This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa
File:                     MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa (raw, json)
Hash identifier:          lAuDt32my/LiTnY20vjzp72xOaSWLrQI57qUNwtWtUY=
Subject key identifier:   32:B5:28:94:45:10:E4:9F:1D:7C:4B:0F:45:1A:D6:36:A4:15:C0:F5
Certificate issuer:       /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial:       019C0E64C2A4162C8911DC986A305F7FA81E
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa
Signing time:             Fri 30 Jan 2026 10:13:30 +0000
ASPA not before:          Fri 30 Jan 2026 10:13:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60294
Providers:                AS: 8899
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:64:c2:a4:16:2c:89:11:dc:98:6a:30:5f:7f:a8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
        Validity
            Not Before: Jan 30 10:13:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=32b528944510e49f1d7c4b0f451ad636a415c0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:1b:92:c6:4d:03:e3:94:b2:65:33:ec:49:
                    36:db:4b:3c:e5:e4:c3:c5:e1:ed:06:f3:e3:8c:cd:
                    53:41:b1:f3:8c:2a:24:f2:63:56:ae:6c:75:44:fd:
                    da:a3:e4:34:49:7b:2c:74:e1:0a:ff:c1:87:b1:57:
                    a1:08:3a:8e:a0:5e:1e:8e:fd:90:5a:4e:c8:52:55:
                    8b:85:fe:bb:6d:22:03:3e:db:9e:1f:85:e3:d5:70:
                    fa:7f:20:bb:13:25:8a:e2:6b:62:a8:94:53:d7:62:
                    fc:f1:6f:68:f8:fd:ef:a3:bf:77:41:38:ff:e2:3f:
                    f2:7e:31:f7:41:74:b4:2a:6e:3c:17:9b:36:a2:1d:
                    00:50:69:aa:d5:d0:12:8e:22:36:67:80:49:5b:33:
                    d8:32:0f:93:f6:56:d1:c2:e9:f1:19:25:37:46:aa:
                    16:c9:a5:42:d6:f2:03:df:85:b1:fc:ae:56:91:f9:
                    b2:2b:df:d7:9c:27:65:71:45:c8:5f:53:c1:ee:df:
                    17:d4:36:1b:48:56:67:6e:17:6e:35:a5:47:e6:cc:
                    8e:c5:b8:54:d9:fa:9d:eb:d0:34:ed:ca:7b:6e:44:
                    06:9f:62:95:cc:77:59:2f:67:2d:31:08:a7:63:9c:
                    15:4a:c5:4f:c8:75:4f:a4:7f:05:e6:6d:22:c7:8b:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:28:94:45:10:E4:9F:1D:7C:4B:0F:45:1A:D6:36:A4:15:C0:F5
            X509v3 Authority Key Identifier:
                keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60294

    Signature Algorithm: sha256WithRSAEncryption
         ca:c2:d3:33:b5:31:33:36:77:b9:0a:57:cb:45:0e:21:e2:81:
         8b:28:38:de:4a:18:ea:1d:8a:19:cb:67:43:f8:3d:40:44:e5:
         ff:c7:dd:81:36:91:93:1d:da:59:92:a6:8e:9e:35:13:c8:e8:
         02:c4:d5:06:85:87:ab:78:3b:88:ba:2c:f4:29:21:09:6c:fa:
         a3:2c:d9:08:14:98:77:e3:6c:90:a4:5c:b2:1d:b6:49:78:aa:
         aa:55:42:09:49:73:e0:4b:18:05:ba:89:f2:1c:de:c8:74:42:
         f8:b5:24:46:c1:17:2c:f2:13:73:56:94:6e:15:d3:76:ad:c4:
         a4:42:58:d6:c6:8c:66:1e:8f:19:01:d4:74:b2:ee:25:d7:26:
         7d:24:96:5f:3b:13:6d:1f:e5:7b:17:4d:1b:ad:87:51:5d:7f:
         72:4c:43:f4:bf:60:d7:ec:80:34:d1:a0:88:ca:3c:3f:7f:98:
         f7:3e:87:07:29:1c:e5:55:c1:1a:66:0f:bb:cd:81:2b:ce:1e:
         a1:65:74:35:89:98:87:2c:64:d6:c9:64:9e:16:51:8f:ca:c7:
         af:c7:f8:f5:f7:31:9c:3f:ca:ff:62:19:ac:ca:39:f9:a2:a0:
         5b:ce:b9:da:b8:41:ca:dc:73:db:22:0f:62:f2:72:99:94:30:
         0d:6f:a7:77
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwOZMKkFiyJEdyYajBff6geMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2
MTdmYTEwHhcNMjYwMTMwMTAxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmI1Mjg5NDQ1MTBlNDlmMWQ3YzRiMGY0NTFhZDYzNmE0MTVjMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXgbksZNA+OUsmUz7Ek220s85eTD
xeHtBvPjjM1TQbHzjCok8mNWrmx1RP3ao+Q0SXssdOEK/8GHsVehCDqOoF4ejv2Q
Wk7IUlWLhf67bSIDPtueH4Xj1XD6fyC7EyWK4mtiqJRT12L88W9o+P3vo793QTj/
4j/yfjH3QXS0Km48F5s2oh0AUGmq1dASjiI2Z4BJWzPYMg+T9lbRwunxGSU3RqoW
yaVC1vID34Wx/K5WkfmyK9/XnCdlcUXIX1PB7t8X1DYbSFZnbhduNaVH5syOxbhU
2fqd69A07cp7bkQGn2KVzHdZL2ctMQinY5wVSsVPyHVPpH8F5m0ix4ufKwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDK1KJRFEOSfHXxLD0Ua1jakFcD1MB8GA1UdIwQY
MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt
YjgzM2JkOWUwYjNhLzEvTXJVb2xFVVE1SjhkZkVzUFJScldOcVFWd1BVLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh
LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDrhjANBgkqhkiG
9w0BAQsFAAOCAQEAysLTM7UxMzZ3uQpXy0UOIeKBiyg43koY6h2KGctnQ/g9QETl
/8fdgTaRkx3aWZKmjp41E8joAsTVBoWHq3g7iLos9CkhCWz6oyzZCBSYd+NskKRc
sh22SXiqqlVCCUlz4EsYBbqJ8hzeyHRC+LUkRsEXLPITc1aUbhXTdq3EpEJY1saM
Zh6PGQHUdLLuJdcmfSSWXzsTbR/lexdNG62HUV1/ckxD9L9g1+yANNGgiMo8P3+Y
9z6HBykc5VXBGmYPu82BK84eoWV0NYmYhyxk1slknhZRj8rHr8f49fcxnD/K/2IZ
rMo5+aKgW8652rhBytxz2yIPYvJymZQwDW+ndw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:45 2026 by rpki-client