This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/qOxZbeQcH3nmMujSCPVKvHl_hII.asa
File:                     qOxZbeQcH3nmMujSCPVKvHl_hII.asa (raw, json)
Hash identifier:          ASwjCTML65AJz8INpKtIJ9HsxUbvMPMUPCfyNp/UqwE=
Subject key identifier:   A8:EC:59:6D:E4:1C:1F:79:E6:32:E8:D2:08:F5:4A:BC:79:7F:84:82
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       019B88E044C0AB9DAA4164A352F588C1190D
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/qOxZbeQcH3nmMujSCPVKvHl_hII.asa
Signing time:             Sun 04 Jan 2026 11:59:17 +0000
ASPA not before:          Sun 04 Jan 2026 11:59:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212271
Providers:                AS: 174
                          AS: 39120
                          AS: 49245
                          AS: 57142
                          AS: 216309
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:88:e0:44:c0:ab:9d:aa:41:64:a3:52:f5:88:c1:19:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  4 11:59:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a8ec596de41c1f79e632e8d208f54abc797f8482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:7c:a9:b6:17:ef:39:33:dd:cd:bd:30:28:
                    bf:bd:ae:b5:04:36:51:b2:81:98:29:c6:e5:e3:ec:
                    26:f0:a9:4b:ba:8e:e0:cb:37:49:37:9c:42:2a:48:
                    51:c8:f6:0a:c4:fd:f6:df:55:44:43:9f:27:03:8a:
                    fc:cd:cb:f4:14:0a:50:d5:e5:f3:f0:ab:f9:2b:c5:
                    c6:bb:ca:b6:81:be:2c:62:8a:e5:6c:b1:2d:cf:73:
                    84:dc:9b:79:3e:8a:2a:e9:d2:4e:e4:59:ef:ad:d3:
                    2e:6a:87:4e:39:d6:85:37:40:0d:04:72:f0:48:e6:
                    c2:f7:89:6e:3b:dd:34:12:37:27:7e:cb:d5:2e:c3:
                    09:48:89:3f:b9:54:f1:51:8e:a3:ba:e0:48:d5:d0:
                    b9:67:e6:c9:51:bc:89:3b:92:65:73:bc:6f:82:3e:
                    28:11:31:bc:b7:1c:f2:94:4e:d0:8a:0a:2c:f5:fe:
                    51:95:31:46:65:44:2d:eb:99:19:12:b0:be:a5:e1:
                    04:c2:83:ad:d8:39:26:76:78:de:25:1f:5e:ed:1a:
                    25:4e:62:6d:9c:96:4e:f4:4c:f0:84:82:93:31:c6:
                    94:37:84:8b:38:b5:34:aa:3c:b1:ce:ac:78:d3:43:
                    18:34:d2:43:8f:02:e8:44:3e:e2:21:40:f2:62:43:
                    7f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:59:6D:E4:1C:1F:79:E6:32:E8:D2:08:F5:4A:BC:79:7F:84:82
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/qOxZbeQcH3nmMujSCPVKvHl_hII.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212271

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:af:99:c2:14:28:d9:4c:c5:3c:2f:9b:d3:7c:cd:9f:9c:
         08:d8:bc:a6:5e:15:8e:bf:8c:77:ae:94:5e:ae:0b:5a:35:ad:
         40:ce:34:5d:a6:df:0e:6e:d6:45:32:9f:af:d7:a1:03:37:8b:
         8f:9a:2e:ec:eb:7e:d1:3a:90:03:28:c5:3d:b4:7a:1d:3a:27:
         74:a8:84:e8:33:c6:52:92:71:65:c1:b3:8d:95:39:53:a4:92:
         c1:76:15:07:3f:71:64:55:20:88:0a:cc:56:a9:ef:b6:19:82:
         4f:d4:06:0e:cc:c6:59:ef:7c:23:22:79:8d:dd:36:fc:52:74:
         b7:a7:0b:55:13:e9:64:f9:6d:6e:36:31:7b:de:e7:86:a4:7a:
         d0:3e:80:e0:95:72:af:5d:9e:bb:7e:ff:0d:e1:39:66:0b:72:
         71:ac:6a:9c:d9:bf:65:39:18:ba:37:00:e6:3d:8a:a4:04:a8:
         a1:e5:a6:54:43:09:d3:19:c8:c3:6b:e8:61:6c:5f:f6:70:bb:
         8e:cd:64:97:67:8b:04:b0:ee:f5:54:13:f0:48:14:42:56:49:
         14:f5:68:74:69:4b:80:77:10:f4:7c:21:fa:25:5c:28:77:17:
         01:56:c9:b0:bf:9a:ba:50:8f:ff:e6:c4:0a:88:f6:bf:83:be:
         17:8a:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:16:02 2026 by rpki-client