This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/Px9h_qvgLqREBCZLN00mVbIkO-Q.asa
File:                     Px9h_qvgLqREBCZLN00mVbIkO-Q.asa (raw, json)
Hash identifier:          +GoCJubw5kPuru6g+Ang9jMhhF3Gnykp2+EjDy3hM8c=
Subject key identifier:   3F:1F:61:FE:AB:E0:2E:A4:44:04:26:4B:37:4D:26:55:B2:24:3B:E4
Certificate issuer:       /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial:       019BFAED8B3FDACA0A40C219D81AFF1C263C
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/Px9h_qvgLqREBCZLN00mVbIkO-Q.asa
Signing time:             Mon 26 Jan 2026 15:30:30 +0000
ASPA not before:          Mon 26 Jan 2026 15:30:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57544
Providers:                AS: 44546
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:ed:8b:3f:da:ca:0a:40:c2:19:d8:1a:ff:1c:26:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
        Validity
            Not Before: Jan 26 15:30:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3f1f61feabe02ea44404264b374d2655b2243be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:06:fc:e7:1d:01:53:9f:e7:a0:2e:18:74:
                    c4:72:69:ca:e0:6d:5f:52:bc:08:fd:6a:34:72:e7:
                    4a:b1:01:07:08:e4:a5:c7:82:34:a0:52:33:dd:bf:
                    6b:85:bf:90:64:c7:6c:a7:86:b6:d9:e7:66:43:9a:
                    dc:2c:d6:86:63:c5:11:c1:55:b3:3a:fd:cd:2d:68:
                    cf:e5:02:3b:d2:f2:33:48:90:89:cf:37:9a:70:bb:
                    7b:e3:f8:59:f1:eb:6d:6c:06:6d:24:e5:ce:b1:af:
                    c5:ca:e0:82:17:bc:99:dc:a1:d9:22:63:d2:1e:e0:
                    c4:a8:3d:b1:0f:bd:4d:49:1e:5f:7d:85:e9:fd:ac:
                    b2:5e:7a:c7:96:25:51:a6:cb:db:44:0d:1c:8a:4b:
                    7f:1c:66:ac:f7:bd:c2:1d:46:dd:db:80:9c:72:3f:
                    f9:63:d3:2e:08:d8:8e:41:e6:78:53:52:3d:77:36:
                    f7:dc:20:6c:00:da:da:ee:84:1e:66:09:68:28:42:
                    ab:4e:dc:77:82:6c:22:4c:e6:59:11:5d:71:b0:c2:
                    ee:cd:ff:65:26:65:ac:4a:11:fb:63:6b:17:fe:82:
                    8b:b8:c4:72:ad:c0:7a:4c:49:42:28:3b:8d:d0:21:
                    d5:30:35:6e:72:24:7b:17:a7:29:81:80:1d:c0:7a:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1F:61:FE:AB:E0:2E:A4:44:04:26:4B:37:4D:26:55:B2:24:3B:E4
            X509v3 Authority Key Identifier:
                keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/Px9h_qvgLqREBCZLN00mVbIkO-Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57544

    Signature Algorithm: sha256WithRSAEncryption
         70:86:7e:f4:2a:28:a3:58:fc:19:16:12:a9:85:63:3e:95:d8:
         55:c5:ac:ef:7f:36:27:e6:b1:f3:35:8b:7e:59:84:98:ec:38:
         6c:34:b9:b2:79:ef:e7:92:08:55:da:5e:e5:0d:63:97:ed:2f:
         2c:31:18:88:ef:35:0e:10:ee:31:f1:71:f8:7d:6e:43:70:73:
         dd:da:81:85:ef:df:1a:7c:4f:4e:82:d0:ae:27:93:c2:b3:db:
         47:98:d3:95:f4:a5:e9:77:bd:4a:97:f4:21:22:85:20:8f:aa:
         6e:19:76:cc:cb:85:a3:51:f8:27:b9:1b:3e:1d:40:ac:e4:9d:
         4b:14:ba:4c:7e:3b:ea:31:b8:33:db:70:09:65:ad:62:e4:fb:
         35:9e:55:56:1c:36:1e:d8:dd:03:62:a2:35:52:73:14:ec:95:
         18:cb:65:58:aa:16:3a:76:f1:59:73:db:6a:b5:18:00:e7:5b:
         1c:8b:e2:c6:9c:c4:e2:7f:57:70:8d:b5:db:9a:f8:59:b2:f6:
         9b:e5:5b:79:b5:63:a4:95:31:1c:4e:c4:21:1f:66:5f:0d:1d:
         eb:41:35:3b:10:9d:84:81:c0:39:72:f2:c6:d4:a6:0f:92:c0:
         b7:8e:11:59:32:8e:bb:34:81:c9:16:4d:f6:10:da:f2:c1:5d:
         36:98:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:50 2026 by rpki-client