This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa
File:                     jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa (raw, json)
Hash identifier:          qxuliQjoknAXmEjclXw7gD+kEmDxgV1U5FrECOviQhg=
Subject key identifier:   8D:F4:F5:C2:4F:C2:CF:C8:3E:76:AD:1E:F0:8B:E8:21:BC:70:A6:68
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019BEAB68B0E81AC4A7562E2F409E3583BF8
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa
Signing time:             Fri 23 Jan 2026 11:56:30 +0000
ASPA not before:          Fri 23 Jan 2026 11:56:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39728
Providers:                AS: 3216
                          AS: 12389
                          AS: 31500
                          AS: 41039
                          AS: 50509
                          AS: 198310
                          AS: 201706
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ea:b6:8b:0e:81:ac:4a:75:62:e2:f4:09:e3:58:3b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Jan 23 11:56:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8df4f5c24fc2cfc83e76ad1ef08be821bc70a668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:19:b3:33:3d:38:77:42:41:b7:e2:55:c3:
                    bd:4a:cc:73:88:fc:52:26:54:e3:50:a4:d1:7a:06:
                    3c:5c:31:e4:a4:94:62:a9:aa:2b:68:27:f4:01:39:
                    0e:00:34:93:0a:54:51:72:69:50:af:f7:28:43:32:
                    44:15:a0:42:8a:b1:d8:a5:bd:d8:db:d2:e2:c4:ae:
                    54:94:b4:bc:dd:14:39:54:2c:31:5b:b6:70:47:7f:
                    45:66:91:83:2d:bf:c9:ba:aa:54:fd:90:61:f5:e0:
                    44:f8:a8:30:c7:b7:f5:3b:e0:f4:0d:aa:5b:74:b4:
                    3a:e2:e7:c1:b3:9d:c3:1e:fe:24:65:0c:c7:34:e7:
                    fc:86:75:86:1a:78:7d:6c:79:8f:ff:bf:44:e2:c1:
                    03:a4:b1:5f:cf:9a:9f:83:39:43:82:84:c7:50:c9:
                    f2:7e:10:02:6e:5d:31:9b:03:e0:52:ab:15:f0:47:
                    0e:33:69:b1:37:39:72:ac:d7:4e:75:21:6e:c4:a4:
                    56:c5:2a:65:53:e5:63:e2:b5:b2:86:5e:99:ea:f1:
                    f7:7a:d2:f6:9e:fc:58:7d:83:91:88:9e:71:46:39:
                    1f:b9:fd:9c:47:8c:26:b6:9c:76:6b:71:f3:4c:99:
                    90:f0:2f:0c:63:be:9e:bc:b4:9a:3e:3a:6b:60:a1:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F4:F5:C2:4F:C2:CF:C8:3E:76:AD:1E:F0:8B:E8:21:BC:70:A6:68
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/jfT1wk_Cz8g-dq0e8IvoIbxwpmg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39728

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:3e:e5:c6:d5:c1:ef:b1:4f:a5:a3:37:1c:4e:8f:42:95:
         bf:56:ae:7e:e6:f5:17:69:b8:2b:7a:92:59:7d:eb:a0:9a:8d:
         d1:b5:4d:31:60:59:37:ce:b3:73:3d:91:05:93:30:64:9c:26:
         48:31:71:1a:40:d6:00:28:23:b6:ee:eb:e1:ca:96:8e:3d:78:
         f3:33:dd:fa:84:f2:7a:18:28:80:5f:8e:9e:d5:5d:66:06:80:
         9c:8c:10:19:07:5f:99:c2:99:51:ca:f8:73:87:ee:f2:d9:3d:
         7b:74:c2:4f:d1:3f:bc:35:ae:57:f0:51:63:36:d2:29:1c:b4:
         7b:13:66:f8:80:29:e3:bc:14:d7:7e:97:48:39:70:cb:16:2d:
         b8:fb:4d:f0:a3:e3:de:7e:ca:b5:09:ab:59:6c:54:90:0e:be:
         6c:f2:9a:fb:5b:5b:1f:cd:b4:03:9e:c2:85:64:b1:9a:bc:09:
         1b:17:9a:9b:82:4a:03:28:3c:9e:83:71:25:d4:eb:9a:1f:72:
         ff:18:d1:ad:b1:a3:ad:55:39:2c:29:ab:8d:da:4d:cb:6f:9c:
         19:5d:e1:f3:2b:96:6b:64:f1:e1:ea:d5:9c:94:1a:ef:02:08:
         67:25:5a:1b:29:47:61:1f:52:f1:ff:e9:70:3f:8d:84:e5:21:
         b4:87:76:6c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvqtosOgaxKdWLi9AnjWDv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTVhMDY5NjY5ZWQ1YTc2NmVlZThlYmRjMzJlMzlmYjE0
ODQxMGIwHhcNMjYwMTIzMTE1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGY0ZjVjMjRmYzJjZmM4M2U3NmFkMWVmMDhiZTgyMWJjNzBhNjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwAZszM9OHdCQbfiVcO9SsxziPxS
JlTjUKTRegY8XDHkpJRiqaoraCf0ATkOADSTClRRcmlQr/coQzJEFaBCirHYpb3Y
29LixK5UlLS83RQ5VCwxW7ZwR39FZpGDLb/JuqpU/ZBh9eBE+Kgwx7f1O+D0Dapb
dLQ64ufBs53DHv4kZQzHNOf8hnWGGnh9bHmP/79E4sEDpLFfz5qfgzlDgoTHUMny
fhACbl0xmwPgUqsV8EcOM2mxNzlyrNdOdSFuxKRWxSplU+Vj4rWyhl6Z6vH3etL2
nvxYfYORiJ5xRjkfuf2cR4wmtpx2a3HzTJmQ8C8MY76evLSaPjprYKHq3QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFI309cJPws/IPnatHvCL6CG8cKZoMB8GA1UdIwQY
MBaAFB6VoGlmntWnZu7o69wy45+xSEELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAt
OTMzYmZhNTkyYjFkLzEvamZUMXdrX0N6OGctZHEwZThJdm9JYnh3cG1nLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAtOTMzYmZhNTkyYjFk
LzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCbMDANBgkqhkiG
9w0BAQsFAAOCAQEARGo+5cbVwe+xT6WjNxxOj0KVv1aufub1F2m4K3qSWX3roJqN
0bVNMWBZN86zcz2RBZMwZJwmSDFxGkDWACgjtu7r4cqWjj148zPd+oTyehgogF+O
ntVdZgaAnIwQGQdfmcKZUcr4c4fu8tk9e3TCT9E/vDWuV/BRYzbSKRy0exNm+IAp
47wU136XSDlwyxYtuPtN8KPj3n7KtQmrWWxUkA6+bPKa+1tbH820A57ChWSxmrwJ
Gxeam4JKAyg8noNxJdTrmh9y/xjRrbGjrVU5LCmrjdpNy2+cGV3h8yuWa2Tx4erV
nJQa7wIIZyVaGylHYR9S8f/pcD+NhOUhtId2bA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:10 2026 by rpki-client