This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa
File:                     hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa (raw, json)
Hash identifier:          7KZiYOaT6S9JrG7NnPeJobuFey8QZGPIpJl4yDxsQbo=
Subject key identifier:   86:0F:90:78:EA:A8:34:02:1E:9C:4D:0E:93:1F:33:50:9D:C3:6F:69
Certificate issuer:       /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial:       019B74E18DE2DBF994F0AE4DDF6AEF501567
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa
Signing time:             Wed 31 Dec 2025 14:48:17 +0000
ASPA not before:          Wed 31 Dec 2025 14:48:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            212234
Providers:                AS: 50338
                          AS: 208790
Validation:               Failed, certificate revoked on Mon 12 Jan 2026 16:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:74:e1:8d:e2:db:f9:94:f0:ae:4d:df:6a:ef:50:15:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
        Validity
            Not Before: Dec 31 14:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=860f9078eaa834021e9c4d0e931f33509dc36f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3d:dd:cb:36:a1:08:b3:d4:10:fb:7e:ed:64:
                    6e:64:07:97:8a:c2:d3:bb:e2:e2:b4:35:a0:75:b0:
                    05:2a:9a:5f:ba:e2:c3:0e:40:c6:33:3e:18:58:72:
                    c4:ff:c1:81:25:82:d4:8b:2f:61:83:86:e2:3e:60:
                    e2:c8:16:56:1b:fd:f7:22:32:2a:71:fd:f8:be:3c:
                    41:45:c2:05:f2:e1:66:97:cc:d7:c3:b5:9e:be:67:
                    05:79:1c:7e:9c:e5:29:a2:62:c9:7f:fb:e6:8a:36:
                    f8:59:a8:4e:72:f4:10:a6:3a:7e:89:da:87:f1:6b:
                    01:e6:21:aa:bf:d3:11:88:9b:79:c1:49:f1:96:8c:
                    07:8c:8b:10:3e:6f:2d:47:df:14:81:9d:03:fb:d2:
                    4f:1d:b4:3f:1f:54:a0:64:73:0d:dc:8b:c0:06:8a:
                    af:0d:c8:66:6c:52:c4:63:62:69:63:25:cd:13:ec:
                    65:5d:73:86:cc:db:85:6d:66:12:a4:16:65:21:01:
                    5d:83:f8:01:64:57:e7:74:90:da:a7:90:79:10:10:
                    81:d3:76:89:a0:d8:46:66:c9:f2:1c:2a:b2:c2:c6:
                    e0:07:49:d0:51:a8:76:9a:18:18:41:da:75:27:48:
                    8d:c4:5c:ba:21:81:f3:56:7a:f7:67:d6:d8:c2:84:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0F:90:78:EA:A8:34:02:1E:9C:4D:0E:93:1F:33:50:9D:C3:6F:69
            X509v3 Authority Key Identifier:
                keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212234

    Signature Algorithm: sha256WithRSAEncryption
         b4:3c:9e:0e:c3:07:8b:50:95:c9:6f:ed:5f:e6:08:c7:e0:67:
         4c:ba:a2:e3:5e:ad:ac:ac:c1:61:b7:6a:59:21:4e:38:b3:6a:
         8f:a1:13:f9:88:07:94:c2:39:23:b4:67:9e:ca:78:36:b8:bb:
         25:4e:f1:9f:03:48:cb:2e:c4:cf:1a:12:86:4c:af:05:18:d5:
         c0:55:46:2a:cb:34:f2:00:34:aa:d8:4c:bd:8c:3b:fa:47:62:
         43:cb:ec:ae:20:dd:d1:23:e3:a4:a2:01:16:0c:02:44:b2:28:
         64:d6:f7:cb:56:67:cb:ea:5b:45:05:ad:ec:ed:72:0b:ca:fb:
         21:4d:bb:e1:60:2b:4e:ab:d8:49:04:5a:a0:91:b5:99:22:6b:
         84:26:63:05:d4:e0:a1:6b:45:71:6d:f3:c9:d4:05:aa:9e:7b:
         08:d4:69:db:87:cf:7e:d6:4d:9f:5b:91:4c:ba:4d:ba:44:0a:
         27:e0:70:8a:5c:ae:bb:e8:7f:13:09:9b:7b:ff:70:2c:c9:a1:
         72:15:ea:5b:34:6c:05:1a:a2:7a:0d:f2:be:77:ef:29:b8:c3:
         ed:95:2f:56:9c:c9:66:37:9a:2b:cc:40:75:87:b4:9f:40:6a:
         8c:d9:06:41:88:0a:f5:41:03:1e:10:db:10:55:23:19:5e:d7:
         0b:95:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 15:50:32 2026 by rpki-client