This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/u7jMNIMMII00JBcKO8wDUJlUVU4.asa
File:                     u7jMNIMMII00JBcKO8wDUJlUVU4.asa (raw, json)
Hash identifier:          zA/s57FfxROY3FHHSRpxczkmgyVm2XOsYnoz6z+SZ2I=
Subject key identifier:   BB:B8:CC:34:83:0C:20:8D:34:24:17:0A:3B:CC:03:50:99:54:55:4E
Certificate issuer:       /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial:       019BFA6177D7C3924E49991B0B857F5C5A85
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/u7jMNIMMII00JBcKO8wDUJlUVU4.asa
Signing time:             Mon 26 Jan 2026 12:57:30 +0000
ASPA not before:          Mon 26 Jan 2026 12:57:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197205
Providers:                AS: 174
                          AS: 1299
                          AS: 5511
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:61:77:d7:c3:92:4e:49:99:1b:0b:85:7f:5c:5a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
        Validity
            Not Before: Jan 26 12:57:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bbb8cc34830c208d3424170a3bcc03509954554e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:c3:2f:83:14:5f:30:58:28:83:26:0c:e4:
                    07:2c:5b:01:09:fc:82:e1:51:f8:77:f6:83:20:e0:
                    fa:d7:b7:b4:67:77:a7:87:fc:c9:1b:28:9b:da:11:
                    60:86:c5:e0:5c:31:5c:12:e5:68:94:52:04:c7:44:
                    9c:b8:b1:7b:5c:d6:a1:d4:69:9c:b2:ef:20:4a:3d:
                    89:8d:cb:d1:c5:6d:8e:67:81:0f:b7:d9:48:19:f8:
                    d1:0e:93:b5:8b:e0:38:db:00:90:b7:ab:8e:5c:ca:
                    ae:02:29:59:2d:70:34:0a:d5:0d:df:df:50:29:e5:
                    9d:82:55:01:2c:9e:14:a0:c8:d8:9c:65:ce:66:f6:
                    7c:9f:0f:66:94:a4:08:2d:d6:d5:28:55:c1:67:e7:
                    18:e4:bb:6e:49:8b:da:f4:44:ea:01:d5:a6:31:7e:
                    3c:9b:17:7e:2b:47:1b:24:c2:bc:26:1b:3a:1a:98:
                    f9:4e:57:ff:a4:c5:43:f5:9c:ba:fb:bf:d8:7f:5e:
                    d6:aa:be:24:72:3b:27:90:b6:42:20:8c:15:ec:75:
                    1e:c8:31:d5:06:47:9c:5c:2c:ce:cb:83:c0:6e:61:
                    a4:04:fa:15:50:ec:63:6f:52:19:4f:22:80:2d:54:
                    c4:b7:dd:86:a7:01:72:86:5d:51:73:a5:48:f5:fd:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B8:CC:34:83:0C:20:8D:34:24:17:0A:3B:CC:03:50:99:54:55:4E
            X509v3 Authority Key Identifier:
                keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/u7jMNIMMII00JBcKO8wDUJlUVU4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197205

    Signature Algorithm: sha256WithRSAEncryption
         97:56:35:d6:f4:5b:b7:19:2e:79:28:1b:2a:12:cc:e2:9e:7a:
         ff:7b:9b:ab:ae:91:e7:52:85:bb:70:a4:7d:ae:d6:d0:fb:44:
         e6:4f:ea:d1:fb:be:8c:6d:84:61:dc:8c:c5:7d:62:9f:44:d9:
         20:e7:8a:e4:23:47:25:3e:f7:96:62:70:b0:10:7d:37:86:1a:
         3a:54:ba:1f:c8:60:0a:00:f8:e8:b0:c5:45:3e:88:fd:b1:bd:
         61:76:bf:ae:d1:04:b6:82:03:9b:c1:23:d2:14:45:af:4f:51:
         25:4c:25:9f:64:ae:cc:86:e0:5f:2a:75:e8:29:90:de:bd:4a:
         b0:5b:cb:97:96:2c:35:c5:47:ab:73:a6:d3:af:ff:13:7c:4b:
         3c:cb:b3:60:9c:18:cf:34:34:3b:35:86:61:3f:1c:ae:86:95:
         2f:b4:82:47:b1:35:5e:df:3d:09:cb:8a:8c:a9:92:9b:16:57:
         b5:64:4d:58:93:9c:22:16:7a:3e:fb:cc:2d:d0:b5:32:bf:75:
         7d:b2:86:74:a9:71:15:c0:22:aa:f7:bb:ef:2c:9e:ce:3f:7b:
         39:44:7b:fb:17:14:68:59:07:0f:9f:97:42:63:b6:08:25:c8:
         db:56:f7:5e:0d:eb:60:6b:44:1f:e1:32:a9:04:93:4e:24:35:
         5c:1a:2e:29
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZv6YXfXw5JOSZkbC4V/XFqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm
MTllZTAwHhcNMjYwMTI2MTI1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmI4Y2MzNDgzMGMyMDhkMzQyNDE3MGEzYmNjMDM1MDk5NTQ1NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrfDL4MUXzBYKIMmDOQHLFsBCfyC
4VH4d/aDIOD617e0Z3enh/zJGyib2hFghsXgXDFcEuVolFIEx0ScuLF7XNah1Gmc
su8gSj2JjcvRxW2OZ4EPt9lIGfjRDpO1i+A42wCQt6uOXMquAilZLXA0CtUN399Q
KeWdglUBLJ4UoMjYnGXOZvZ8nw9mlKQILdbVKFXBZ+cY5LtuSYva9ETqAdWmMX48
mxd+K0cbJMK8Jhs6Gpj5Tlf/pMVD9Zy6+7/Yf17Wqr4kcjsnkLZCIIwV7HUeyDHV
BkecXCzOy4PAbmGkBPoVUOxjb1IZTyKALVTEt92GpwFyhl1Rc6VI9f1ugQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLu4zDSDDCCNNCQXCjvMA1CZVFVOMB8GA1UdIwQY
MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt
NDM2MGVlMDZhMjJjLzEvdTdqTU5JTU1JSTAwSkJjS084d0RVSmxVVlU0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj
LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCVTANBgkqhkiG
9w0BAQsFAAOCAQEAl1Y11vRbtxkueSgbKhLM4p56/3ubq66R51KFu3Ckfa7W0PtE
5k/q0fu+jG2EYdyMxX1in0TZIOeK5CNHJT73lmJwsBB9N4YaOlS6H8hgCgD46LDF
RT6I/bG9YXa/rtEEtoIDm8Ej0hRFr09RJUwln2SuzIbgXyp16CmQ3r1KsFvLl5Ys
NcVHq3Om06//E3xLPMuzYJwYzzQ0OzWGYT8croaVL7SCR7E1Xt89CcuKjKmSmxZX
tWRNWJOcIhZ6PvvMLdC1Mr91fbKGdKlxFcAiqve77yyezj97OUR7+xcUaFkHD5+X
QmO2CCXI21b3Xg3rYGtEH+EyqQSTTiQ1XBouKQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:50 2026 by rpki-client