This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa
File:                     EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa (raw, json)
Hash identifier:          /VjX2BQnC3wIjMi5VEBP8mPkyeVmam6lGlm8WGBjxBI=
Subject key identifier:   10:A0:C2:3E:15:8F:B3:7D:25:D0:34:AB:0F:D6:63:0F:5B:45:42:4C
Certificate issuer:       /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial:       019C0288DEBA2445B63C983D2BFD2D4DA90C
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa
Signing time:             Wed 28 Jan 2026 02:57:30 +0000
ASPA not before:          Wed 28 Jan 2026 02:57:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208563
Providers:                AS: 6939
                          AS: 31142
                          AS: 34549
                          AS: 34854
                          AS: 34927
                          AS: 41051
                          AS: 47498
                          AS: 58299
                          AS: 202409
                          AS: 207960
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:02:88:de:ba:24:45:b6:3c:98:3d:2b:fd:2d:4d:a9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
        Validity
            Not Before: Jan 28 02:57:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10a0c23e158fb37d25d034ab0fd6630f5b45424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:53:79:4d:c6:f0:36:f9:33:bf:71:68:ce:
                    07:78:84:6f:cf:40:18:9c:3d:7f:9d:e4:fd:6d:7b:
                    c8:04:5e:ba:dd:1b:ba:5f:7f:4d:52:fe:96:8f:fc:
                    68:27:f3:a0:fe:4b:01:33:63:f6:2b:02:72:c0:60:
                    b3:83:c9:59:e6:85:f0:c3:fa:dd:76:1a:36:3f:78:
                    39:f5:8e:60:7a:6f:00:5f:d5:3a:e5:69:82:b0:01:
                    36:f6:cf:d7:e4:9e:4c:f2:03:a6:6a:47:f7:81:f1:
                    ca:74:6b:02:87:9a:99:f6:0f:96:c1:6a:b1:f2:85:
                    32:62:d7:ef:f6:8c:f2:94:25:a4:ee:bf:06:3f:1e:
                    c1:82:b9:6d:62:ca:14:e6:89:c0:82:79:e0:60:6c:
                    6a:68:08:c4:7e:b4:34:46:d3:fd:b3:69:f0:b5:19:
                    80:ad:34:dd:36:01:c8:c0:ee:e3:24:f1:28:0c:d2:
                    57:2a:51:f3:e7:e6:65:58:55:df:fe:2d:89:07:9e:
                    c7:8f:45:66:21:0b:43:cb:61:20:35:41:be:ec:80:
                    94:08:4e:a4:aa:58:2f:65:2c:62:e2:52:f5:0b:62:
                    8a:60:fe:f0:95:90:64:29:ec:55:f0:36:8e:21:04:
                    c2:0d:0e:2f:12:df:24:93:c2:8d:11:b0:3a:31:d0:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:C2:3E:15:8F:B3:7D:25:D0:34:AB:0F:D6:63:0F:5B:45:42:4C
            X509v3 Authority Key Identifier:
                keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208563

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:21:64:00:d7:e5:b8:56:44:a5:01:95:09:87:10:6e:df:
         34:58:e3:6d:f7:31:7f:b7:45:e8:5b:53:b8:92:5e:fd:29:ce:
         82:d4:9d:61:27:d2:ed:73:43:b6:5f:22:45:90:84:ce:17:f5:
         7d:95:fd:47:05:76:df:9d:6c:f3:d5:e7:e8:12:e6:09:69:a0:
         8b:95:da:b8:f9:f3:a4:43:6e:f5:9a:77:18:51:3b:78:f9:aa:
         d5:66:57:6e:be:35:73:29:65:b5:5e:94:66:c3:2f:9d:4b:f7:
         11:96:20:23:de:98:94:55:f3:a8:6e:6b:50:a2:4e:f2:90:3c:
         99:60:e3:62:11:83:7d:49:29:90:c7:07:48:ff:6b:3e:8b:61:
         ac:b8:83:5c:e3:54:a4:69:7c:c6:6a:c4:3b:fb:fd:bd:2b:b4:
         4f:3b:23:aa:28:d7:64:28:de:d6:d1:d5:3c:9f:f9:2a:46:5b:
         48:ba:ed:f0:5f:13:00:8e:09:76:c2:83:5a:eb:de:d4:61:1c:
         6c:05:17:c8:6f:28:77:8f:f8:5c:2b:79:19:a3:52:02:55:9b:
         ab:6e:a5:0d:8c:9d:ce:7a:0b:38:d0:b7:06:8c:45:12:35:95:
         90:fb:54:98:d9:de:f2:3b:ec:05:0e:ea:94:bf:88:28:da:e7:
         4c:47:a7:65
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwCiN66JEW2PJg9K/0tTakMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5
MmM4YjcwHhcNMjYwMTI4MDI1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGEwYzIzZTE1OGZiMzdkMjVkMDM0YWIwZmQ2NjMwZjViNDU0MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldTeU3G8Db5M79xaM4HeIRvz0AY
nD1/neT9bXvIBF663Ru6X39NUv6Wj/xoJ/Og/ksBM2P2KwJywGCzg8lZ5oXww/rd
dho2P3g59Y5gem8AX9U65WmCsAE29s/X5J5M8gOmakf3gfHKdGsCh5qZ9g+WwWqx
8oUyYtfv9ozylCWk7r8GPx7BgrltYsoU5onAgnngYGxqaAjEfrQ0RtP9s2nwtRmA
rTTdNgHIwO7jJPEoDNJXKlHz5+ZlWFXf/i2JB57Hj0VmIQtDy2EgNUG+7ICUCE6k
qlgvZSxi4lL1C2KKYP7wlZBkKexV8DaOIQTCDQ4vEt8kk8KNEbA6MdCkvwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBCgwj4Vj7N9JdA0qw/WYw9bRUJMMB8GA1UdIwQY
MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt
NmIwMzVjZWUxOTgxLzEvRUtEQ1BoV1BzMzBsMERTckQ5WmpEMXRGUWt3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx
LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuszANBgkqhkiG
9w0BAQsFAAOCAQEAI4shZADX5bhWRKUBlQmHEG7fNFjjbfcxf7dF6FtTuJJe/SnO
gtSdYSfS7XNDtl8iRZCEzhf1fZX9RwV2351s89Xn6BLmCWmgi5XauPnzpENu9Zp3
GFE7ePmq1WZXbr41cylltV6UZsMvnUv3EZYgI96YlFXzqG5rUKJO8pA8mWDjYhGD
fUkpkMcHSP9rPothrLiDXONUpGl8xmrEO/v9vSu0TzsjqijXZCje1tHVPJ/5KkZb
SLrt8F8TAI4JdsKDWuve1GEcbAUXyG8od4/4XCt5GaNSAlWbq26lDYydznoLONC3
BoxFEjWVkPtUmNne8jvsBQ7qlL+IKNrnTEenZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:01 2026 by rpki-client