This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/kBVFOUmhg6DxKiPZlVovKVe1Ny4.asa
File:                     kBVFOUmhg6DxKiPZlVovKVe1Ny4.asa (raw, json)
Hash identifier:          4281XedtvMOCrmzew715UAbqjMrZDcoWn9sWudSIR3k=
Subject key identifier:   90:15:45:39:49:A1:83:A0:F1:2A:23:D9:95:5A:2F:29:57:B5:37:2E
Certificate issuer:       /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial:       019BFFC7EBE4A2FE5895FA01BEAB4B88B5CE
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/kBVFOUmhg6DxKiPZlVovKVe1Ny4.asa
Signing time:             Tue 27 Jan 2026 14:07:30 +0000
ASPA not before:          Tue 27 Jan 2026 14:07:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214508
Providers:                AS: 11967
                          AS: 20473
                          AS: 34872
                          AS: 34927
                          AS: 52025
                          AS: 210233
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:c7:eb:e4:a2:fe:58:95:fa:01:be:ab:4b:88:b5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
        Validity
            Not Before: Jan 27 14:07:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9015453949a183a0f12a23d9955a2f2957b5372e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:b0:1f:ac:25:c3:b7:80:19:77:12:99:d0:
                    d9:51:a9:99:a1:66:58:5e:b6:3d:26:c1:42:ce:b7:
                    90:f8:49:df:27:87:55:57:eb:47:32:66:b9:1d:0a:
                    98:c3:c1:bf:c9:1b:ab:33:74:f5:5d:cf:2e:38:1f:
                    99:74:2f:31:f3:14:3a:8e:c7:40:5c:d9:24:0d:ba:
                    e9:8b:6b:b7:e3:ba:f0:69:5d:43:1c:19:7d:b0:a1:
                    0e:a3:5f:4e:6f:e5:ba:e5:9f:52:6b:8f:e6:f1:9a:
                    ca:8a:8c:19:af:81:66:e4:9f:1d:0f:13:ad:a5:b2:
                    2d:bf:33:ad:df:5b:5a:64:ec:57:1b:25:8b:69:b6:
                    eb:8a:6e:c8:a3:41:cd:d1:4a:12:bd:03:1d:e6:10:
                    b6:0f:41:8c:e5:89:1d:b5:f1:7a:c2:02:0f:8e:5c:
                    95:72:6a:77:4b:4f:89:f2:c4:88:7a:82:9a:f8:f4:
                    37:f5:99:8b:f2:f0:3d:60:3e:c1:8d:bf:4c:ae:9d:
                    aa:88:fb:fc:0d:62:33:b4:36:39:6a:32:f3:50:7d:
                    b9:b0:36:10:c3:9a:86:ed:4a:24:b7:f8:99:b7:4c:
                    62:e3:0a:87:9d:3f:29:0a:bc:ef:c7:96:bb:5c:b8:
                    50:87:c5:94:27:11:82:c3:6e:3e:7a:99:78:c8:9e:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:15:45:39:49:A1:83:A0:F1:2A:23:D9:95:5A:2F:29:57:B5:37:2E
            X509v3 Authority Key Identifier:
                keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/kBVFOUmhg6DxKiPZlVovKVe1Ny4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214508

    Signature Algorithm: sha256WithRSAEncryption
         91:89:aa:ea:f0:7c:d9:4c:c0:28:76:93:99:24:fb:8d:fb:98:
         14:c5:b5:cd:af:7b:93:d7:7a:1a:44:37:d2:96:85:4d:08:bb:
         f1:a6:9d:8a:fa:e3:36:79:2c:45:9f:90:a7:fd:32:e2:ab:02:
         22:25:58:64:b0:68:75:e6:c6:a9:5d:a6:e3:c6:e3:03:c6:eb:
         e3:46:c5:e4:02:4b:0c:53:ff:4e:42:fa:57:c6:59:0f:18:db:
         e7:11:97:99:c1:bd:39:e0:35:c5:96:83:5f:63:b9:15:f7:c5:
         c1:e6:d4:b4:ae:89:7a:58:1a:5d:a8:cb:fe:18:4a:a7:62:ba:
         f2:1d:d4:fd:30:88:45:e7:1b:c6:07:59:b0:d0:bf:75:52:0b:
         47:5f:8d:a1:f5:2a:e7:e8:f4:2e:c1:fc:b8:6b:b0:81:6d:34:
         24:40:93:cb:a9:29:05:ba:84:9a:62:32:9e:79:49:d2:34:23:
         a5:5b:84:c1:45:e4:b0:7c:16:75:1e:82:16:79:b2:b8:d0:c6:
         96:ab:15:6e:37:71:70:db:8e:65:8c:2d:76:31:33:48:00:87:
         c2:4d:81:d3:2a:2f:ca:a9:94:43:7b:55:d0:3c:50:10:77:3c:
         01:2d:10:bf:06:d0:f6:14:ab:92:81:10:ff:22:c1:47:1a:a3:
         c7:dd:07:6a
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZv/x+vkov5YlfoBvqtLiLXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTE5NWM4MGNkZWU0MmIwNjg4ZGI4ZTkzYTY4YjQ1OWI4
NThlNmUwHhcNMjYwMTI3MTQwNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDE1NDUzOTQ5YTE4M2EwZjEyYTIzZDk5NTVhMmYyOTU3YjUzNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscewH6wlw7eAGXcSmdDZUamZoWZY
XrY9JsFCzreQ+EnfJ4dVV+tHMma5HQqYw8G/yRurM3T1Xc8uOB+ZdC8x8xQ6jsdA
XNkkDbrpi2u347rwaV1DHBl9sKEOo19Ob+W65Z9Sa4/m8ZrKiowZr4Fm5J8dDxOt
pbItvzOt31taZOxXGyWLabbrim7Io0HN0UoSvQMd5hC2D0GM5YkdtfF6wgIPjlyV
cmp3S0+J8sSIeoKa+PQ39ZmL8vA9YD7Bjb9Mrp2qiPv8DWIztDY5ajLzUH25sDYQ
w5qG7Uokt/iZt0xi4wqHnT8pCrzvx5a7XLhQh8WUJxGCw24+epl4yJ5XAQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJAVRTlJoYOg8Soj2ZVaLylXtTcuMB8GA1UdIwQY
MBaAFPARlcgM3uQrBojbjpOmi0WbhY5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzJlNjctMTI2Mi00MThiLTg1NjAt
ZGY3YWM2YThhZTJkLzEva0JWRk9VbWhnNkR4S2lQWmxWb3ZLVmUxTnk0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kNzJlNjctMTI2Mi00MThiLTg1NjAtZGY3YWM2YThhZTJk
LzEvOEJHVnlBemU1Q3NHaU51T2s2YUxSWnVGam00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNF7DANBgkqhkiG
9w0BAQsFAAOCAQEAkYmq6vB82UzAKHaTmST7jfuYFMW1za97k9d6GkQ30paFTQi7
8aadivrjNnksRZ+Qp/0y4qsCIiVYZLBodebGqV2m48bjA8br40bF5AJLDFP/TkL6
V8ZZDxjb5xGXmcG9OeA1xZaDX2O5FffFwebUtK6JelgaXajL/hhKp2K68h3U/TCI
RecbxgdZsNC/dVILR1+NofUq5+j0LsH8uGuwgW00JECTy6kpBbqEmmIynnlJ0jQj
pVuEwUXksHwWdR6CFnmyuNDGlqsVbjdxcNuOZYwtdjEzSACHwk2B0yovyqmUQ3tV
0DxQEHc8AS0QvwbQ9hSrkoEQ/yLBRxqjx90Hag==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:54 2026 by rpki-client