This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/UpKRjChH7E6XgVm5AEhCKw9xUVI.asa
File:                     UpKRjChH7E6XgVm5AEhCKw9xUVI.asa (raw, json)
Hash identifier:          itl4/7Ulh3ulcNHslb/7i9V8CSJ2eDVPnXoQqeOhRyI=
Subject key identifier:   52:92:91:8C:28:47:EC:4E:97:81:59:B9:00:48:42:2B:0F:71:51:52
Certificate issuer:       /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial:       019C15EE980A615DFC7ACD3967912CDA2D71
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/UpKRjChH7E6XgVm5AEhCKw9xUVI.asa
Signing time:             Sat 31 Jan 2026 21:21:23 +0000
ASPA not before:          Sat 31 Jan 2026 21:21:23 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212234
Providers:                AS: 50338
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:15:ee:98:0a:61:5d:fc:7a:cd:39:67:91:2c:da:2d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
        Validity
            Not Before: Jan 31 21:21:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5292918c2847ec4e978159b90048422b0f715152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2b:99:3c:2c:84:d1:84:58:6a:e1:e3:28:83:
                    18:79:7d:64:b8:d8:81:7a:78:cd:62:8a:f1:e7:90:
                    b5:f4:a2:9a:97:95:19:11:30:5b:61:11:d1:28:8d:
                    0c:3b:9b:c4:cb:34:ac:91:e0:2c:7d:00:06:22:93:
                    50:cf:7b:da:d0:53:90:b5:57:0b:d4:ef:7b:c6:2a:
                    42:d6:84:a8:c1:45:e2:e4:cd:07:3c:4b:f3:dc:dc:
                    5b:f2:9c:20:69:13:77:cd:8f:36:45:c9:6b:3d:c9:
                    4f:49:ce:eb:6e:08:df:04:e8:26:a6:eb:89:4d:8f:
                    eb:17:89:81:cc:67:59:e2:f1:6a:47:43:ca:85:ad:
                    eb:ea:2a:ff:db:49:8a:da:b3:91:e4:c0:02:f4:d2:
                    4d:a7:05:76:39:1c:46:d6:7e:a1:2a:b9:86:93:5b:
                    4e:33:50:c0:04:db:c1:0b:d2:12:45:03:7b:1e:bf:
                    35:31:99:59:5a:eb:0e:7a:30:5c:94:72:a2:06:d9:
                    77:90:93:a5:a5:09:a0:3f:57:8c:a5:26:fa:5e:89:
                    ab:f2:08:2d:c6:d9:49:12:91:05:0a:e3:0a:7a:9c:
                    c1:45:f1:52:bd:23:95:17:ed:1e:63:c6:02:76:f7:
                    a6:ab:d4:b1:9e:25:73:2d:15:8f:70:72:ed:84:69:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:91:8C:28:47:EC:4E:97:81:59:B9:00:48:42:2B:0F:71:51:52
            X509v3 Authority Key Identifier:
                keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/UpKRjChH7E6XgVm5AEhCKw9xUVI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212234

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:ce:99:43:83:6c:c1:b3:6e:28:2e:09:7b:6c:6b:76:9d:
         64:ad:94:93:ed:e9:30:5b:04:7b:eb:66:da:bc:1c:7e:fa:24:
         60:c9:72:64:d9:51:46:73:43:8a:c3:d8:57:f1:23:62:3f:b2:
         ab:04:b1:1e:64:e8:0f:7d:b8:f9:84:cd:e3:4e:70:95:0c:68:
         73:bc:4e:4e:68:05:85:57:32:57:e4:f5:3d:b4:b9:cf:ae:4d:
         e7:7a:71:02:cc:f2:04:81:a7:5f:6f:4a:f6:68:ba:00:b2:af:
         b1:83:3e:0b:81:b0:f8:1b:66:d3:17:dc:30:ec:5e:1e:58:6b:
         b4:f0:72:63:d6:22:52:ab:51:58:38:d3:30:b8:24:99:a7:22:
         ab:cc:8b:a9:5e:a9:f2:65:c6:01:2d:7f:cc:e0:32:99:8b:e1:
         d0:9a:2c:98:e2:98:7c:65:57:d8:5c:d1:7e:1b:38:5a:6d:dc:
         de:d0:01:f8:ea:c9:b1:ea:4d:88:f7:14:c1:08:3e:64:64:bc:
         7a:d6:d9:6f:9f:82:86:71:f1:7d:a3:7b:3b:de:59:a2:c6:8b:
         41:6d:53:91:39:5f:36:f0:9c:f7:77:d4:5e:73:b3:9f:1e:30:
         67:f2:a4:d8:1f:51:73:30:21:7a:67:e6:89:01:38:a1:65:e3:
         88:22:87:11
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwV7pgKYV38es05Z5Es2i1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2JiYzgxNzk2MTUxOWNhNWEzMThlODRlNzVhZDliYjNk
Y2M3ZTYwHhcNMjYwMTMxMjEyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjkyOTE4YzI4NDdlYzRlOTc4MTU5YjkwMDQ4NDIyYjBmNzE1MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CuZPCyE0YRYauHjKIMYeX1kuNiB
enjNYorx55C19KKal5UZETBbYRHRKI0MO5vEyzSskeAsfQAGIpNQz3va0FOQtVcL
1O97xipC1oSowUXi5M0HPEvz3Nxb8pwgaRN3zY82RclrPclPSc7rbgjfBOgmpuuJ
TY/rF4mBzGdZ4vFqR0PKha3r6ir/20mK2rOR5MAC9NJNpwV2ORxG1n6hKrmGk1tO
M1DABNvBC9ISRQN7Hr81MZlZWusOejBclHKiBtl3kJOlpQmgP1eMpSb6Xomr8ggt
xtlJEpEFCuMKepzBRfFSvSOVF+0eY8YCdvemq9SxniVzLRWPcHLthGmyOwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFKSkYwoR+xOl4FZuQBIQisPcVFSMB8GA1UdIwQY
MBaAFAA7vIF5YVGcpaMY6E51rZuz3MfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTkt
MTQyMWQ3YzU0ZmE1LzEvVXBLUmpDaEg3RTZYZ1ZtNUFFaENLdzl4VVZJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTktMTQyMWQ3YzU0ZmE1
LzEvQUR1OGdYbGhVWnlsb3hqb1RuV3RtN1BjeC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM9CjANBgkqhkiG
9w0BAQsFAAOCAQEASljOmUODbMGzbiguCXtsa3adZK2Uk+3pMFsEe+tm2rwcfvok
YMlyZNlRRnNDisPYV/EjYj+yqwSxHmToD324+YTN405wlQxoc7xOTmgFhVcyV+T1
PbS5z65N53pxAszyBIGnX29K9mi6ALKvsYM+C4Gw+Btm0xfcMOxeHlhrtPByY9Yi
UqtRWDjTMLgkmaciq8yLqV6p8mXGAS1/zOAymYvh0JosmOKYfGVX2FzRfhs4Wm3c
3tAB+OrJsepNiPcUwQg+ZGS8etbZb5+ChnHxfaN7O95ZosaLQW1TkTlfNvCc93fU
XnOznx4wZ/Kk2B9RczAhemfmiQE4oWXjiCKHEQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:10 2026 by rpki-client