This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/1fXLoidrR-aUf1SmssfaAZyzdo8.asa
File:                     1fXLoidrR-aUf1SmssfaAZyzdo8.asa (raw, json)
Hash identifier:          YtrHqVFgYRzmfo5sver7tfaRLF7z/utDYIqu5x0aKYw=
Subject key identifier:   D5:F5:CB:A2:27:6B:47:E6:94:7F:54:A6:B2:C7:DA:01:9C:B3:76:8F
Certificate issuer:       /CN=d2a031f139dced2f7321973354f46aac972fadac
Certificate serial:       019B8F4A21E578E1015F51D9F8AAA568B53B
Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/1fXLoidrR-aUf1SmssfaAZyzdo8.asa
Signing time:             Mon 05 Jan 2026 17:52:38 +0000
ASPA not before:          Mon 05 Jan 2026 17:52:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205369
Providers:                AS: 6939
                          AS: 34927
                          AS: 41051
                          AS: 52025
                          AS: 207529
                          AS: 210440
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8f:4a:21:e5:78:e1:01:5f:51:d9:f8:aa:a5:68:b5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac
        Validity
            Not Before: Jan  5 17:52:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d5f5cba2276b47e6947f54a6b2c7da019cb3768f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:2b:05:33:84:61:a8:5f:64:d7:7d:8f:db:
                    ad:55:f8:4c:0b:42:75:a4:63:8b:d7:cc:33:11:9c:
                    3c:91:92:f3:ae:1c:eb:fc:5e:d9:14:4e:79:d3:db:
                    d8:6a:8d:1c:59:c5:a9:43:41:95:6b:84:88:50:9d:
                    43:c1:37:9e:74:ec:c8:4d:2a:44:86:0c:2b:32:2d:
                    ec:da:6e:8f:3a:6e:8a:0d:69:57:5b:36:35:34:66:
                    44:83:91:00:02:1d:13:29:d3:7a:14:18:1b:f5:f9:
                    a3:78:99:06:28:d8:d2:c0:8e:27:8b:f1:8e:50:0f:
                    29:83:21:6e:53:35:e9:9b:f8:b9:36:83:d1:67:95:
                    be:72:f6:f5:e3:9f:ae:da:be:5a:73:dd:b9:f8:70:
                    f3:fc:6d:2f:d0:d7:34:44:1d:41:27:13:ff:31:22:
                    6b:b5:28:d9:c0:6c:90:f8:5c:6d:b4:90:3f:c6:59:
                    0e:7e:9e:08:b0:b0:15:07:4c:a8:15:40:c8:9b:d8:
                    16:55:9c:21:3a:71:91:54:88:36:0b:bc:fe:75:9d:
                    eb:62:59:b4:74:53:2f:41:9d:8f:47:08:0e:09:e4:
                    48:fd:64:6b:06:4e:8f:a1:c5:5c:f4:a5:a5:3a:96:
                    3c:c9:71:7b:c4:44:f5:a2:23:dd:54:71:bd:55:d7:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:CB:A2:27:6B:47:E6:94:7F:54:A6:B2:C7:DA:01:9C:B3:76:8F
            X509v3 Authority Key Identifier:
                keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/1fXLoidrR-aUf1SmssfaAZyzdo8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205369

    Signature Algorithm: sha256WithRSAEncryption
         c5:39:f9:f7:c6:84:c3:78:db:01:f2:d3:26:ac:52:fc:66:c1:
         ff:f3:73:fb:2f:ee:fb:56:76:f1:13:8e:26:6d:a3:70:3e:fd:
         8b:50:4f:87:7b:e3:7d:3e:af:0f:99:59:f3:07:56:37:bd:08:
         5c:c7:56:9f:4a:34:13:da:c5:92:21:d1:f1:f8:8c:48:ce:ec:
         83:98:06:38:bd:64:c4:b6:5e:91:af:b9:09:13:e2:a7:7e:f8:
         50:43:21:f6:a7:1f:58:00:a8:21:8d:98:17:24:8d:68:5a:87:
         bd:3c:a1:2e:e3:e4:30:ef:9a:f0:aa:7a:96:2f:43:c0:82:90:
         97:94:08:b9:42:6b:e7:2a:1a:e9:ca:4f:c6:b3:6d:91:3b:d4:
         b6:44:7b:f9:95:fd:ed:3e:bb:bc:db:e3:cf:8a:aa:4f:d0:6a:
         9d:67:44:35:c5:92:c0:57:f1:94:a4:13:c5:5e:1e:44:54:70:
         00:4a:c9:32:bb:6c:bf:16:db:c1:a7:61:aa:3c:23:7c:ab:c1:
         13:10:27:b4:b8:11:fa:9b:9c:54:05:cd:f7:5c:7b:82:41:fd:
         08:4c:ae:1e:38:d5:ed:8d:bb:a7:4c:ba:2e:53:34:2e:ad:69:
         e5:01:92:96:3e:53:3f:5a:5f:8b:77:42:18:b3:5b:44:f9:85:
         c9:7b:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:08:56 2026 by rpki-client