This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/AmRr-NsaiHfyuDev91oo1Zo4i14.asa
File:                     AmRr-NsaiHfyuDev91oo1Zo4i14.asa (raw, json)
Hash identifier:          flczz05UDoBZbjGuSiDnaa69UqT7dfOGNjaT7YBFlc8=
Subject key identifier:   02:64:6B:F8:DB:1A:88:77:F2:B8:37:AF:F7:5A:28:D5:9A:38:8B:5E
Certificate issuer:       /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial:       019BC5E18D96039AA5939CF44908B56FACD1
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/AmRr-NsaiHfyuDev91oo1Zo4i14.asa
Signing time:             Fri 16 Jan 2026 08:17:31 +0000
ASPA not before:          Fri 16 Jan 2026 08:17:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56496
Providers:                AS: 3292
                          AS: 31027
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c5:e1:8d:96:03:9a:a5:93:9c:f4:49:08:b5:6f:ac:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
        Validity
            Not Before: Jan 16 08:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=02646bf8db1a8877f2b837aff75a28d59a388b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:0d:d8:19:6e:35:12:d6:74:56:d2:0d:9b:
                    f6:a4:70:40:b3:3b:18:c2:1f:4a:3b:dd:80:9d:10:
                    f6:bb:c6:c8:a1:a7:68:63:21:95:f1:6b:39:19:b4:
                    6c:ec:04:c2:cb:ab:4a:18:e2:b4:af:0c:32:db:13:
                    71:90:a9:09:66:9c:a0:a1:9d:ba:c4:06:47:37:58:
                    fc:08:41:55:b5:e6:56:a0:e2:57:1c:c7:aa:71:d6:
                    37:7e:2c:4e:5e:72:15:7b:d4:8a:cf:2f:97:1b:d7:
                    00:04:cd:cc:70:04:dc:59:00:23:6e:3d:52:e1:dd:
                    1b:97:c9:5f:2b:e2:6b:ab:f5:02:38:4c:bd:fd:d3:
                    e6:12:78:63:da:f3:89:32:ba:ec:3b:df:e0:a1:92:
                    e4:bc:6a:1d:2a:cc:0b:75:ec:0a:90:39:1f:8d:cc:
                    f6:6c:25:bb:86:b0:b8:28:f0:2e:4a:55:34:a8:cd:
                    6c:e6:6f:69:ce:e0:37:26:fb:f7:70:5f:03:11:3a:
                    04:fc:70:d7:4d:4b:f0:ff:0a:b7:eb:22:35:5a:29:
                    00:28:07:db:c6:06:91:d4:68:1e:27:34:0e:de:5f:
                    e0:d3:3c:25:ed:e8:89:8b:28:c5:2b:ad:e0:b3:6d:
                    05:5f:83:46:36:dd:71:dd:52:da:82:5e:f4:bd:e5:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:6B:F8:DB:1A:88:77:F2:B8:37:AF:F7:5A:28:D5:9A:38:8B:5E
            X509v3 Authority Key Identifier:
                keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/AmRr-NsaiHfyuDev91oo1Zo4i14.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56496

    Signature Algorithm: sha256WithRSAEncryption
         20:df:cd:52:2a:02:c2:08:91:d7:57:f4:8d:93:92:b9:54:b4:
         50:64:96:f7:b3:8b:c5:f6:d2:40:ab:7d:88:31:a8:d7:8a:b8:
         ad:17:93:75:5e:6c:9d:e1:81:67:3f:d8:13:9a:5c:30:a9:b3:
         60:fb:a4:75:d1:07:0b:54:5c:e1:42:31:7b:68:7f:10:4c:53:
         37:b9:85:47:11:17:9f:7b:79:8e:cb:b0:c5:78:29:29:ac:27:
         00:ac:a4:d4:29:44:b6:74:2d:a0:e1:f4:59:06:70:17:a0:c3:
         6e:80:5e:e2:9f:cd:2d:dd:f6:f8:9e:57:f6:58:0e:0e:84:90:
         49:ff:c5:6c:91:79:81:53:42:96:f0:96:81:1e:08:a9:d5:48:
         18:f7:6f:b8:a6:cf:b9:db:62:28:68:2a:94:7b:28:a2:db:58:
         e3:64:48:94:6e:32:da:cc:b7:3c:10:c5:63:f0:aa:fb:8b:fc:
         e9:6c:c2:28:58:e1:78:4c:4b:40:fa:a3:da:5d:1d:92:1a:80:
         d9:a2:ba:43:b9:92:0a:46:11:7e:fa:f3:53:81:e0:92:7b:52:
         c3:5f:fe:1d:79:8a:be:e5:1b:1a:58:13:ea:76:6f:63:dc:11:
         46:71:17:4d:ba:f4:6c:10:11:5b:3d:91:a2:53:06:4a:7e:26:
         e5:27:e8:10
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvF4Y2WA5qlk5z0SQi1b6zRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmMyZmVmOWM4Y2FmOGYyZjA4MjExZWYwMmMzZDBhZDM0
NzQ5MTcwHhcNMjYwMTE2MDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjY0NmJmOGRiMWE4ODc3ZjJiODM3YWZmNzVhMjhkNTlhMzg4YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUN2BluNRLWdFbSDZv2pHBAszsY
wh9KO92AnRD2u8bIoadoYyGV8Ws5GbRs7ATCy6tKGOK0rwwy2xNxkKkJZpygoZ26
xAZHN1j8CEFVteZWoOJXHMeqcdY3fixOXnIVe9SKzy+XG9cABM3McATcWQAjbj1S
4d0bl8lfK+Jrq/UCOEy9/dPmEnhj2vOJMrrsO9/goZLkvGodKswLdewKkDkfjcz2
bCW7hrC4KPAuSlU0qM1s5m9pzuA3Jvv3cF8DEToE/HDXTUvw/wq36yI1WikAKAfb
xgaR1GgeJzQO3l/g0zwl7eiJiyjFK63gs20FX4NGNt1x3VLagl70veVdeQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFAJka/jbGoh38rg3r/daKNWaOIteMB8GA1UdIwQY
MBaAFNwsL++cjK+PLwghHvAsPQrTR0kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1Njkt
ODY0NGM1ODE0YzlhLzEvQW1Sci1Oc2FpSGZ5dURldjkxb28xWm80aTE0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1NjktODY0NGM1ODE0Yzlh
LzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcsDANBgkqhkiG
9w0BAQsFAAOCAQEAIN/NUioCwgiR11f0jZOSuVS0UGSW97OLxfbSQKt9iDGo14q4
rReTdV5sneGBZz/YE5pcMKmzYPukddEHC1Rc4UIxe2h/EExTN7mFRxEXn3t5jsuw
xXgpKawnAKyk1ClEtnQtoOH0WQZwF6DDboBe4p/NLd32+J5X9lgODoSQSf/FbJF5
gVNClvCWgR4IqdVIGPdvuKbPudtiKGgqlHsoottY42RIlG4y2sy3PBDFY/Cq+4v8
6WzCKFjheExLQPqj2l0dkhqA2aK6Q7mSCkYRfvrzU4HgkntSw1/+HXmKvuUbGlgT
6nZvY9wRRnEXTbr0bBARWz2RolMGSn4m5SfoEA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:02 2026 by rpki-client