This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa
File:                     ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa (raw, json)
Hash identifier:          ZGB8JxWLMriUzpJGh2DaBjMMjMXaanV6HNWfgfO/KEc=
Subject key identifier:   20:2B:8C:D5:71:01:63:3B:E6:6E:F0:EF:F6:4A:4D:76:C9:8F:E4:B4
Certificate issuer:       /CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
Certificate serial:       019BDE075707B7649764E370B5FD627FE3F7
Authority key identifier: 0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa
Signing time:             Wed 21 Jan 2026 00:49:41 +0000
ASPA not before:          Wed 21 Jan 2026 00:49:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48116
Providers:                AS: 50989
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:07:57:07:b7:64:97:64:e3:70:b5:fd:62:7f:e3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d18ca9c8b3d7de6aacc3d142c77def65d9d9a13
        Validity
            Not Before: Jan 21 00:49:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=202b8cd57101633be66ef0eff64a4d76c98fe4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:05:34:9b:a6:1b:ab:9f:90:bd:76:51:00:
                    af:3a:aa:67:a4:de:ae:54:9d:35:30:28:a6:77:be:
                    8a:14:a4:ea:54:08:e0:51:30:6a:95:6b:51:85:6d:
                    06:c5:8b:15:a8:e7:01:53:07:fe:cd:9e:28:aa:56:
                    29:fa:6d:31:7b:e6:f5:d3:a9:77:66:8c:cf:5e:bd:
                    82:6b:54:fa:45:98:1f:e1:48:9f:a6:18:6f:5a:e0:
                    9e:24:58:a5:e1:35:91:2d:cf:05:51:02:eb:33:9b:
                    7d:d7:30:cd:6f:19:b7:3f:79:9d:f5:8d:b5:1a:9c:
                    f8:93:bc:fc:66:db:21:f8:8e:eb:2d:93:a6:c1:de:
                    d3:f2:32:49:ec:5b:12:86:85:3d:eb:5d:f3:f1:e4:
                    1b:f7:20:af:34:87:6d:da:9e:1d:9e:5c:39:d3:fa:
                    41:d6:15:58:6e:cc:6e:ff:e1:20:65:ba:cd:f1:27:
                    6f:bc:d5:f0:39:f3:da:41:7c:1c:f8:1a:75:7e:88:
                    61:ba:b2:ca:f4:05:e0:8e:92:0c:2f:4a:5d:e3:b4:
                    6e:40:01:84:91:10:97:c6:90:31:5d:48:0d:d9:35:
                    ae:c1:75:8e:37:20:d6:5d:67:4f:c8:71:46:3e:26:
                    9f:0d:e7:3c:46:33:3f:5a:70:76:0e:aa:f9:43:33:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2B:8C:D5:71:01:63:3B:E6:6E:F0:EF:F6:4A:4D:76:C9:8F:E4:B4
            X509v3 Authority Key Identifier:
                keyid:0D:18:CA:9C:8B:3D:7D:E6:AA:CC:3D:14:2C:77:DE:F6:5D:9D:9A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRjKnIs9feaqzD0ULHfe9l2dmhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/ICuM1XEBYzvmbvDv9kpNdsmP5LQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5d8cd1-cf51-4c16-a386-7f504271cf90/1/DRjKnIs9feaqzD0ULHfe9l2dmhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48116

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:44:2b:e8:36:8c:c0:8d:15:4f:c9:a0:ca:3f:0d:9b:35:
         22:ae:45:5b:52:1b:fc:93:83:99:d5:7a:76:26:b8:8f:f6:0f:
         dc:05:33:11:5a:93:b5:86:e8:3b:8e:ea:61:25:70:5a:0a:fc:
         6c:26:c6:be:ed:b3:81:bc:83:1b:eb:5c:6d:2e:ee:42:85:46:
         3f:91:5f:bf:16:6d:15:2d:72:a1:30:7f:99:ab:10:56:5c:8e:
         c2:fb:c5:a0:5e:c6:45:cf:32:ca:2b:6d:8e:8a:57:c2:32:d6:
         de:b5:05:d7:22:c8:37:36:d6:ff:74:8c:10:26:cf:3d:52:41:
         e7:02:5f:aa:fb:ac:cb:1f:ef:12:b5:d6:04:c4:f6:93:4d:d7:
         1b:2f:f2:4c:4f:18:65:1a:69:d5:66:61:a4:8e:66:89:33:99:
         17:0c:78:ac:fe:a7:9e:fd:5d:67:0e:58:e3:ab:c3:28:52:4c:
         ba:82:01:ca:1e:37:7e:16:35:d9:cc:05:61:26:58:e8:f8:ca:
         3f:1c:35:b3:ec:71:48:a6:23:95:9f:dc:c0:a4:e6:43:6a:47:
         23:7d:64:67:95:b5:d8:84:7b:f3:58:9e:1f:73:e5:6c:f5:98:
         f7:7a:7a:8b:fb:c0:3f:e6:32:ca:ae:2b:d6:c3:5d:62:a3:5d:
         5e:5e:f6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:52 2026 by rpki-client