This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/olmoqfzN7VFo-bxr_cK8ARodjJ4.asa
File:                     olmoqfzN7VFo-bxr_cK8ARodjJ4.asa (raw, json)
Hash identifier:          DUkoDNJ/61GCLycft48nLmtAR70B8+qDz8ujkdLUM/8=
Subject key identifier:   A2:59:A8:A9:FC:CD:ED:51:68:F9:BC:6B:FD:C2:BC:01:1A:1D:8C:9E
Certificate issuer:       /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial:       019B9D6F475970E263F8F749A7103341CF45
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/olmoqfzN7VFo-bxr_cK8ARodjJ4.asa
Signing time:             Thu 08 Jan 2026 11:47:54 +0000
ASPA not before:          Thu 08 Jan 2026 11:47:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208327
Providers:                AS: 44869
                          AS: 205235
                          AS: 207727
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9d:6f:47:59:70:e2:63:f8:f7:49:a7:10:33:41:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
        Validity
            Not Before: Jan  8 11:47:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a259a8a9fccded5168f9bc6bfdc2bc011a1d8c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:e1:a6:44:83:b4:0c:7c:31:d3:9e:e4:14:
                    a5:37:e3:57:cb:36:64:83:b9:9a:a8:99:fd:b9:5a:
                    65:9c:56:ea:cf:b4:79:3c:ef:6d:05:08:24:3b:e0:
                    b5:a7:f2:30:6e:da:cb:8e:ff:00:46:e6:4e:f0:28:
                    39:53:2f:48:3e:0f:e0:0d:78:66:62:2f:f0:9f:4b:
                    98:13:e1:9e:de:d6:17:0b:20:7d:ca:33:f5:c5:84:
                    63:b8:90:fa:45:27:df:2e:62:de:f9:fc:71:e7:f0:
                    ef:ca:55:68:17:ed:57:f6:09:fa:c0:5f:4b:62:69:
                    4f:76:8d:a9:8a:e0:0b:83:2e:dc:69:8a:20:e8:a8:
                    32:dc:37:2c:5b:21:a0:bb:d7:3c:99:ef:35:95:0d:
                    2e:1c:68:3f:fd:16:a9:d6:0f:89:91:0a:06:f7:50:
                    63:99:07:4e:a7:24:f2:d6:81:44:a3:a7:45:24:b1:
                    ea:6e:5f:04:3f:7c:5d:98:ed:70:c0:13:99:59:23:
                    c9:7a:90:27:8a:2f:8b:55:46:7d:5e:f1:0d:6b:05:
                    3f:a9:70:22:95:f6:82:c0:c4:ac:80:e6:9c:e8:64:
                    c8:ae:8b:1a:4f:9f:df:95:d0:d5:55:c0:16:a6:60:
                    45:00:44:a5:8d:c3:7c:50:cc:97:6a:f7:1f:7d:8a:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:A8:A9:FC:CD:ED:51:68:F9:BC:6B:FD:C2:BC:01:1A:1D:8C:9E
            X509v3 Authority Key Identifier:
                keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/olmoqfzN7VFo-bxr_cK8ARodjJ4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208327

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:96:2c:cf:19:9b:46:e1:ea:70:2d:d1:36:d4:71:16:cc:
         8a:40:30:4a:aa:78:29:fc:22:7c:7b:31:fc:44:7e:94:96:00:
         44:ef:45:32:7b:ea:5e:3d:2a:33:e3:ae:b3:8a:fc:c1:8b:23:
         1f:b2:22:be:16:64:c8:60:90:e9:f5:66:f3:38:08:01:d3:ce:
         46:5f:bf:81:cc:0c:fb:c7:de:ac:98:83:71:2e:6c:6e:00:8f:
         2f:24:b4:c9:56:2a:5c:1f:85:1d:46:cb:e0:29:24:cb:ea:8c:
         c6:1b:3a:98:b0:ac:fa:10:2f:a8:5b:64:6d:08:46:45:44:d0:
         a0:f8:84:a9:ae:ec:2d:52:8b:7c:b5:c8:f9:95:b7:5a:d1:d5:
         58:b1:8a:d3:41:71:6a:bf:dc:1f:cc:c4:96:31:50:fd:91:ab:
         9d:b2:4e:52:4b:f7:f3:b2:ad:7c:bf:a2:7e:47:7a:83:f9:92:
         2f:07:31:4d:68:c9:54:0a:e9:b6:70:11:77:55:30:62:c2:03:
         75:19:a3:ee:d5:8e:c7:b8:36:94:d4:0e:58:bc:17:44:52:4c:
         b4:d5:f3:7f:b2:3f:74:a3:4f:59:58:bf:ae:17:d5:b7:f7:32:
         76:4e:4b:2f:8b:c4:f8:43:21:7d:8e:f0:0f:03:61:de:9d:59:
         18:18:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:02 2026 by rpki-client