This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa
File:                     IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa (raw, json)
Hash identifier:          Qvuppcz1b5l2wZ5dj946ovG10EvF0+Pn11j9C7AR5FE=
Subject key identifier:   22:E4:1C:C7:5B:64:4F:41:C8:AD:9A:B6:0A:DE:6A:6D:91:97:3F:2D
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019BD5AAD65C4439AD1048781482BE9666EE
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa
Signing time:             Mon 19 Jan 2026 09:51:41 +0000
ASPA not before:          Mon 19 Jan 2026 09:51:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51115
Providers:                AS: 197068
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:aa:d6:5c:44:39:ad:10:48:78:14:82:be:96:66:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Jan 19 09:51:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22e41cc75b644f41c8ad9ab60ade6a6d91973f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:58:49:64:a0:81:89:9a:4e:55:68:e2:92:
                    7c:86:2b:7b:5b:cd:8e:85:08:4c:f7:33:d9:73:62:
                    0f:b1:1d:bd:2b:9e:af:af:6c:ea:5a:55:12:84:6d:
                    71:bd:e8:d2:95:e4:bb:d4:32:9e:57:a0:5f:bf:71:
                    b1:50:15:bb:67:52:18:e9:8e:fe:27:87:dc:95:7b:
                    21:0d:95:e5:3c:c8:e9:af:c9:d7:36:44:48:f2:b6:
                    52:dc:e6:f6:fc:2a:83:10:6a:ab:89:75:20:f0:29:
                    81:08:7f:4e:3d:24:56:c5:b5:bc:d8:a7:21:6c:e1:
                    18:ee:6d:9c:c6:18:7b:d7:c5:e8:6f:d4:f9:eb:a0:
                    60:fc:a1:60:9c:0d:31:50:d3:cc:e4:3e:92:78:4e:
                    a0:ea:5c:78:19:05:7e:cf:1b:cc:4d:10:0e:c1:0b:
                    af:4d:a7:ad:b5:eb:8d:76:87:6f:3d:2a:8b:5a:1a:
                    91:df:8a:30:b3:1c:dd:3c:ac:88:4f:05:fd:19:4b:
                    be:73:27:43:09:86:0f:e9:a1:72:06:e8:5c:af:03:
                    38:cb:7f:40:b2:74:be:80:20:3e:93:19:78:a3:77:
                    50:da:13:fc:72:7a:08:00:7f:c2:3f:50:4a:85:8f:
                    60:6b:32:55:9a:64:32:36:80:2c:cb:7a:5e:2b:05:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:1C:C7:5B:64:4F:41:C8:AD:9A:B6:0A:DE:6A:6D:91:97:3F:2D
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/IuQcx1tkT0HIrZq2Ct5qbZGXPy0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51115

    Signature Algorithm: sha256WithRSAEncryption
         29:7f:1e:a6:11:cf:dc:22:4c:b4:f0:1e:10:d7:b2:4d:c8:fa:
         44:19:a5:70:4a:dd:a7:b1:89:09:99:27:c8:b9:56:ac:63:61:
         3d:ff:2d:cd:4d:db:6e:db:62:34:22:b9:dc:99:25:8c:50:95:
         21:37:7e:21:8d:2d:d8:1d:0c:6b:c2:c9:f0:fb:8b:31:2a:7c:
         a3:82:06:8d:30:15:03:d7:04:28:43:30:a2:ad:c1:bf:f8:fc:
         d4:e1:ee:51:78:7f:fa:fe:d9:4c:f7:d4:0b:d5:a1:f9:49:3c:
         42:15:8a:cc:a9:6f:c4:a2:26:f1:35:c8:2b:77:ff:fc:e9:f1:
         a3:31:6f:fe:2d:bb:71:ac:99:00:06:89:fd:a8:16:a9:a1:89:
         16:de:55:bc:a0:e7:10:1d:ca:d9:36:1c:e0:f4:5c:17:34:f9:
         32:14:2a:08:a9:9f:23:b0:93:85:db:b1:da:18:08:83:14:55:
         7b:c2:a5:1e:32:4b:31:39:21:59:43:3c:ae:e8:ca:f7:25:ed:
         4b:be:ad:ab:b4:96:3f:9a:6e:98:93:83:c1:93:dc:78:a5:e7:
         09:84:39:4a:bc:11:5b:3a:5c:78:c7:76:9d:ea:49:f5:0d:5b:
         59:22:b0:54:47:5a:1d:b7:07:fe:41:fe:e3:df:cf:00:06:4d:
         26:dc:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:54 2026 by rpki-client