This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/jn26WWDJNok0WB-ErAFuUy2elf4.asa
File:                     jn26WWDJNok0WB-ErAFuUy2elf4.asa (raw, json)
Hash identifier:          DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=
Subject key identifier:   8E:7D:BA:59:60:C9:36:89:34:58:1F:84:AC:01:6E:53:2D:9E:95:FE
Certificate issuer:       /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial:       019C0B0914FFCBF8E6F2CAFC931328374430
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/jn26WWDJNok0WB-ErAFuUy2elf4.asa
Signing time:             Thu 29 Jan 2026 18:34:30 +0000
ASPA not before:          Thu 29 Jan 2026 18:34:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202322
Providers:                AS: 34872
                          AS: 34927
                          AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0b:09:14:ff:cb:f8:e6:f2:ca:fc:93:13:28:37:44:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
        Validity
            Not Before: Jan 29 18:34:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8e7dba5960c9368934581f84ac016e532d9e95fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ba:12:96:12:b0:45:67:8c:95:fc:06:45:a0:
                    85:aa:9c:03:75:fe:56:55:1a:77:65:e5:08:0a:43:
                    a6:d0:af:63:ae:43:f0:fb:dc:e7:bf:ad:77:cc:b9:
                    08:e2:e1:bb:6b:62:94:e1:78:33:9b:16:16:da:f2:
                    fd:e1:09:b8:7b:ae:c1:27:3a:88:87:a3:5a:55:58:
                    94:9e:e7:63:66:80:11:d7:97:be:14:9b:30:bd:c6:
                    b8:24:f2:15:5b:95:01:25:00:55:0d:08:92:ed:9a:
                    5d:5f:52:76:2b:49:94:49:0a:ad:81:01:43:40:ac:
                    b8:c8:d6:ba:cd:ce:c0:1a:36:54:66:93:af:14:d0:
                    7b:f5:18:0f:21:28:3a:0e:21:b9:55:7a:59:6a:a1:
                    4f:6b:f5:e3:85:83:12:11:23:ab:11:3e:77:c8:0f:
                    18:3b:a6:74:d7:0f:51:56:18:d4:3e:a9:3c:4d:67:
                    5e:72:fb:9e:8e:c4:c8:4c:15:ac:e9:20:d6:d9:7f:
                    78:11:db:e4:e6:e7:30:31:df:be:16:1c:a4:3c:5e:
                    bb:4d:a4:d4:ef:9f:69:a8:82:cc:0b:7e:e6:43:88:
                    d6:bb:e1:a9:5e:cc:4e:f9:32:02:ec:a2:82:ce:6c:
                    f2:48:84:a5:92:ea:85:5a:17:d2:ca:0f:f1:00:de:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7D:BA:59:60:C9:36:89:34:58:1F:84:AC:01:6E:53:2D:9E:95:FE
            X509v3 Authority Key Identifier:
                keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/jn26WWDJNok0WB-ErAFuUy2elf4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202322

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:a2:12:87:fe:4b:2a:4b:80:7b:f9:4f:cf:71:6e:a7:cd:
         bf:22:24:00:21:a3:83:5e:bb:d8:0b:fb:30:42:5c:71:cb:08:
         29:48:a3:f9:83:cd:9e:7d:69:e2:c0:e8:e7:75:72:97:6d:b5:
         a4:10:61:d3:40:e7:b3:b2:76:27:2f:d3:73:de:59:76:d4:ff:
         66:8c:1c:7d:e8:ef:f6:6f:8b:d0:77:ac:94:f7:dd:73:a3:52:
         f1:e2:f5:a6:8f:8d:29:97:9c:46:34:a7:4b:ac:a3:1d:40:d8:
         50:da:a6:9a:46:b4:5c:b6:5d:6b:30:9e:80:ef:8a:16:ca:01:
         a3:d8:ca:5c:8c:e7:5a:c6:da:93:67:27:b7:e9:68:13:36:fb:
         ba:31:67:8c:5f:71:25:b4:cd:e3:11:bb:ed:0c:a6:1d:2b:d9:
         b7:ec:96:7b:aa:45:b7:40:8d:ee:f8:bc:d8:64:f5:1d:5e:a2:
         c3:50:03:f9:25:3f:24:9d:3f:a1:eb:ba:e5:b7:3a:d8:84:75:
         48:f6:b3:35:d6:73:94:c7:fa:fd:ac:c4:b7:5f:aa:de:5c:04:
         87:5f:63:69:68:18:cd:20:e0:2c:2e:5f:98:7e:2c:c3:71:48:
         c9:55:8c:0a:40:b9:8d:c5:f8:4f:2b:3f:e4:e3:4d:8b:b9:20:
         e4:8d:9f:b1
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwLCRT/y/jm8sr8kxMoN0QwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj
MGY5ZDcwHhcNMjYwMTI5MTgzNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTdkYmE1OTYwYzkzNjg5MzQ1ODFmODRhYzAxNmU1MzJkOWU5NWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4boSlhKwRWeMlfwGRaCFqpwDdf5W
VRp3ZeUICkOm0K9jrkPw+9znv613zLkI4uG7a2KU4XgzmxYW2vL94Qm4e67BJzqI
h6NaVViUnudjZoAR15e+FJswvca4JPIVW5UBJQBVDQiS7ZpdX1J2K0mUSQqtgQFD
QKy4yNa6zc7AGjZUZpOvFNB79RgPISg6DiG5VXpZaqFPa/XjhYMSESOrET53yA8Y
O6Z01w9RVhjUPqk8TWdecvuejsTITBWs6SDW2X94Edvk5ucwMd++FhykPF67TaTU
759pqILMC37mQ4jWu+GpXsxO+TIC7KKCzmzySISlkuqFWhfSyg/xAN6ECwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFI59ullgyTaJNFgfhKwBblMtnpX+MB8GA1UdIwQY
MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt
NDI4YTUzMmFjZWYwLzEvam4yNldXREpOb2swV0ItRXJBRnVVeTJlbGY0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw
LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMWUjANBgkqhkiG
9w0BAQsFAAOCAQEAhy+iEof+SypLgHv5T89xbqfNvyIkACGjg1672Av7MEJcccsI
KUij+YPNnn1p4sDo53Vyl221pBBh00Dns7J2Jy/Tc95ZdtT/Zowcfejv9m+L0Hes
lPfdc6NS8eL1po+NKZecRjSnS6yjHUDYUNqmmka0XLZdazCegO+KFsoBo9jKXIzn
Wsbak2cnt+loEzb7ujFnjF9xJbTN4xG77QymHSvZt+yWe6pFt0CN7vi82GT1HV6i
w1AD+SU/JJ0/oeu65bc62IR1SPazNdZzlMf6/azEt1+q3lwEh19jaWgYzSDgLC5f
mH4sw3FIyVWMCkC5jcX4Tys/5ONNi7kg5I2fsQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:04 2026 by rpki-client