4:e7:60:2d:c1:f8:ce:22:6a:b8:e7:93:ae:52:9f:a3:3d:
         91:6a:40:28:3a:73:80:ed:9c:62:b7:86:aa:a9:84:25:63:59:
         69:9c:53:d3:0e:7f:6b:7d:f2:73:5a:34:5c:1c:24:6c:34:ef:
         30:1f:cd:54:e1:b8:36:51:97:9f:ed:6a:ad:c6:a4:e6:ae:4e:
         30:5f:96:81:6c:b0:2c:3a:8d:77:3e:45:28:02:11:98:c3:63:
         a6:66:4d:b5:eb:1e:b4:c3:01:64:9e:3d:cd:be:c8:65:45:1d:
         a9:d6:90:f8:63:18:69:d6:d9:63:28:ce:42:dd:08:49:7e:24:
         5e:7b:3b:26:6c:f4:b1:48:48:e4:d0:4a:99:af:76:21:9b:08:
         8c:1b:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:14 2026 by rpki-client