This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Hql-jhXDd324kiVFbybZzSNf_M0.asa
File:                     Hql-jhXDd324kiVFbybZzSNf_M0.asa (raw, json)
Hash identifier:          2YCsFfHgpM4HELBJwfmd2nWIN/lq2lNlvK8XZAF8Qsk=
Subject key identifier:   1E:A9:7E:8E:15:C3:77:7D:B8:92:25:45:6F:26:D9:CD:23:5F:FC:CD
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       019BC7658B4B17424B396DF267746E769E93
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Hql-jhXDd324kiVFbybZzSNf_M0.asa
Signing time:             Fri 16 Jan 2026 15:21:19 +0000
ASPA not before:          Fri 16 Jan 2026 15:21:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213683
Providers:                AS: 174
                          AS: 24940
                          AS: 58137
                          AS: 198890
                          AS: 205923
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c7:65:8b:4b:17:42:4b:39:6d:f2:67:74:6e:76:9e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Jan 16 15:21:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ea97e8e15c3777db89225456f26d9cd235ffccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:60:11:ca:65:0b:aa:d0:42:1d:fb:cf:d6:
                    51:72:04:f4:43:0c:f5:86:1b:97:e1:6e:42:fa:81:
                    44:fd:a0:db:72:29:4a:b4:3d:91:e8:68:4f:89:99:
                    96:b3:c7:f8:57:ec:99:a9:94:4c:a2:73:71:2f:62:
                    ed:24:0e:05:d0:80:36:5c:45:d8:57:c9:3e:0e:8c:
                    37:70:22:98:95:42:bb:9e:3b:86:41:03:a3:18:36:
                    a9:6f:5b:57:2e:81:94:9c:df:f0:a1:9b:27:4e:d7:
                    69:1e:2f:c8:aa:e0:3a:64:39:75:04:9e:b8:30:59:
                    05:93:a3:59:7a:ac:03:03:77:5f:ff:4b:8c:9b:49:
                    16:0b:19:51:ea:c3:df:5a:cd:e6:3e:ad:be:55:b6:
                    bb:bc:47:c4:44:a7:6a:04:7b:5f:7e:1a:3b:d5:07:
                    cc:33:d6:96:b7:9a:1d:78:70:e9:2a:0d:44:23:0f:
                    17:d9:37:a9:6d:dc:ea:b9:dc:65:38:45:00:71:e4:
                    1c:8d:99:70:f3:41:8e:2f:67:56:15:37:28:8f:5e:
                    7b:29:81:63:f0:03:2b:21:d1:5e:67:47:3f:6e:13:
                    da:fa:80:d0:37:af:85:6f:e4:01:5e:f7:ee:67:7d:
                    23:c8:1a:62:3a:3c:5b:c6:79:9d:e9:0c:66:6f:c9:
                    94:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A9:7E:8E:15:C3:77:7D:B8:92:25:45:6F:26:D9:CD:23:5F:FC:CD
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Hql-jhXDd324kiVFbybZzSNf_M0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213683

    Signature Algorithm: sha256WithRSAEncryption
         6a:a5:60:21:65:22:f2:e8:45:fa:5b:42:63:23:1b:37:e2:49:
         68:ea:5a:5b:2e:4b:ab:ea:ec:84:30:4c:5b:b9:8c:29:6d:2a:
         bc:97:e2:a5:16:37:f6:92:84:19:14:7b:86:4c:c4:58:7a:40:
         54:f1:65:ef:94:bf:15:64:05:51:6b:49:fd:9d:ba:c1:01:e9:
         87:96:9d:e5:fe:85:cb:02:e5:86:7d:ab:99:eb:d7:be:9f:46:
         9a:15:3c:37:59:11:7a:ef:7e:80:c3:fa:8b:5b:24:33:13:12:
         35:6c:7c:ed:39:4a:d2:4a:85:15:dc:4c:2b:d0:9e:ef:98:70:
         69:ab:4e:d5:c1:9f:02:ae:21:2b:5c:86:a1:b7:86:6a:5b:15:
         37:b1:c7:80:08:f6:6e:84:80:e0:50:a4:65:cc:17:d2:89:5c:
         c1:5e:d6:51:2d:19:a6:60:57:52:fa:9c:86:eb:0b:76:dc:30:
         82:cc:3a:41:52:01:4b:55:b7:31:ae:6d:4b:be:84:68:92:84:
         73:d7:02:13:e1:3e:db:a2:64:39:51:ee:d0:64:95:fb:ca:35:
         45:7b:86:2c:9e:b1:30:12:0d:2d:cc:de:02:68:d1:99:ec:85:
         0e:51:b5:38:e3:0a:21:63:dc:eb:4f:ca:e5:86:f3:f2:c8:db:
         ea:3f:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:49 2026 by rpki-client