This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa
File:                     qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa (raw, json)
Hash identifier:          2+W615O+Y4gCKbasO+JnvmCUxJ0u10AqlRNALnO9hbk=
Subject key identifier:   AA:37:6D:25:7B:CA:AA:B1:5D:6A:46:14:42:CA:A6:C7:E5:72:E5:F6
Certificate issuer:       /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial:       019C15E0F518CD729C357830F20E0FCC3255
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa
Signing time:             Sat 31 Jan 2026 21:06:30 +0000
ASPA not before:          Sat 31 Jan 2026 21:06:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206125
Providers:                AS: 60841
                          AS: 62553
                          AS: 199087
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:15:e0:f5:18:cd:72:9c:35:78:30:f2:0e:0f:cc:32:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
        Validity
            Not Before: Jan 31 21:06:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa376d257bcaaab15d6a461442caa6c7e572e5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:22:b9:d3:34:80:b3:24:ee:1f:1e:b1:f1:
                    6c:c1:b6:0e:3b:89:17:86:e0:cf:35:cd:e1:1e:68:
                    9d:12:0f:5e:9e:30:f0:8b:4f:b7:29:d4:e3:a9:f1:
                    47:1d:f9:77:2b:22:62:84:bc:b8:fd:e1:0f:80:72:
                    84:e5:82:bc:02:c6:63:00:8a:12:05:33:8f:c7:e2:
                    a9:e3:66:95:75:5f:2a:73:95:f8:77:fa:7f:4f:6d:
                    c5:0e:66:04:12:cb:c7:9a:96:0d:84:13:71:eb:9a:
                    04:23:b5:f3:d7:78:a4:43:2a:53:24:38:01:5b:cf:
                    fb:b4:66:e5:7b:c0:1d:4b:ac:17:14:9a:84:a8:2c:
                    35:7b:80:34:2e:c6:c5:5a:02:f0:22:90:7e:b6:fa:
                    e7:8f:ea:47:0e:7b:b6:6e:d6:8f:8f:64:21:d3:05:
                    68:06:38:3e:0b:96:48:dc:ce:62:1f:98:f8:d5:53:
                    bb:87:53:27:77:6a:92:44:a2:09:ea:62:1d:5d:b3:
                    90:0d:a1:54:b0:97:98:56:f0:a9:65:60:96:9e:c2:
                    d7:a4:5f:29:bc:50:71:45:93:a6:4f:ce:5e:7a:56:
                    3a:3c:c6:21:b0:ae:90:8c:e1:0c:c9:e2:82:be:47:
                    b2:be:6a:d8:e0:0a:7e:cd:f5:c7:d2:07:f0:49:7f:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:37:6D:25:7B:CA:AA:B1:5D:6A:46:14:42:CA:A6:C7:E5:72:E5:F6
            X509v3 Authority Key Identifier:
                keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/qjdtJXvKqrFdakYUQsqmx-Vy5fY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206125

    Signature Algorithm: sha256WithRSAEncryption
         cd:13:ed:7d:ed:53:ab:a0:ab:5e:f1:4f:33:83:7d:09:31:74:
         a0:03:1a:1c:1e:3f:6b:c9:25:b0:ba:52:ca:fa:13:a7:ec:d1:
         de:5d:62:fe:a2:4b:35:8e:20:a7:a7:e5:b6:2e:67:70:81:95:
         ec:6b:18:84:96:89:2c:f7:1a:c3:8a:52:67:23:f4:22:3b:28:
         9f:78:6e:9b:5c:82:69:e6:cf:18:ab:27:54:07:a2:1b:79:fb:
         9f:48:3b:83:ee:3c:63:88:86:83:97:61:ae:a4:71:8f:ab:49:
         37:43:e1:24:a6:4e:d8:f8:81:ca:ca:9f:d5:d6:71:43:bf:9d:
         01:c1:04:ef:ad:65:82:22:96:cd:24:3d:ae:e5:32:db:2c:f1:
         b7:99:7f:a8:cd:8d:b9:2a:87:96:8b:dc:c2:09:d7:db:0a:59:
         c0:31:ce:98:e8:66:f2:03:7f:30:0d:30:ec:e0:39:6b:bb:c0:
         82:58:64:58:82:24:95:cd:98:30:d9:00:c4:6d:49:04:9c:44:
         79:d2:b7:bb:70:1e:b5:dd:1c:f8:a1:ef:22:02:5c:60:54:45:
         be:15:a3:e4:02:22:93:78:a7:87:98:4d:f8:cd:14:25:78:1f:
         e8:75:37:29:40:b3:88:fc:7b:41:69:ee:6a:4b:fe:d6:11:d6:
         e8:b7:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:14 2026 by rpki-client