This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa
File:                     pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (raw, json)
Hash identifier:          L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=
Subject key identifier:   A5:DB:F0:7B:35:E2:7D:23:DB:1E:7E:D9:83:91:AC:A0:86:7E:F7:F8
Certificate issuer:       /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial:       019BEAC188384B838A3EADB09B547CE038F1
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa
Signing time:             Fri 23 Jan 2026 12:08:30 +0000
ASPA not before:          Fri 23 Jan 2026 12:08:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209335
Providers:                AS: 12816
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ea:c1:88:38:4b:83:8a:3e:ad:b0:9b:54:7c:e0:38:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
        Validity
            Not Before: Jan 23 12:08:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5dbf07b35e27d23db1e7ed98391aca0867ef7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:5f:df:48:12:24:94:40:43:75:97:e9:5d:
                    51:ca:33:79:7a:33:ed:56:04:15:f2:8c:0f:d3:5c:
                    8a:8c:b0:20:73:b5:06:0b:1e:c8:a8:ea:79:1e:00:
                    5b:1c:3d:0e:20:54:f3:01:cb:10:e5:23:7a:36:f6:
                    37:44:07:9d:09:98:eb:30:1a:fa:5c:90:f3:91:58:
                    01:b6:6c:37:4c:b1:b6:ee:a0:22:ab:24:e6:57:d1:
                    11:39:a8:c4:59:f8:fe:d7:c8:e4:56:c8:41:6b:83:
                    3c:0a:fc:c2:d7:ed:55:74:bd:46:35:7c:51:88:88:
                    f2:05:ea:9f:f5:58:ca:5e:00:25:20:d7:8c:f0:3c:
                    37:0d:79:a0:2a:3c:6b:7c:af:90:d2:17:5c:65:2d:
                    ce:fa:e8:6d:ab:19:76:a4:db:3a:2c:92:76:ed:fb:
                    cd:12:fa:c1:e7:ec:0a:f9:56:fe:6f:ac:1d:1d:dc:
                    69:31:a9:8b:ad:7f:bf:0f:e9:72:ea:f8:9f:be:06:
                    c9:51:05:2d:cf:e9:57:7a:b3:81:30:b5:93:48:47:
                    45:e9:6c:18:e4:29:8f:c3:4f:02:46:9b:34:0a:67:
                    29:85:bd:2e:3b:9b:f4:f4:4e:d9:a8:3b:ab:dc:7b:
                    58:ca:49:a4:13:0c:e8:bf:e3:5d:a8:d4:71:f2:f2:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:F0:7B:35:E2:7D:23:DB:1E:7E:D9:83:91:AC:A0:86:7E:F7:F8
            X509v3 Authority Key Identifier:
                keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209335

    Signature Algorithm: sha256WithRSAEncryption
         12:10:b7:e6:a1:02:2d:12:64:f7:75:ee:f7:b2:e6:20:2f:8a:
         b1:2b:0d:1d:ed:38:6d:83:53:df:83:e9:0e:98:41:6a:82:e7:
         69:c6:bb:3a:6b:2f:84:a9:66:26:8a:fb:5c:01:4c:66:a2:92:
         e1:2d:7e:15:b8:00:2a:df:dc:38:3b:b6:e5:cb:7b:d4:b9:80:
         ee:e7:09:85:02:ff:e9:63:b6:f4:0b:a0:13:37:27:24:99:d3:
         c9:96:4e:67:79:6c:f2:b5:2c:45:13:d8:db:ca:6e:dd:90:94:
         ee:64:f3:e1:9a:6a:dc:0d:79:e3:e3:2d:64:05:a1:30:08:c4:
         5c:a0:ed:9e:37:ae:60:66:85:ce:b6:4c:60:f0:9f:ab:61:32:
         98:60:5c:84:97:9d:e2:45:8f:93:1b:b2:5c:c1:2c:22:de:75:
         a6:32:66:35:48:00:5c:f1:ee:55:7a:c6:3e:6a:f6:f6:69:26:
         3b:91:4e:b2:d8:2f:e7:e3:04:ad:94:28:0f:45:d3:92:c7:13:
         2e:07:e6:a1:79:23:2b:cf:20:6e:1f:45:84:82:d1:7e:57:c7:
         a2:a9:e9:25:62:81:7c:73:35:d7:18:3f:7e:16:1f:46:91:8c:
         b7:3f:85:72:05:33:da:01:98:8a:25:18:e4:b5:6f:c8:a5:c9:
         6b:02:83:0f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvqwYg4S4OKPq2wm1R84DjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDIxZGQxZTI3Y2QxZTc3OGUyZGJiZDYwYWExODRiMTYz
YmNlZmUwHhcNMjYwMTIzMTIwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWRiZjA3YjM1ZTI3ZDIzZGIxZTdlZDk4MzkxYWNhMDg2N2VmN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Rf30gSJJRAQ3WX6V1RyjN5ejPt
VgQV8owP01yKjLAgc7UGCx7IqOp5HgBbHD0OIFTzAcsQ5SN6NvY3RAedCZjrMBr6
XJDzkVgBtmw3TLG27qAiqyTmV9EROajEWfj+18jkVshBa4M8CvzC1+1VdL1GNXxR
iIjyBeqf9VjKXgAlINeM8Dw3DXmgKjxrfK+Q0hdcZS3O+uhtqxl2pNs6LJJ27fvN
EvrB5+wK+Vb+b6wdHdxpMamLrX+/D+ly6vifvgbJUQUtz+lXerOBMLWTSEdF6WwY
5CmPw08CRps0Cmcphb0uO5v09E7ZqDur3HtYykmkEwzov+NdqNRx8vLqrwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKXb8Hs14n0j2x5+2YORrKCGfvf4MB8GA1UdIwQY
MBaAFHQCHdHifNHneOLbvWCqGEsWO87+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUt
OTMzODVmODA1NjU1LzEvcGR2d2V6WGlmU1BiSG43Wmc1R3NvSVotOV9nLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84OTQxZjgtOWZiNi00ZDBmLWI0OTUtOTMzODVmODA1NjU1
LzEvZEFJZDBlSjgwZWQ0NHR1OVlLb1lTeFk3enY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMxtzANBgkqhkiG
9w0BAQsFAAOCAQEAEhC35qECLRJk93Xu97LmIC+KsSsNHe04bYNT34PpDphBaoLn
aca7OmsvhKlmJor7XAFMZqKS4S1+FbgAKt/cODu25ct71LmA7ucJhQL/6WO29Aug
EzcnJJnTyZZOZ3ls8rUsRRPY28pu3ZCU7mTz4Zpq3A154+MtZAWhMAjEXKDtnjeu
YGaFzrZMYPCfq2EymGBchJed4kWPkxuyXMEsIt51pjJmNUgAXPHuVXrGPmr29mkm
O5FOstgv5+MErZQoD0XTkscTLgfmoXkjK88gbh9FhILRflfHoqnpJWKBfHM11xg/
fhYfRpGMtz+FcgUz2gGYiiUY5LVvyKXJawKDDw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:01 2026 by rpki-client