This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/9ZaI8P7W_rtc492x3ky7rPk83Y8.asa
File:                     9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (raw, json)
Hash identifier:          MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=
Subject key identifier:   F5:96:88:F0:FE:D6:FE:BB:5C:E3:DD:B1:DE:4C:BB:AC:F9:3C:DD:8F
Certificate issuer:       /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial:       019C32AE5973F5F576EBA9B4A83BE27B8384
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/9ZaI8P7W_rtc492x3ky7rPk83Y8.asa
Signing time:             Fri 06 Feb 2026 11:20:12 +0000
ASPA not before:          Fri 06 Feb 2026 11:20:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209263
Providers:                AS: 15924
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:32:ae:59:73:f5:f5:76:eb:a9:b4:a8:3b:e2:7b:83:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
        Validity
            Not Before: Feb  6 11:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f59688f0fed6febb5ce3ddb1de4cbbacf93cdd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:e5:a3:db:51:5b:ba:18:17:c2:6b:33:d2:
                    12:42:21:df:a6:b8:c5:bf:37:c2:f9:a2:d7:d8:50:
                    b6:07:8f:a8:ea:2c:0f:7d:1f:8a:44:8b:40:ff:63:
                    ff:3c:89:37:e0:96:a1:6e:45:ef:f3:24:84:bc:86:
                    ea:6a:24:cc:9f:13:5c:4f:ee:7f:77:ee:64:5e:dd:
                    ef:3d:26:c7:9e:ae:d5:7d:32:8f:d9:51:b4:5e:df:
                    ab:4a:1e:26:95:00:c6:d5:8c:8e:35:1a:ec:c9:0f:
                    66:cf:e8:c2:77:ab:43:d9:67:17:28:06:9a:07:93:
                    27:3d:d8:c4:f3:49:68:9b:77:eb:e1:07:5d:e0:0b:
                    9b:95:c5:d9:01:82:b5:0e:e1:80:6d:06:d1:2c:70:
                    10:9e:51:5f:a4:27:2c:89:cc:93:f1:9d:75:65:19:
                    5f:d7:a8:51:f5:36:45:d6:1a:15:7d:a5:a2:2c:42:
                    d4:08:a5:ea:36:95:9c:82:f8:2f:a5:f5:5b:3c:a1:
                    f9:60:27:10:61:76:b6:b2:5c:d8:86:56:8b:1d:2f:
                    05:2d:80:41:bc:55:8f:96:ba:b7:d3:d2:ec:2b:78:
                    37:ab:c9:45:a6:9d:67:fd:c9:84:b9:9d:b7:95:63:
                    a6:f0:29:aa:16:b4:dd:71:c4:60:87:4d:ca:6d:e9:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:96:88:F0:FE:D6:FE:BB:5C:E3:DD:B1:DE:4C:BB:AC:F9:3C:DD:8F
            X509v3 Authority Key Identifier:
                keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/9ZaI8P7W_rtc492x3ky7rPk83Y8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209263

    Signature Algorithm: sha256WithRSAEncryption
         80:c0:0e:6e:d3:59:e3:ee:5f:e3:02:9f:e4:24:50:00:1b:ab:
         7d:87:18:45:1d:32:f1:12:4c:86:40:62:46:f0:36:ac:71:b5:
         07:2d:b7:b9:cd:e4:da:56:36:a5:a5:cc:82:1b:fe:3e:63:ba:
         88:22:80:7f:d0:84:fd:a3:c2:5f:27:32:8b:db:c5:93:3d:02:
         b3:af:39:7e:85:64:b7:b3:16:cd:bc:50:7e:73:c2:2b:be:cb:
         56:77:7b:5e:42:b1:ac:98:7b:e5:dc:14:d2:3d:ce:f8:ee:49:
         e3:1f:73:b6:d6:73:36:86:d9:86:c2:24:6a:d3:fe:4c:e9:10:
         b3:25:b1:7f:f0:69:8c:1b:aa:a6:0f:06:39:cc:7c:57:05:11:
         ab:c3:88:03:b6:35:84:cc:50:89:19:09:2a:ae:47:8d:a1:19:
         58:39:9f:b0:c8:bd:a8:8b:6b:df:af:46:81:9f:89:b2:e9:4c:
         0a:9c:62:f0:5d:ad:76:29:29:7e:5c:40:66:0e:91:a5:79:d1:
         53:51:49:f1:2b:2e:df:f2:dc:03:00:4a:62:50:7b:fd:96:58:
         57:1c:3e:7b:11:5d:58:a3:ff:31:80:f6:80:2c:0c:9e:31:6c:
         37:64:1a:45:26:6a:8e:b2:a1:4e:42:a3:4e:34:85:47:ea:e5:
         e6:51:ea:87
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwyrllz9fV266m0qDvie4OEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYjAzOGU1OTJmYTUyYzFlNDYzMzg0ZmY5MzJmYmU1YjBj
YzcwYTkwHhcNMjYwMjA2MTEyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTk2ODhmMGZlZDZmZWJiNWNlM2RkYjFkZTRjYmJhY2Y5M2NkZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMDlo9tRW7oYF8JrM9ISQiHfprjF
vzfC+aLX2FC2B4+o6iwPfR+KRItA/2P/PIk34JahbkXv8ySEvIbqaiTMnxNcT+5/
d+5kXt3vPSbHnq7VfTKP2VG0Xt+rSh4mlQDG1YyONRrsyQ9mz+jCd6tD2WcXKAaa
B5MnPdjE80lom3fr4Qdd4AublcXZAYK1DuGAbQbRLHAQnlFfpCcsicyT8Z11ZRlf
16hR9TZF1hoVfaWiLELUCKXqNpWcgvgvpfVbPKH5YCcQYXa2slzYhlaLHS8FLYBB
vFWPlrq309LsK3g3q8lFpp1n/cmEuZ23lWOm8CmqFrTdccRgh03KbenQXwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPWWiPD+1v67XOPdsd5Mu6z5PN2PMB8GA1UdIwQY
MBaAFMqwOOWS+lLB5GM4T/ky++WwzHCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQt
ODk3YTRjYzkyOTIyLzEvOVphSThQN1dfcnRjNDkyeDNreTdyUGs4M1k4LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MWQ2NjctMTFmOC00YTZkLTg0OWQtODk3YTRjYzkyOTIy
LzEveXJBNDVaTDZVc0hrWXpoUC1UTDc1YkRNY0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMxbzANBgkqhkiG
9w0BAQsFAAOCAQEAgMAObtNZ4+5f4wKf5CRQABurfYcYRR0y8RJMhkBiRvA2rHG1
By23uc3k2lY2paXMghv+PmO6iCKAf9CE/aPCXycyi9vFkz0Cs685foVkt7MWzbxQ
fnPCK77LVnd7XkKxrJh75dwU0j3O+O5J4x9zttZzNobZhsIkatP+TOkQsyWxf/Bp
jBuqpg8GOcx8VwURq8OIA7Y1hMxQiRkJKq5HjaEZWDmfsMi9qItr369GgZ+JsulM
Cpxi8F2tdikpflxAZg6RpXnRU1FJ8Ssu3/LcAwBKYlB7/ZZYVxw+exFdWKP/MYD2
gCwMnjFsN2QaRSZqjrKhTkKjTjSFR+rl5lHqhw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:24 2026 by rpki-client