This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/sZ-Iqs_qyDOszNrK_Z5fuxggrOs.asa
File:                     sZ-Iqs_qyDOszNrK_Z5fuxggrOs.asa (raw, json)
Hash identifier:          JjD0dpY8Ffn+6NJUwfPPxTg9q8Z8wtZ0n2tT9s4zBWk=
Subject key identifier:   B1:9F:88:AA:CF:EA:C8:33:AC:CC:DA:CA:FD:9E:5F:BB:18:20:AC:EB
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       019BA8FE44269A556520FB8E0DAB162139E3
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/sZ-Iqs_qyDOszNrK_Z5fuxggrOs.asa
Signing time:             Sat 10 Jan 2026 17:39:54 +0000
ASPA not before:          Sat 10 Jan 2026 17:39:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213842
Providers:                AS: 20562
                          AS: 24785
                          AS: 57866
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a8:fe:44:26:9a:55:65:20:fb:8e:0d:ab:16:21:39:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Jan 10 17:39:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b19f88aacfeac833acccdacafd9e5fbb1820aceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:05:3b:91:94:49:8a:33:e5:92:2b:81:3c:
                    55:10:76:38:7f:2b:45:aa:65:c8:ec:32:69:47:d3:
                    d2:e5:ad:28:fd:28:ef:b2:d6:4a:c2:72:7a:22:9f:
                    45:d5:ff:05:04:cc:72:ca:f7:fb:bb:70:42:28:d3:
                    c2:11:01:5c:16:f1:e3:92:e3:ff:9b:a2:f7:13:1f:
                    32:a0:ae:38:2e:f6:36:f6:45:39:21:58:6f:3d:5f:
                    dd:4f:50:11:2f:cc:38:86:0d:f4:b9:5e:99:6e:9b:
                    63:ad:a3:28:65:8c:30:17:f4:c1:86:2e:c5:0b:5f:
                    4f:b5:99:63:57:21:ea:b4:b0:74:d7:9a:5f:63:0d:
                    39:ba:32:cf:09:21:af:f4:62:71:79:31:ba:84:13:
                    ac:98:db:0c:13:3d:47:c3:6a:29:c9:69:48:2d:5a:
                    37:40:b7:ee:bf:9f:cb:54:b1:f9:61:ff:3c:7f:1c:
                    e9:f6:07:63:be:4e:eb:cb:90:02:60:42:8e:ff:e3:
                    f7:00:b9:15:fd:fb:1c:91:6e:55:65:71:be:48:74:
                    d1:eb:41:f1:df:1c:40:f2:c0:4d:b7:6a:68:67:20:
                    18:3a:81:c5:f8:20:47:ed:e4:6d:63:45:2a:48:91:
                    61:aa:cf:c8:70:d6:c1:6d:c7:a1:97:79:0f:25:bd:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9F:88:AA:CF:EA:C8:33:AC:CC:DA:CA:FD:9E:5F:BB:18:20:AC:EB
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/sZ-Iqs_qyDOszNrK_Z5fuxggrOs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213842

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:a3:5e:69:56:d8:f9:26:00:82:27:ad:ac:b0:64:79:d0:
         c1:5c:37:aa:04:c4:44:27:85:a5:39:1c:3e:84:2e:a9:95:42:
         94:28:5f:3d:57:84:8b:a4:b8:89:f2:a5:d0:f8:de:cd:eb:cb:
         41:49:0f:5e:0c:5d:cd:d4:65:06:5b:fb:10:7d:51:7e:60:ca:
         55:53:07:03:24:5c:b9:08:54:45:7c:ca:61:d1:22:08:b2:05:
         c5:22:6f:1a:df:1a:94:03:d8:ed:35:12:0c:1c:40:c7:b9:ad:
         d7:2f:d6:7d:87:db:31:cb:d6:57:70:75:73:f4:73:4b:94:e0:
         9c:9d:a3:dd:57:ae:09:5e:f1:93:7d:17:58:d9:9d:30:a0:0f:
         86:2a:91:4b:a3:fb:95:34:d6:9b:2d:d6:2a:bf:de:94:4e:f4:
         b1:f6:d6:5c:e1:44:e8:a1:1d:3b:2a:31:f4:9b:3a:c9:3d:51:
         f8:71:09:8f:05:44:97:3d:79:69:73:db:1b:ed:3a:24:0e:31:
         76:11:a3:c9:ab:ba:bd:54:16:00:4a:61:8a:96:42:20:bd:8d:
         4a:e5:48:b8:a0:f9:7e:9e:be:0b:a2:47:8d:3d:7b:96:11:df:
         a7:9d:52:67:8a:7c:df:5f:36:90:eb:93:24:10:3b:55:b1:2c:
         f3:e0:38:9d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZuo/kQmmlVlIPuODasWITnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzU2ODY1N2U1MGU2ZjhlNWM2YmZlZmE4OWNlZjM1MGQ5
NGY4MmUwHhcNMjYwMTEwMTczOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTlmODhhYWNmZWFjODMzYWNjY2RhY2FmZDllNWZiYjE4MjBhY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGQFO5GUSYoz5ZIrgTxVEHY4fytF
qmXI7DJpR9PS5a0o/SjvstZKwnJ6Ip9F1f8FBMxyyvf7u3BCKNPCEQFcFvHjkuP/
m6L3Ex8yoK44LvY29kU5IVhvPV/dT1ARL8w4hg30uV6ZbptjraMoZYwwF/TBhi7F
C19PtZljVyHqtLB015pfYw05ujLPCSGv9GJxeTG6hBOsmNsMEz1Hw2opyWlILVo3
QLfuv5/LVLH5Yf88fxzp9gdjvk7ry5ACYEKO/+P3ALkV/fsckW5VZXG+SHTR60Hx
3xxA8sBNt2poZyAYOoHF+CBH7eRtY0UqSJFhqs/IcNbBbcehl3kPJb2HEwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLGfiKrP6sgzrMzayv2eX7sYIKzrMB8GA1UdIwQY
MBaAFP3FaGV+UOb45ca/76ic7zUNlPguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUt
NDM1YWYxNGFhMDdhLzEvc1otSXFzX3F5RE9zek5yS19aNWZ1eGdnck9zLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUtNDM1YWYxNGFhMDdh
LzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNDUjANBgkqhkiG
9w0BAQsFAAOCAQEAuiCjXmlW2PkmAIInraywZHnQwVw3qgTERCeFpTkcPoQuqZVC
lChfPVeEi6S4ifKl0PjezevLQUkPXgxdzdRlBlv7EH1RfmDKVVMHAyRcuQhURXzK
YdEiCLIFxSJvGt8alAPY7TUSDBxAx7mt1y/WfYfbMcvWV3B1c/RzS5TgnJ2j3Veu
CV7xk30XWNmdMKAPhiqRS6P7lTTWmy3WKr/elE70sfbWXOFE6KEdOyox9Js6yT1R
+HEJjwVElz15aXPbG+06JA4xdhGjyau6vVQWAEphipZCIL2NSuVIuKD5fp6+C6JH
jT17lhHfp51SZ4p83182kOuTJBA7VbEs8+A4nQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:26 2026 by rpki-client