This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/_xStacbF1--N4qcbHR6hs_B-jRQ.asa
File:                     _xStacbF1--N4qcbHR6hs_B-jRQ.asa (raw, json)
Hash identifier:          Bb41TH0kMfsyL9851D0f2aPV/w13bPkodpUWRJGMtMg=
Subject key identifier:   FF:14:AD:69:C6:C5:D7:EF:8D:E2:A7:1B:1D:1E:A1:B3:F0:7E:8D:14
Certificate issuer:       /CN=233d23fe2f738e53e7350c27c12e38284bcda87d
Certificate serial:       019B9AB3D10E2969DCAF9B6D4711F59E8E2E
Authority key identifier: 23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/_xStacbF1--N4qcbHR6hs_B-jRQ.asa
Signing time:             Wed 07 Jan 2026 23:03:54 +0000
ASPA not before:          Wed 07 Jan 2026 23:03:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210557
Providers:                AS: 60068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9a:b3:d1:0e:29:69:dc:af:9b:6d:47:11:f5:9e:8e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d23fe2f738e53e7350c27c12e38284bcda87d
        Validity
            Not Before: Jan  7 23:03:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff14ad69c6c5d7ef8de2a71b1d1ea1b3f07e8d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:40:d5:ba:80:8c:38:f6:21:ee:9a:3f:19:a2:
                    75:08:cc:31:82:0d:da:6f:b4:e0:81:7b:ac:b8:85:
                    10:04:8f:b7:f4:ff:87:36:c3:ae:e9:09:58:ae:e8:
                    f5:2a:1e:b6:46:02:0d:c8:57:56:d4:a1:cf:56:52:
                    96:e3:1c:64:dd:35:09:2c:f0:a2:e0:db:0e:ae:a3:
                    2c:41:23:c5:f2:ad:51:9c:63:8c:b4:b6:e2:0d:02:
                    d4:9b:6f:75:8f:fa:49:7e:6d:b2:63:59:e4:b0:8f:
                    05:fa:d8:0e:49:56:2b:69:46:03:fc:ac:14:8f:8a:
                    b3:99:c0:5a:8a:e2:98:08:5a:61:87:65:14:58:49:
                    1a:b6:fa:41:54:0d:9e:1c:d5:35:86:e6:14:d4:1b:
                    0b:55:7f:24:ef:04:7f:9e:fd:2c:db:d3:ba:8a:6e:
                    7b:3e:c5:d1:83:c8:bb:2e:20:9a:01:61:a8:c2:bf:
                    cd:16:76:91:43:0a:c7:95:35:ab:1e:3f:34:b0:45:
                    1f:ab:19:a7:f6:14:4f:ed:ae:92:0d:98:db:26:12:
                    2b:10:1d:18:88:ee:3e:83:fe:7e:1d:88:c0:95:e3:
                    b3:8d:c7:ff:93:40:13:5d:dd:51:fd:25:5b:76:62:
                    74:4a:28:c7:56:8a:99:f6:02:e4:4f:c0:20:09:44:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:AD:69:C6:C5:D7:EF:8D:E2:A7:1B:1D:1E:A1:B3:F0:7E:8D:14
            X509v3 Authority Key Identifier:
                keyid:23:3D:23:FE:2F:73:8E:53:E7:35:0C:27:C1:2E:38:28:4B:CD:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz0j_i9zjlPnNQwnwS44KEvNqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/_xStacbF1--N4qcbHR6hs_B-jRQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4f454f-0de4-4ac7-b5ca-2e4154f3950d/1/Iz0j_i9zjlPnNQwnwS44KEvNqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210557

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:b3:57:b2:0b:46:29:ae:7c:28:41:3e:c2:a1:b5:0f:2d:
         e9:d9:5e:a7:7a:a5:56:c1:a0:06:22:76:fb:89:ae:f2:a4:6c:
         5c:9b:7c:04:b0:84:af:1c:57:ad:52:7a:c7:32:23:81:9f:56:
         8f:5a:75:b8:1a:b1:15:c2:47:13:90:86:d6:c1:18:d8:e9:74:
         6f:ad:3a:2f:dc:01:e4:c6:26:46:ed:0f:32:48:b3:52:fc:81:
         db:7e:fa:8d:61:54:26:f6:83:7b:eb:da:10:3f:ce:04:ba:bc:
         68:ea:24:45:5c:a4:a9:c3:57:ef:47:37:47:07:92:14:41:b2:
         9a:b6:0b:ef:c3:46:18:ba:3d:a2:1f:40:03:3d:0f:d0:e4:a2:
         8c:30:61:2f:75:22:6b:93:ec:cc:90:14:44:fc:f3:63:be:cb:
         fb:c1:5a:ab:cc:cb:db:e9:6c:18:f4:97:1d:b7:0a:fa:05:e8:
         37:ee:b5:00:5a:61:52:3a:11:4b:a5:69:32:5e:aa:1b:f9:3a:
         6c:3e:57:f0:23:63:44:dd:d3:d4:55:fd:04:6d:74:c8:e3:d9:
         24:12:63:25:36:94:c9:ae:8a:03:d8:05:24:93:ba:e1:25:44:
         1e:59:ae:40:cb:eb:00:cf:8c:c3:ed:64:54:6c:d4:ab:e2:e3:
         c6:db:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 00:03:39 2026 by rpki-client