This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/0yV_DKUM90E6Draf6I0oRvAGk5k.asa
File:                     0yV_DKUM90E6Draf6I0oRvAGk5k.asa (raw, json)
Hash identifier:          boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=
Subject key identifier:   D3:25:7F:0C:A5:0C:F7:41:3A:0E:B6:9F:E8:8D:28:46:F0:06:93:99
Certificate issuer:       /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial:       019C15FA97C5293E2312E806113A51BA7B62
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/0yV_DKUM90E6Draf6I0oRvAGk5k.asa
Signing time:             Sat 31 Jan 2026 21:34:30 +0000
ASPA not before:          Sat 31 Jan 2026 21:34:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216443
Providers:                AS: 215528
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:15:fa:97:c5:29:3e:23:12:e8:06:11:3a:51:ba:7b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
        Validity
            Not Before: Jan 31 21:34:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3257f0ca50cf7413a0eb69fe88d2846f0069399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:38:c4:cf:9e:1d:0b:18:01:06:98:87:73:
                    3d:07:64:2f:e7:7e:74:d5:6e:dc:63:49:fc:df:e5:
                    e7:47:d2:e0:21:93:d4:50:09:84:d3:1a:9f:70:35:
                    b8:e7:7f:0f:c1:e3:d6:68:a8:47:c5:89:47:af:df:
                    03:5b:c5:0c:20:fe:78:35:cf:10:e0:7e:d3:5b:9a:
                    d9:35:61:b8:0e:62:9a:73:c9:da:ce:e4:62:f3:b6:
                    8d:6a:dc:2e:af:08:a5:e2:a8:ee:09:8a:57:67:d0:
                    c4:7b:1a:07:13:41:45:d0:10:90:38:03:74:12:4c:
                    47:9d:41:1e:fe:d2:83:2c:73:b0:d9:73:57:0d:e1:
                    6b:7e:12:cc:9d:c1:67:e0:b1:3f:a0:7b:46:b2:ac:
                    d6:d8:c8:a7:29:a0:34:fa:f1:32:73:0a:78:ac:bf:
                    cf:d7:1a:98:27:84:e8:ae:ca:cf:0a:10:ad:54:84:
                    59:cc:ce:a7:12:ac:c0:06:db:46:5d:23:99:a3:a1:
                    27:95:43:00:d9:f4:b5:ba:52:3e:50:25:03:0a:ec:
                    aa:fd:cd:75:dd:c9:1f:bb:a3:34:c4:98:21:55:67:
                    25:f2:e9:9d:62:b1:15:26:6d:96:0f:a2:4b:59:88:
                    f7:82:0e:d1:f5:f1:9f:25:36:2a:de:d7:37:5c:62:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:25:7F:0C:A5:0C:F7:41:3A:0E:B6:9F:E8:8D:28:46:F0:06:93:99
            X509v3 Authority Key Identifier:
                keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/0yV_DKUM90E6Draf6I0oRvAGk5k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216443

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:58:69:23:a6:2d:fe:39:8c:e9:94:bc:ea:f5:a9:e4:70:
         0e:62:40:95:d5:fb:36:66:e6:12:c5:8a:7c:79:09:0b:f9:ef:
         6b:7d:1d:7d:7e:ac:7f:f2:8c:ed:a0:f5:40:ef:9d:04:22:08:
         cb:be:2c:bf:4f:2c:61:6c:bd:d6:31:41:8a:5a:61:33:7c:b3:
         19:90:70:7e:0a:62:8f:6c:01:3b:3c:fa:29:06:69:56:85:12:
         06:03:f6:82:16:ba:bf:f5:e1:cc:ef:38:72:8a:50:e5:eb:79:
         94:94:e7:c1:19:db:e4:49:3e:54:5b:72:42:37:46:9a:f9:6a:
         be:c9:6c:a0:60:b1:a9:10:48:71:92:99:37:0e:cc:14:dc:36:
         2d:c1:27:09:e9:71:a9:6f:74:f2:f1:66:c4:83:5d:33:46:5f:
         07:8e:0c:ce:92:69:9e:24:2e:27:b4:ba:1a:fb:34:fb:9a:3e:
         25:89:6b:81:39:7c:80:af:e9:b4:b0:f8:e1:97:6a:6c:fd:9b:
         8c:c9:d3:a8:bc:ec:52:f6:63:53:96:c6:5b:c1:af:14:6a:cc:
         62:ee:0d:b2:d6:fb:60:32:5d:ef:a9:cb:d2:e7:97:54:3d:85:
         33:d9:55:d3:fb:7d:6b:4e:d7:c4:7f:a1:03:8e:56:80:45:06:
         95:fb:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:25 2026 by rpki-client