This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/qkHSX9O62Gr3u5B_jqKGtT64dTs.asa
File:                     qkHSX9O62Gr3u5B_jqKGtT64dTs.asa (raw, json)
Hash identifier:          q1ZwzuiDpgbVTD+461wBId3rL4sPAeAJlh+4P2xSgtc=
Subject key identifier:   AA:41:D2:5F:D3:BA:D8:6A:F7:BB:90:7F:8E:A2:86:B5:3E:B8:75:3B
Certificate issuer:       /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial:       019C1413D9ADBE78639923C122D4821CF07B
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/qkHSX9O62Gr3u5B_jqKGtT64dTs.asa
Signing time:             Sat 31 Jan 2026 12:42:51 +0000
ASPA not before:          Sat 31 Jan 2026 12:42:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209693
Providers:                AS: 9002
                          AS: 30823
                          AS: 49612
                          AS: 51765
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:14:13:d9:ad:be:78:63:99:23:c1:22:d4:82:1c:f0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
        Validity
            Not Before: Jan 31 12:42:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aa41d25fd3bad86af7bb907f8ea286b53eb8753b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:0e:c9:58:ff:28:40:41:ea:d3:81:42:a1:
                    02:4b:9e:ee:b6:91:57:58:ea:00:89:c9:5e:4d:e2:
                    df:99:7c:a0:0d:d6:f5:6a:22:01:2a:10:13:83:40:
                    39:bc:de:55:b8:03:d5:de:c6:a1:77:7c:af:5f:15:
                    a1:9b:26:43:64:a6:5d:b4:ac:18:2d:3c:33:68:b2:
                    fa:9c:ca:26:c5:84:0a:bd:55:af:06:31:ed:f3:8a:
                    b2:62:5c:92:ed:c1:21:f3:d1:56:5d:66:e0:01:6a:
                    a1:26:c9:8a:4f:c6:f0:7f:c3:44:af:ef:25:c4:ba:
                    eb:49:6d:e1:c9:cb:f9:b4:09:de:10:db:9f:f5:49:
                    a6:50:cc:8f:9c:99:69:57:6a:f3:f0:de:79:5b:9d:
                    f7:c1:ad:22:58:a4:39:13:78:d6:89:21:ef:db:56:
                    e2:ac:70:61:ab:38:6c:dc:44:13:82:4f:d7:e3:be:
                    5e:39:83:03:d6:54:90:cf:55:60:bd:f8:9a:5d:d5:
                    19:d2:48:e3:a5:fe:b4:04:3f:d5:0f:5f:19:46:48:
                    08:3a:8a:c0:02:0e:34:64:9f:46:47:c1:8e:3d:af:
                    35:57:92:46:91:f5:56:8f:a6:9f:14:8a:2c:97:c6:
                    54:0b:47:7e:80:7b:ac:20:52:3b:ef:d6:16:c9:af:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:41:D2:5F:D3:BA:D8:6A:F7:BB:90:7F:8E:A2:86:B5:3E:B8:75:3B
            X509v3 Authority Key Identifier:
                keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/qkHSX9O62Gr3u5B_jqKGtT64dTs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209693

    Signature Algorithm: sha256WithRSAEncryption
         64:80:b0:aa:cb:a8:65:72:01:a2:fc:aa:a6:c3:86:64:ba:f7:
         18:03:97:3e:e6:2d:51:36:3d:44:ca:96:8d:c8:27:ad:9b:c1:
         73:36:9e:9a:7a:df:ad:d3:4d:d2:a9:f2:94:b4:c6:78:78:0a:
         28:c1:f6:fa:92:18:ac:f7:e0:45:eb:53:ae:8e:6f:04:5f:c7:
         ab:13:f0:48:26:f2:68:66:92:af:eb:5c:7d:10:15:6a:d0:e9:
         de:96:70:1e:45:ca:b3:18:16:1e:6a:32:27:e3:90:4a:f5:c6:
         5c:25:a2:24:43:5c:14:bd:a8:20:c9:c4:4f:72:6a:c9:57:0c:
         6b:e5:ff:78:79:f3:65:e4:a8:e7:14:85:d2:5c:80:c7:9c:37:
         65:a9:d3:1e:d3:aa:f3:38:50:b1:94:ee:65:e2:cc:49:1e:01:
         37:dd:ea:ff:60:09:1d:f4:52:08:cf:5f:14:b0:97:62:cf:ee:
         93:33:6f:41:c9:1f:5b:34:e8:0f:97:97:78:7f:f8:48:b1:0b:
         6d:6d:35:9d:7b:65:5f:79:45:a6:bd:df:e1:63:7a:d7:af:bb:
         6a:7c:03:a5:63:d8:e6:96:5a:50:4c:e2:18:5c:2a:03:d5:10:
         5a:a5:5c:0f:c1:0b:f3:f2:0a:62:ba:37:c8:31:08:2d:89:96:
         e2:0d:a2:da
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwUE9mtvnhjmSPBItSCHPB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTBjMGQ3MzA4MWQ3NTI5MTZiZTNiNmU2YzBhODdjMzBm
N2U0MTQwHhcNMjYwMTMxMTI0MjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTQxZDI1ZmQzYmFkODZhZjdiYjkwN2Y4ZWEyODZiNTNlYjg3NTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucwOyVj/KEBB6tOBQqECS57utpFX
WOoAicleTeLfmXygDdb1aiIBKhATg0A5vN5VuAPV3sahd3yvXxWhmyZDZKZdtKwY
LTwzaLL6nMomxYQKvVWvBjHt84qyYlyS7cEh89FWXWbgAWqhJsmKT8bwf8NEr+8l
xLrrSW3hycv5tAneENuf9UmmUMyPnJlpV2rz8N55W533wa0iWKQ5E3jWiSHv21bi
rHBhqzhs3EQTgk/X475eOYMD1lSQz1VgvfiaXdUZ0kjjpf60BD/VD18ZRkgIOorA
Ag40ZJ9GR8GOPa81V5JGkfVWj6afFIosl8ZUC0d+gHusIFI779YWya9UpQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKpB0l/Tuthq97uQf46ihrU+uHU7MB8GA1UdIwQY
MBaAFAzgwNcwgddSkWvjtubAqHww9+QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTkt
ZmViODQyN2NmZTIxLzEvcWtIU1g5TzYyR3IzdTVCX2pxS0d0VDY0ZFRzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTktZmViODQyN2NmZTIx
LzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMzHTANBgkqhkiG
9w0BAQsFAAOCAQEAZICwqsuoZXIBovyqpsOGZLr3GAOXPuYtUTY9RMqWjcgnrZvB
czaemnrfrdNN0qnylLTGeHgKKMH2+pIYrPfgRetTro5vBF/HqxPwSCbyaGaSr+tc
fRAVatDp3pZwHkXKsxgWHmoyJ+OQSvXGXCWiJENcFL2oIMnET3JqyVcMa+X/eHnz
ZeSo5xSF0lyAx5w3ZanTHtOq8zhQsZTuZeLMSR4BN93q/2AJHfRSCM9fFLCXYs/u
kzNvQckfWzToD5eXeH/4SLELbW01nXtlX3lFpr3f4WN616+7anwDpWPY5pZaUEzi
GFwqA9UQWqVcD8EL8/IKYro3yDEILYmW4g2i2g==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:54 2026 by rpki-client