This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/TXT1GVPFMNe-cqpQPoKx9np5zss.asa
File:                     TXT1GVPFMNe-cqpQPoKx9np5zss.asa (raw, json)
Hash identifier:          +xrtnGcPiRJh6hEJ21/tsrdmMwtNp0BpUrKSFa4VyZ8=
Subject key identifier:   4D:74:F5:19:53:C5:30:D7:BE:72:AA:50:3E:82:B1:F6:7A:79:CE:CB
Certificate issuer:       /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial:       019B9DABB4D71D09A53E963DFD113A076947
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/TXT1GVPFMNe-cqpQPoKx9np5zss.asa
Signing time:             Thu 08 Jan 2026 12:53:54 +0000
ASPA not before:          Thu 08 Jan 2026 12:53:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214824
Providers:                AS: 58224
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9d:ab:b4:d7:1d:09:a5:3e:96:3d:fd:11:3a:07:69:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
        Validity
            Not Before: Jan  8 12:53:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d74f51953c530d7be72aa503e82b1f67a79cecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:59:d3:4f:c8:50:63:61:71:c2:b3:9f:bd:
                    80:7a:7f:7a:1f:c5:58:a1:df:ee:96:20:1a:36:4a:
                    7b:83:62:4e:7b:f5:aa:96:fc:73:d0:26:5d:04:dd:
                    23:08:7b:c9:49:fa:a3:7b:30:6c:a4:0d:f9:f3:fd:
                    35:93:ed:77:03:e0:44:8e:b4:f1:b2:9d:54:7c:e2:
                    4f:60:c6:ef:0f:9b:5c:2b:df:97:e6:4e:c4:d1:ff:
                    de:a6:ac:c1:45:21:1d:82:f3:70:2d:65:47:ac:8a:
                    d8:ef:56:0a:cd:2b:af:3d:3c:08:6e:f5:99:ab:31:
                    45:18:77:99:a0:f8:eb:bd:8c:12:ae:41:37:2d:86:
                    20:c8:e4:0d:0a:32:74:d8:04:dd:4b:f5:b3:56:4a:
                    5b:cd:e3:d9:bb:5b:f4:86:65:15:c1:f5:fc:f9:99:
                    dc:7b:2b:f4:f5:63:05:f4:fc:cc:1a:61:bc:cd:57:
                    51:87:87:d9:2d:9a:3e:e8:ac:e7:33:df:4e:f0:d0:
                    24:37:e9:b1:f5:0f:81:42:0f:a3:3b:a6:9a:2f:7f:
                    56:04:0c:29:3e:64:7f:ad:1a:48:fc:e7:3f:fe:af:
                    30:a6:78:69:bf:01:69:f0:5c:d5:06:25:76:5c:b3:
                    c2:73:3e:f8:cc:8a:93:44:f3:93:1c:0a:50:57:cc:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:74:F5:19:53:C5:30:D7:BE:72:AA:50:3E:82:B1:F6:7A:79:CE:CB
            X509v3 Authority Key Identifier:
                keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/TXT1GVPFMNe-cqpQPoKx9np5zss.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214824

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:55:40:6d:77:3f:52:cb:31:22:0e:70:f8:ff:67:5d:b1:
         8b:fa:50:b7:b2:ee:01:12:9b:46:9b:8a:e4:81:d3:2f:7f:44:
         ff:12:e4:c2:dc:33:e0:88:34:5f:39:b6:d7:32:28:0d:6a:a2:
         d5:f7:1a:22:92:3d:28:af:0e:eb:50:fb:3b:33:41:00:f6:44:
         b7:5d:a0:b4:ef:e6:71:18:81:da:fa:12:74:48:07:90:fb:b7:
         66:e8:56:f8:9f:d8:ad:b5:6d:79:29:fa:5d:f9:24:42:47:8b:
         5e:c6:32:5a:82:cb:32:7a:92:b7:0f:6b:30:1f:16:00:34:8d:
         c7:42:20:4a:59:4d:3b:43:d8:a2:ff:09:b7:0e:21:a3:41:a8:
         2c:89:e7:a8:d2:dc:c8:a9:63:12:7a:97:54:d0:00:e6:c0:50:
         51:38:6a:03:1a:f2:d3:26:2b:14:67:09:b1:28:2e:9a:21:eb:
         24:d4:ca:d0:15:7a:66:43:f6:f8:63:d7:26:e4:a3:8d:ce:f2:
         a5:a9:cc:17:61:ec:6c:f1:ac:11:10:80:e8:24:51:9a:1e:bd:
         a5:dc:bf:35:14:6f:85:33:1e:59:b7:40:66:f5:14:23:2a:d7:
         ee:a5:2e:3e:af:b0:d6:64:4c:1e:2a:b1:d4:89:f4:18:28:9c:
         8a:43:98:0d
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZudq7TXHQmlPpY9/RE6B2lHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjYwMTA4MTI1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDc0ZjUxOTUzYzUzMGQ3YmU3MmFhNTAzZTgyYjFmNjdhNzljZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1otZ00/IUGNhccKzn72Aen96H8VY
od/uliAaNkp7g2JOe/Wqlvxz0CZdBN0jCHvJSfqjezBspA358/01k+13A+BEjrTx
sp1UfOJPYMbvD5tcK9+X5k7E0f/epqzBRSEdgvNwLWVHrIrY71YKzSuvPTwIbvWZ
qzFFGHeZoPjrvYwSrkE3LYYgyOQNCjJ02ATdS/WzVkpbzePZu1v0hmUVwfX8+Znc
eyv09WMF9PzMGmG8zVdRh4fZLZo+6KznM99O8NAkN+mx9Q+BQg+jO6aaL39WBAwp
PmR/rRpI/Oc//q8wpnhpvwFp8FzVBiV2XLPCcz74zIqTRPOTHApQV8wJQQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFE109RlTxTDXvnKqUD6CsfZ6ec7LMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvVFhUMUdWUEZNTmUtY3FwUVBvS3g5bnA1enNzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHKDANBgkqhkiG
9w0BAQsFAAOCAQEAYtxVQG13P1LLMSIOcPj/Z12xi/pQt7LuARKbRpuK5IHTL39E
/xLkwtwz4Ig0Xzm21zIoDWqi1fcaIpI9KK8O61D7OzNBAPZEt12gtO/mcRiB2voS
dEgHkPu3ZuhW+J/YrbVteSn6XfkkQkeLXsYyWoLLMnqStw9rMB8WADSNx0IgSllN
O0PYov8Jtw4ho0GoLInnqNLcyKljEnqXVNAA5sBQUThqAxry0yYrFGcJsSgumiHr
JNTK0BV6ZkP2+GPXJuSjjc7ypanMF2HsbPGsERCA6CRRmh69pdy/NRRvhTMeWbdA
ZvUUIyrX7qUuPq+w1mRMHiqx1In0GCicikOYDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:53 2026 by rpki-client