This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/uZNRYtNgdrkbMaL48F7y4vbVE-w.asa
File:                     uZNRYtNgdrkbMaL48F7y4vbVE-w.asa (raw, json)
Hash identifier:          YRlTGBMmfIx44h5T1EVsdcsZlEYB7YbNup0fSoBGzpY=
Subject key identifier:   B9:93:51:62:D3:60:76:B9:1B:31:A2:F8:F0:5E:F2:E2:F6:D5:13:EC
Certificate issuer:       /CN=723335b0507554ae6c6cc294750764cafd0bd688
Certificate serial:       019B856CC83A914D97B5A25BA542CFE30B43
Authority key identifier: 72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/uZNRYtNgdrkbMaL48F7y4vbVE-w.asa
Signing time:             Sat 03 Jan 2026 19:54:17 +0000
ASPA not before:          Sat 03 Jan 2026 19:54:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208790
Providers:                AS: 47272
                          AS: 50338
                          AS: 198057
                          AS: 209533
                          AS: 212895
                          AS: 214757
                          AS: 214809
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:85:6c:c8:3a:91:4d:97:b5:a2:5b:a5:42:cf:e3:0b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723335b0507554ae6c6cc294750764cafd0bd688
        Validity
            Not Before: Jan  3 19:54:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b9935162d36076b91b31a2f8f05ef2e2f6d513ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:0f:0f:a6:3b:43:f3:e4:72:57:08:6f:c8:
                    e4:58:03:46:68:bb:50:2b:ac:2c:f0:59:60:3a:4b:
                    19:93:a2:d1:9e:e2:2d:af:6b:37:22:f2:b1:b4:8a:
                    0b:18:c7:c8:05:2d:b6:7f:93:78:ea:29:13:df:61:
                    dc:cf:60:34:f3:ae:07:63:22:2e:49:02:79:a5:db:
                    24:fe:2c:b8:46:24:c7:4b:b4:d4:26:bd:f5:f1:44:
                    48:97:a4:09:46:b7:f1:98:65:4d:f2:ac:30:c5:ad:
                    88:05:2b:b2:b0:54:c0:f0:0e:ac:78:af:44:50:e1:
                    3e:1e:42:02:75:3f:5c:3e:27:76:c4:6c:30:e8:7a:
                    e4:70:47:94:11:d3:2d:09:11:d6:23:02:7c:91:2f:
                    76:57:2b:93:db:74:62:1d:f3:f4:93:58:aa:a7:b9:
                    26:1d:86:0b:a8:f3:52:20:07:bc:d3:1a:e2:0d:f9:
                    5b:33:63:be:e0:36:19:21:91:15:dc:19:16:0c:46:
                    d3:81:9a:94:34:8d:47:a8:2d:25:62:40:7a:37:7f:
                    98:b8:07:b2:92:4e:29:91:ec:1d:bd:68:2a:cc:73:
                    82:e3:47:db:d4:6a:71:5c:d9:0a:ed:bd:5f:d3:58:
                    a7:44:bb:9c:01:ec:ec:9b:4d:6a:3c:ad:9c:95:8e:
                    4e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:51:62:D3:60:76:B9:1B:31:A2:F8:F0:5E:F2:E2:F6:D5:13:EC
            X509v3 Authority Key Identifier:
                keyid:72:33:35:B0:50:75:54:AE:6C:6C:C2:94:75:07:64:CA:FD:0B:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjM1sFB1VK5sbMKUdQdkyv0L1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/uZNRYtNgdrkbMaL48F7y4vbVE-w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/da558e-6075-45d6-bdb6-c08b7bb461a7/1/cjM1sFB1VK5sbMKUdQdkyv0L1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208790

    Signature Algorithm: sha256WithRSAEncryption
         79:29:fd:06:6e:09:a8:b7:31:e7:e8:dd:02:ee:70:25:88:29:
         b1:50:b0:7d:3c:0f:b1:70:c9:a5:76:59:eb:d0:9a:b4:03:ca:
         1c:5f:33:2b:22:ee:0e:55:a8:93:f6:5e:51:ec:19:86:55:32:
         10:dd:82:42:a3:8d:af:6d:59:b4:a8:1a:db:ed:9a:26:c6:4b:
         85:a3:e6:3a:2b:6a:7d:18:2d:35:00:f0:bd:2a:d4:80:72:74:
         36:c8:49:e3:bb:65:54:37:9f:1f:05:22:35:ea:e4:96:7c:b6:
         8e:90:ac:d1:2e:1a:e6:3c:66:66:c1:88:66:d8:dd:a5:7b:85:
         0b:10:5f:d8:5f:f5:ad:1d:6e:6f:64:c3:a9:c9:18:6d:6a:d9:
         93:9a:ef:9c:c8:92:5e:22:b5:b0:01:87:ca:82:8c:0d:2e:fa:
         f7:d8:a7:7a:a0:55:11:75:a1:3c:0d:91:1b:a3:d5:3d:95:30:
         4e:c4:9b:70:bb:4f:7f:13:16:31:e7:de:48:cf:43:c9:33:17:
         a3:ad:4b:a5:dc:1a:20:5f:c4:e8:c0:79:2a:b6:ab:aa:d5:cd:
         3a:97:76:c0:ae:85:31:b9:5a:c3:09:d8:a9:c4:0f:f1:00:7d:
         95:7b:80:e0:6c:c5:b9:87:c7:f0:9e:01:ec:f7:31:fb:5b:b6:
         ce:bf:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 12:13:58 2026 by rpki-client