This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/f9p5fANR3rgdNF9ibKB-GDcgYp0.asa
File:                     f9p5fANR3rgdNF9ibKB-GDcgYp0.asa (raw, json)
Hash identifier:          qcx5yEHomaJVsdDB+zzIUqbgqwQXu1Ph9bsEC6CL9SQ=
Subject key identifier:   7F:DA:79:7C:03:51:DE:B8:1D:34:5F:62:6C:A0:7E:18:37:20:62:9D
Certificate issuer:       /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial:       019BA218360435CE19573745F3B801A50A82
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/f9p5fANR3rgdNF9ibKB-GDcgYp0.asa
Signing time:             Fri 09 Jan 2026 09:30:54 +0000
ASPA not before:          Fri 09 Jan 2026 09:30:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56980
Providers:                AS: 206119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 18:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:18:36:04:35:ce:19:57:37:45:f3:b8:01:a5:0a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
        Validity
            Not Before: Jan  9 09:30:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7fda797c0351deb81d345f626ca07e183720629d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:ea:c6:5c:6c:a9:5f:e8:b2:c0:b0:93:eb:
                    ee:f4:be:a1:73:2a:04:95:43:32:86:c6:39:f3:ee:
                    14:c1:27:32:1a:ff:a8:14:34:15:e3:f3:3f:33:05:
                    af:c7:86:2d:1a:ea:91:03:23:0c:20:de:f6:21:2e:
                    8f:4d:a2:bf:89:f8:37:64:f9:14:4a:25:84:e9:7d:
                    8d:4a:36:26:0a:a1:6c:01:0d:7a:c2:b7:a7:38:ba:
                    a2:07:35:db:95:ed:6a:37:25:5d:35:2f:57:1b:b2:
                    35:8d:66:9d:0d:24:98:90:f4:b7:f9:d5:21:a3:68:
                    5d:05:9e:85:26:4e:33:c5:5a:81:f9:9b:91:24:05:
                    18:cc:58:ff:d9:db:52:70:c9:86:29:d7:4a:a5:d4:
                    5c:1c:79:63:33:a7:71:6e:d0:9e:16:71:cf:05:67:
                    f4:50:9f:68:d9:95:ce:44:8b:38:fb:07:38:6d:e3:
                    2f:8b:2a:0f:b8:46:44:7c:37:34:8b:59:71:9d:a9:
                    44:34:02:a5:9d:e7:ea:3a:c5:81:c3:3f:3f:c5:81:
                    71:ee:0b:e1:75:71:58:fd:c3:e2:5a:b5:8a:69:ec:
                    57:e1:1d:b3:e0:c7:c9:90:21:77:46:8a:5f:fb:12:
                    8e:88:48:36:a7:7a:59:bf:f4:68:99:9d:0e:d0:94:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:79:7C:03:51:DE:B8:1D:34:5F:62:6C:A0:7E:18:37:20:62:9D
            X509v3 Authority Key Identifier:
                keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/f9p5fANR3rgdNF9ibKB-GDcgYp0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56980

    Signature Algorithm: sha256WithRSAEncryption
         9d:05:25:42:16:14:44:3c:bb:86:46:12:7f:10:17:8c:79:c0:
         8b:9f:4a:ae:fe:71:f3:b5:50:1b:e0:70:a8:40:2b:9a:31:7f:
         ff:95:8a:d8:87:3d:f7:8a:47:e5:df:d3:ff:27:f6:97:2c:a9:
         c0:e0:24:80:ae:d6:8c:2c:79:a6:eb:73:a5:6a:56:9f:17:33:
         8c:da:a8:c9:e5:66:0e:92:b1:76:b0:93:bc:b6:3b:0d:68:f9:
         a4:23:67:bd:7f:06:bd:e2:00:2e:d4:ca:62:02:33:3c:fa:d6:
         54:6f:ab:f6:be:2a:1f:cd:83:72:fc:00:5e:58:b8:0b:eb:80:
         4a:eb:40:f9:a7:2c:a3:fe:75:b9:94:7f:09:10:cc:71:20:31:
         17:98:72:07:11:c6:f7:d7:9d:2f:72:ea:27:f4:27:c8:88:28:
         cf:3f:fc:2a:91:b7:82:c0:1b:ac:02:55:28:a9:19:13:2c:1c:
         6f:87:ed:ae:97:17:04:07:15:11:a4:45:e5:05:d2:77:10:0e:
         ca:c3:fb:b4:b9:d5:0f:a9:17:52:48:73:c7:44:71:c5:c8:38:
         fe:7d:f1:44:21:ec:05:95:f9:d5:ea:cd:0d:d1:17:37:97:67:
         4d:60:f0:c6:1a:e3:73:98:07:f6:54:d5:6d:e5:a4:88:72:7c:
         a7:2e:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:44 2026 by rpki-client