This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/kPXOPfjYRrsOHKmt2uydskWrmx8.asa
File:                     kPXOPfjYRrsOHKmt2uydskWrmx8.asa (raw, json)
Hash identifier:          LJNoYRHWRV4CsqJStGIYTWQsD6lLtFIRWRFBMsiQTN8=
Subject key identifier:   90:F5:CE:3D:F8:D8:46:BB:0E:1C:A9:AD:DA:EC:9D:B2:45:AB:9B:1F
Certificate issuer:       /CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
Certificate serial:       019BDFBB2CD049F58419408319C541695360
Authority key identifier: 33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/kPXOPfjYRrsOHKmt2uydskWrmx8.asa
Signing time:             Wed 21 Jan 2026 08:45:44 +0000
ASPA not before:          Wed 21 Jan 2026 08:45:44 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198944
Providers:                AS: 3292
                          AS: 31027
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:bb:2c:d0:49:f5:84:19:40:83:19:c5:41:69:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33ea08efa9b3f78c9ef9db767adc21dd61834e0f
        Validity
            Not Before: Jan 21 08:45:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=90f5ce3df8d846bb0e1ca9addaec9db245ab9b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:28:69:1c:6b:f2:31:65:f3:0e:cd:b3:c5:
                    6d:66:f2:85:87:e3:46:76:64:a1:c9:ab:9c:80:89:
                    c7:24:ea:a6:f1:72:c3:5a:bf:2b:b9:43:76:58:dd:
                    20:46:5a:31:14:09:15:91:6d:4a:c5:03:60:31:87:
                    97:fc:bb:73:60:52:fb:9f:44:02:4c:59:8b:b9:61:
                    bd:4f:d0:88:e8:90:ab:7b:82:d6:23:b2:58:ec:f2:
                    a1:a5:49:09:be:1e:5c:88:4c:03:07:3a:58:7e:ac:
                    a6:3d:40:e6:35:49:02:b5:a1:04:ea:95:a3:85:58:
                    fb:1f:78:c7:00:34:42:0f:8b:40:6b:85:7b:24:ae:
                    f1:ec:8f:81:ed:db:dc:b8:e9:60:e8:45:64:37:45:
                    40:d4:2a:3f:c8:55:24:16:a9:b4:be:74:24:bc:f4:
                    06:46:31:bb:3a:9f:65:c5:84:5d:43:13:09:ed:48:
                    bd:c8:68:9d:6b:f3:8b:3c:51:3c:ad:53:7e:41:bc:
                    20:72:b2:09:ab:3d:38:67:57:07:08:60:9d:1f:c0:
                    bc:ae:cd:e2:e0:19:0c:90:ce:62:84:98:fd:6a:a9:
                    a8:b4:bc:09:c5:03:0d:ab:70:25:06:f5:28:54:b4:
                    59:d1:59:d7:0e:1f:16:a1:43:33:87:3a:60:72:8e:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F5:CE:3D:F8:D8:46:BB:0E:1C:A9:AD:DA:EC:9D:B2:45:AB:9B:1F
            X509v3 Authority Key Identifier:
                keyid:33:EA:08:EF:A9:B3:F7:8C:9E:F9:DB:76:7A:DC:21:DD:61:83:4E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-oI76mz94ye-dt2etwh3WGDTg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/kPXOPfjYRrsOHKmt2uydskWrmx8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/688425-14cb-4fd6-8f27-deccfa3ea635/1/M-oI76mz94ye-dt2etwh3WGDTg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198944

    Signature Algorithm: sha256WithRSAEncryption
         68:79:2a:c3:98:4c:ba:09:19:dd:58:06:b5:7c:13:21:66:b0:
         32:ad:e2:7e:11:a0:7e:e3:46:55:b3:9e:34:df:87:3b:6f:6f:
         ff:f2:82:ae:71:08:c7:33:40:d9:ad:e1:64:48:68:6c:83:d5:
         4f:b4:66:43:dc:3a:cc:d1:2c:45:d6:0d:cc:d2:5d:ec:06:91:
         10:ca:61:95:42:67:1c:f2:9b:46:76:75:5d:25:d5:e4:e8:99:
         c9:b8:55:c1:92:07:65:c8:d5:dd:60:a6:21:7b:4c:1a:8b:d9:
         62:6d:a2:02:53:17:68:76:2e:81:00:f2:0f:25:0d:8a:3c:91:
         5e:e4:ca:4f:21:d7:33:98:28:f9:9c:03:95:9d:1c:bf:36:c3:
         a6:40:7f:3c:52:28:e5:7d:82:d0:c1:dd:37:92:e8:e6:d5:3f:
         d8:41:a4:5a:b0:a9:44:bc:99:1b:d4:06:41:c5:55:d4:3f:68:
         c5:2c:72:fa:cd:29:d8:81:14:0f:d0:e5:b1:a7:de:a9:1c:a4:
         9a:b1:36:0b:b8:5f:45:2a:ba:09:99:49:ef:99:12:71:2f:f5:
         05:42:f9:75:65:f0:44:09:85:3b:a5:a3:3a:a5:67:dc:4f:cc:
         af:06:fe:6d:bd:b4:01:4a:d9:c2:78:82:a3:7d:36:8c:bd:20:
         f3:0b:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:04 2026 by rpki-client