This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa
File:                     vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa (raw, json)
Hash identifier:          L/e3mOSuN9cfAoJ9MDMZ8ASC7Sltzw7RnyO6VofFQhg=
Subject key identifier:   BD:0C:F8:AB:5C:2C:EE:A9:8A:D6:94:35:BE:E0:66:A1:C6:3B:06:97
Certificate issuer:       /CN=3951f184d4df885604ca47c5397e025a2db2fcfa
Certificate serial:       019B94960695BA19D140382FAA76AEBB9C8D
Authority key identifier: 39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa
Signing time:             Tue 06 Jan 2026 18:33:38 +0000
ASPA not before:          Tue 06 Jan 2026 18:33:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31187
Providers:                AS: 15626
                          AS: 21437
                          AS: 62206
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:94:96:06:95:ba:19:d1:40:38:2f:aa:76:ae:bb:9c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3951f184d4df885604ca47c5397e025a2db2fcfa
        Validity
            Not Before: Jan  6 18:33:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd0cf8ab5c2ceea98ad69435bee066a1c63b0697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1e:6f:42:07:6e:ae:93:32:da:6f:1a:52:ab:
                    07:cb:4f:1b:9d:89:05:d9:64:d7:28:87:cf:8a:3f:
                    04:76:66:51:d2:f4:60:c4:f9:a1:b7:78:f0:11:53:
                    4d:19:13:a7:12:87:06:d8:2b:d6:03:26:5d:f7:32:
                    c9:95:7c:8b:dc:5f:01:14:b1:fd:a2:ab:de:3a:35:
                    8c:d7:37:9f:41:4e:a5:bf:40:4b:0e:2a:0d:7f:68:
                    93:bf:10:0f:4f:69:f7:02:ff:2a:26:f7:09:e2:8e:
                    62:8a:82:b4:78:96:c8:85:dd:61:25:9c:fb:0d:bc:
                    c7:9b:9b:f5:40:ef:e8:02:7d:e5:87:3b:72:43:28:
                    6d:b7:dc:25:80:42:a8:0c:6c:49:e0:a4:1d:63:84:
                    62:9a:d8:db:02:f8:3c:60:22:40:2e:3d:e9:4e:90:
                    de:29:6d:7e:9d:30:8f:3e:6b:24:40:bf:d8:18:aa:
                    f1:73:2d:25:82:0d:72:86:9e:bc:12:64:a6:91:fc:
                    da:c7:50:d1:45:8f:dc:bb:54:a1:02:a3:f8:0e:6e:
                    5b:6b:14:c8:6d:ea:71:65:36:b6:60:1c:a0:0d:0a:
                    9d:b9:b7:5c:93:9e:e2:55:ae:10:86:35:00:6f:ca:
                    85:12:3a:1e:c1:b2:3c:2e:08:51:ec:d4:b5:3b:f8:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:F8:AB:5C:2C:EE:A9:8A:D6:94:35:BE:E0:66:A1:C6:3B:06:97
            X509v3 Authority Key Identifier:
                keyid:39:51:F1:84:D4:DF:88:56:04:CA:47:C5:39:7E:02:5A:2D:B2:FC:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVHxhNTfiFYEykfFOX4CWi2y_Po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/vQz4q1ws7qmK1pQ1vuBmocY7Bpc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/3fd29b-8e32-4ded-8c97-68c4567208da/1/OVHxhNTfiFYEykfFOX4CWi2y_Po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31187

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:8c:0a:4b:62:b6:84:a6:e5:f6:7c:4d:7f:e3:f3:5b:64:
         47:ac:7f:be:3d:21:bf:8e:e7:13:ce:06:1d:ee:52:25:63:f0:
         4e:80:eb:43:45:e6:89:87:70:cc:4f:a2:65:c2:2b:52:77:a8:
         fa:f1:32:69:28:7a:55:d6:74:8f:df:fd:09:a8:eb:b6:bd:11:
         37:65:73:3f:f1:f6:6e:a5:ab:fb:9b:59:0c:5e:78:e2:a7:e9:
         4d:a1:0c:6c:a2:a8:3d:88:64:1f:03:0b:45:6d:60:05:4a:b1:
         f0:80:da:aa:c0:e7:26:88:1c:b2:2b:34:a4:3a:d9:d2:99:ea:
         c5:86:76:8b:e3:69:8b:5a:e5:d6:da:fe:08:03:31:81:5f:e5:
         75:fa:ea:a0:64:20:18:ae:07:94:dc:d2:c3:4c:3a:33:1a:a6:
         94:4a:cb:e6:14:60:8c:2a:81:24:01:c6:41:bd:22:84:03:a8:
         5a:77:9b:11:35:4d:3b:a2:20:5e:c4:51:93:5d:ff:4d:ea:19:
         82:7a:ad:9f:34:fe:52:91:05:b1:f3:81:31:c5:45:34:a5:80:
         ab:d4:4a:ad:2e:12:b1:f9:7c:ef:21:8b:14:60:ea:b3:10:c3:
         7e:41:31:a4:21:02:36:db:06:4a:e2:ee:89:5e:7b:fb:8a:e8:
         74:54:20:ed
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgISAZuUlgaVuhnRQDgvqnauu5yNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NTFmMTg0ZDRkZjg4NTYwNGNhNDdjNTM5N2UwMjVhMmRi
MmZjZmEwHhcNMjYwMTA2MTgzMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDBjZjhhYjVjMmNlZWE5OGFkNjk0MzViZWUwNjZhMWM2M2IwNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix5vQgdurpMy2m8aUqsHy08bnYkF
2WTXKIfPij8EdmZR0vRgxPmht3jwEVNNGROnEocG2CvWAyZd9zLJlXyL3F8BFLH9
oqveOjWM1zefQU6lv0BLDioNf2iTvxAPT2n3Av8qJvcJ4o5iioK0eJbIhd1hJZz7
DbzHm5v1QO/oAn3lhztyQyhtt9wlgEKoDGxJ4KQdY4RimtjbAvg8YCJALj3pTpDe
KW1+nTCPPmskQL/YGKrxcy0lgg1yhp68EmSmkfzax1DRRY/cu1ShAqP4Dm5baxTI
bepxZTa2YBygDQqdubdck57iVa4QhjUAb8qFEjoewbI8LghR7NS1O/jwewIDAQAB
o4ICAzCCAf8wHQYDVR0OBBYEFL0M+KtcLO6pitaUNb7gZqHGOwaXMB8GA1UdIwQY
MBaAFDlR8YTU34hWBMpHxTl+Alotsvz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTct
NjhjNDU2NzIwOGRhLzEvdlF6NHExd3M3cW1LMXBRMXZ1Qm1vY1k3QnBjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8zZmQyOWItOGUzMi00ZGVkLThjOTctNjhjNDU2NzIwOGRh
LzEvT1ZIeGhOVGZpRllFeWtmRk9YNENXaTJ5X1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnnTMA0GCSqGSIb3
DQEBCwUAA4IBAQBLc4wKS2K2hKbl9nxNf+PzW2RHrH++PSG/jucTzgYd7lIlY/BO
gOtDReaJh3DMT6JlwitSd6j68TJpKHpV1nSP3/0JqOu2vRE3ZXM/8fZupav7m1kM
Xnjip+lNoQxsoqg9iGQfAwtFbWAFSrHwgNqqwOcmiByyKzSkOtnSmerFhnaL42mL
WuXW2v4IAzGBX+V1+uqgZCAYrgeU3NLDTDozGqaUSsvmFGCMKoEkAcZBvSKEA6ha
d5sRNU07oiBexFGTXf9N6hmCeq2fNP5SkQWx84ExxUU0pYCr1EqtLhKx+XzvIYsU
YOqzEMN+QTGkIQI22wZK4u6JXnv7iuh0VCDt
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:07 2026 by rpki-client