This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/bWOm_rxxwcbWaTmu2SnHiIL1r88.asa
File:                     bWOm_rxxwcbWaTmu2SnHiIL1r88.asa (raw, json)
Hash identifier:          QCA4tD64a2YOFOaYQUc8hAaRjVEoTC+6/Xd9DFb0omA=
Subject key identifier:   6D:63:A6:FE:BC:71:C1:C6:D6:69:39:AE:D9:29:C7:88:82:F5:AF:CF
Certificate issuer:       /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial:       019C0F66F046FFFEE4D88C517CA69B32A9B1
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/bWOm_rxxwcbWaTmu2SnHiIL1r88.asa
Signing time:             Fri 30 Jan 2026 14:55:30 +0000
ASPA not before:          Fri 30 Jan 2026 14:55:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62392
Providers:                AS: 8220
                          AS: 8368
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:66:f0:46:ff:fe:e4:d8:8c:51:7c:a6:9b:32:a9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
        Validity
            Not Before: Jan 30 14:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d63a6febc71c1c6d66939aed929c78882f5afcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:7c:c7:82:6d:9a:45:9e:c1:d5:75:72:3f:
                    14:7c:76:4e:a2:9e:1b:44:6f:72:36:4b:a0:e2:8f:
                    c2:b7:f2:13:8e:a6:67:1c:e6:87:18:c0:a3:49:99:
                    19:1c:bf:96:c4:fb:1b:bb:2a:21:f8:58:13:4a:43:
                    19:8e:fd:10:41:4f:2b:e3:4b:3e:24:dc:40:a5:68:
                    43:a7:c9:fd:37:a5:84:a1:0b:72:dc:bd:f6:c8:52:
                    b8:b0:0b:aa:f3:65:7a:97:0b:15:4e:21:68:6f:5e:
                    4d:85:08:95:58:94:18:f7:a7:dc:6e:fc:af:70:77:
                    32:fa:b1:3a:83:35:cd:78:32:3e:a1:67:c0:d5:b8:
                    f1:94:3a:76:a7:0c:e5:f5:d4:b7:b5:43:0c:5a:ca:
                    ca:c4:fc:c6:2e:8b:93:7a:6d:a8:5d:cd:57:bf:88:
                    cd:05:b3:e3:30:00:ac:28:ff:e2:f3:8b:ea:d6:db:
                    8f:57:11:25:40:b6:ee:20:cb:c3:1c:12:52:55:55:
                    1c:ee:65:df:94:44:6b:62:e6:6c:9b:63:bb:dd:34:
                    03:55:1b:52:64:6d:6c:1f:8f:11:a6:8d:53:ee:c4:
                    bd:70:e2:be:52:5f:57:54:31:7c:ef:d9:25:e6:7d:
                    ef:7f:e8:51:b6:94:fe:6c:e8:ea:40:87:4e:76:f6:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:A6:FE:BC:71:C1:C6:D6:69:39:AE:D9:29:C7:88:82:F5:AF:CF
            X509v3 Authority Key Identifier:
                keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/bWOm_rxxwcbWaTmu2SnHiIL1r88.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62392

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:f2:60:c7:7c:b6:8b:37:43:cb:ad:cc:be:78:c3:76:8a:
         1b:6d:78:c8:76:76:a7:a9:69:fb:aa:69:73:01:f9:31:7a:6d:
         76:33:f6:b1:f0:92:4d:a0:11:c0:27:16:68:a1:0e:c7:b1:59:
         90:81:a6:58:0b:1b:a3:d3:2b:e6:5f:eb:b3:ba:38:f7:40:4f:
         db:de:a3:8a:4f:64:0c:cd:22:a3:e3:0f:ff:bc:de:08:01:9c:
         a5:3c:06:82:19:84:58:87:28:9b:ea:40:bf:71:56:ff:34:46:
         da:dc:78:7e:fc:13:3e:2c:88:0b:01:6f:2e:ed:48:ba:92:fe:
         b2:bb:a1:67:80:a8:6f:bc:cd:1b:be:59:4b:ea:3a:1c:fb:8d:
         56:33:74:e5:95:0a:06:5e:f8:0f:d2:e6:49:2c:bd:2e:aa:4f:
         ff:f5:2b:3d:32:69:5a:5d:cd:1d:8c:ac:22:9a:49:b3:c8:44:
         4f:f2:32:b7:46:33:0f:67:d4:80:be:28:ce:7c:a7:d8:bd:80:
         68:f1:64:f9:37:96:48:2a:b9:d8:26:dc:2f:35:83:9f:45:6d:
         f9:f7:cd:6e:0f:d3:c9:a4:61:25:f1:a0:bf:4e:3e:81:1d:d1:
         6b:e1:e9:e7:ef:ad:3a:c7:6e:9f:e1:ca:6c:01:2c:8c:3c:37:
         33:a1:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:00 2026 by rpki-client