This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa
File:                     nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (raw, json)
Hash identifier:          bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=
Subject key identifier:   9D:9D:97:C0:D1:50:2D:FD:A1:D1:22:C0:8B:97:F7:06:EC:3D:7D:1C
Certificate issuer:       /CN=fab83685739986dcd451448335573014db439a23
Certificate serial:       019C15A39EDA6EE78CE2B4F8A8B194D9F219
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa
Signing time:             Sat 31 Jan 2026 19:59:30 +0000
ASPA not before:          Sat 31 Jan 2026 19:59:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213615
Providers:                AS: 6939
                          AS: 9002
                          AS: 31898
                          AS: 50673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:15:a3:9e:da:6e:e7:8c:e2:b4:f8:a8:b1:94:d9:f2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab83685739986dcd451448335573014db439a23
        Validity
            Not Before: Jan 31 19:59:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9d9d97c0d1502dfda1d122c08b97f706ec3d7d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:ca:3d:35:7a:75:8b:e9:e2:85:e7:39:4f:
                    14:90:11:a9:53:73:ec:2d:fe:00:e4:11:fc:b4:b4:
                    e3:58:06:68:81:f0:c4:c2:ce:72:a6:31:99:24:a0:
                    4a:f3:89:02:10:f7:35:eb:92:c2:9b:cc:0d:34:ff:
                    f2:43:24:b8:6a:c8:e5:05:31:89:7e:1b:cc:23:b2:
                    53:8a:92:e1:84:7e:d4:9e:d9:3c:86:f7:4a:7e:29:
                    c2:e0:e6:22:18:bb:93:39:64:23:ec:e7:a1:cb:5a:
                    ce:1b:08:37:1c:4a:48:53:a0:c0:85:6d:c7:d1:bc:
                    d4:f2:8a:f6:39:9b:e5:27:56:2a:be:8a:e0:0b:c4:
                    8d:46:19:0c:0a:13:1b:4d:f2:30:3f:06:f5:af:0b:
                    a4:b0:0c:bd:a6:f9:b6:5b:ed:84:6b:dc:e5:5d:b8:
                    61:e5:0f:28:22:c6:88:ec:4d:fb:ef:8d:6d:21:fc:
                    2d:b2:96:77:b1:a3:66:db:7a:81:08:24:99:5e:7a:
                    bb:49:87:84:87:57:3a:9b:ee:1a:ca:c8:41:12:d9:
                    1f:cf:09:17:03:1e:b4:ec:6a:a7:f9:39:90:71:37:
                    90:9c:d0:2d:f8:c6:f5:8f:e3:42:b1:33:84:6d:e3:
                    86:b6:d0:88:69:75:43:19:5b:3e:66:1b:86:b6:d2:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:97:C0:D1:50:2D:FD:A1:D1:22:C0:8B:97:F7:06:EC:3D:7D:1C
            X509v3 Authority Key Identifier:
                keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213615

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:ae:b0:4f:89:88:d5:5a:5d:ca:01:8a:e6:98:ca:a0:63:
         56:b1:30:76:0a:b7:dc:6c:88:dd:5f:eb:3f:fd:0a:77:67:25:
         ad:cb:78:5e:a6:2b:ad:51:da:e7:08:35:f4:29:59:08:15:fb:
         02:81:f3:c2:b7:e2:c3:20:14:9a:4f:3b:e7:ea:06:76:aa:e9:
         0f:90:d7:d7:28:6c:68:ae:f1:2e:77:94:39:f5:f8:af:65:e4:
         ae:84:00:08:64:00:12:8b:14:fb:41:d2:bc:58:60:a0:1f:f0:
         bb:7e:96:5e:b1:e4:8f:85:20:be:45:e4:57:ae:a8:b3:18:52:
         01:57:c3:a2:13:9b:17:0f:2d:07:36:8d:32:69:e3:75:b2:7a:
         89:a2:11:e6:1a:7e:77:72:45:a8:70:ab:1d:9a:3b:d0:ee:41:
         44:fd:a2:ab:d4:56:f8:f1:7c:f4:a1:cc:70:3d:c3:60:82:e2:
         25:93:3a:33:84:94:e4:6e:31:01:78:45:de:af:63:a4:b7:aa:
         40:05:60:31:2a:c9:61:c3:96:4a:db:d2:c1:24:92:4f:b4:46:
         7a:9d:c3:e8:5e:ce:74:3f:03:77:1f:5c:ec:6d:5c:3c:e1:c6:
         87:32:b6:11:13:42:89:88:0f:5f:d5:a2:a1:44:6e:31:ce:37:
         75:f4:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:46 2026 by rpki-client