This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/eU7ipBheHWkpemRqitvR9YpXrt4.asa
File:                     eU7ipBheHWkpemRqitvR9YpXrt4.asa (raw, json)
Hash identifier:          jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=
Subject key identifier:   79:4E:E2:A4:18:5E:1D:69:29:7A:64:6A:8A:DB:D1:F5:8A:57:AE:DE
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019BBD109472F2E21EF09C5D7530DB696B5B
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/eU7ipBheHWkpemRqitvR9YpXrt4.asa
Signing time:             Wed 14 Jan 2026 15:12:18 +0000
ASPA not before:          Wed 14 Jan 2026 15:12:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208374
Providers:                AS: 1299
                          AS: 3257
                          AS: 5511
                          AS: 9002
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bd:10:94:72:f2:e2:1e:f0:9c:5d:75:30:db:69:6b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Jan 14 15:12:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=794ee2a4185e1d69297a646a8adbd1f58a57aede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:d5:f4:7a:29:7a:25:f7:9f:dc:a3:07:ae:
                    ab:5d:4c:b1:03:51:0f:8f:45:2a:b3:c8:c5:52:c0:
                    88:4c:0b:14:6f:fc:63:dc:34:c5:db:99:c8:ee:21:
                    a8:67:a9:31:6e:cd:07:07:f2:64:8c:09:84:fa:15:
                    39:78:77:47:2a:ce:e5:1c:d9:30:e7:7f:d8:80:46:
                    45:09:2b:3b:ab:cb:74:3f:b1:b6:ee:8b:57:52:a1:
                    81:47:d5:94:1a:49:65:2c:f6:79:df:66:8f:35:6f:
                    b6:14:b4:d7:f3:a7:87:f0:24:80:14:1c:6a:61:59:
                    3a:4e:97:84:52:40:82:42:60:80:71:6b:94:0e:e1:
                    ae:42:0c:31:f0:bb:71:3e:0b:54:f7:fc:8a:06:4a:
                    87:bc:53:c5:4a:48:fc:7a:b4:c8:5a:5f:e1:d1:ec:
                    7a:42:d2:6a:85:53:10:50:fe:8e:35:27:11:a3:c1:
                    4c:59:b6:5b:d1:3f:4d:1a:72:b3:4e:ea:da:06:5b:
                    41:ca:aa:75:bb:6b:13:fe:a9:cf:af:c0:fb:a5:d6:
                    cb:59:b1:b5:b9:68:c2:07:61:e5:b3:4e:49:64:21:
                    68:b5:fb:2f:50:53:15:99:6a:f5:1d:63:4e:96:99:
                    d3:61:ec:3c:9a:17:67:2b:f4:1c:38:0d:8e:c2:4a:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:E2:A4:18:5E:1D:69:29:7A:64:6A:8A:DB:D1:F5:8A:57:AE:DE
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/eU7ipBheHWkpemRqitvR9YpXrt4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208374

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:35:66:d3:fa:42:dd:36:f2:1a:c5:dc:be:57:85:f2:ca:
         2d:ab:d9:1e:26:95:69:db:c8:89:bd:f6:09:b9:39:c2:83:c5:
         44:e7:ee:b7:03:a1:ef:80:28:4f:47:76:ea:3f:09:31:3c:e1:
         17:46:a3:e9:39:50:0b:88:37:fd:74:07:5a:ba:9d:38:dc:a9:
         7a:da:79:27:99:2d:30:0a:9e:20:14:69:c5:79:bb:03:b8:65:
         77:d4:79:6a:ef:d8:fc:68:3a:c3:89:59:92:8c:ae:4d:0e:1c:
         42:5d:01:38:ed:93:86:22:39:78:e2:87:2a:a3:c0:e3:42:6e:
         e7:73:d2:54:a4:30:0e:85:7d:7e:b5:d0:e0:b0:20:59:a2:a1:
         f9:17:f0:45:43:58:63:0a:d8:18:5a:78:ad:fa:a6:b7:a4:c5:
         b0:d9:66:b2:d3:8f:2b:7b:2d:00:6c:d9:09:5c:20:b1:9a:ea:
         cc:84:c4:57:28:c3:74:bd:5f:e6:bc:bc:a9:2b:74:f1:73:94:
         0f:1d:1f:16:84:ba:58:23:e6:a6:2c:bd:64:81:cb:35:6a:83:
         4a:58:24:d1:67:66:75:63:e4:42:21:b3:81:e4:7f:cd:dd:63:
         8c:26:99:39:97:8c:82:a7:37:1e:e0:f4:08:57:30:88:78:ce:
         f3:4f:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:54 2026 by rpki-client