This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa
File:                     rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa (raw, json)
Hash identifier:          r6SGrYKI+ASOCBn2fHuASlLRkC7+wUAXBFPIKFArmfM=
Subject key identifier:   AC:9B:24:E5:43:21:AD:BE:B2:83:EB:FE:37:99:7C:01:A7:97:49:42
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       019B8EA46B6FAFEF5BFBD7D53B3CEE004A14
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa
Signing time:             Mon 05 Jan 2026 14:51:38 +0000
ASPA not before:          Mon 05 Jan 2026 14:51:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208824
Providers:                AS: 44324
                          AS: 207841
                          AS: 209533
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8e:a4:6b:6f:af:ef:5b:fb:d7:d5:3b:3c:ee:00:4a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Jan  5 14:51:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac9b24e54321adbeb283ebfe37997c01a7974942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:18:80:95:7f:bd:0c:77:de:f6:70:6d:1f:
                    f1:75:61:3b:54:6b:b1:42:2a:a4:4a:9b:8d:64:f2:
                    01:c9:52:91:96:ca:a4:25:13:16:ad:1d:83:0c:23:
                    ea:97:52:88:5e:a9:dd:17:a0:76:96:fa:10:b2:dd:
                    39:4d:b3:7f:9f:97:5e:04:e0:b4:08:b6:bb:c1:0f:
                    3d:e2:ea:7d:17:94:c2:c6:a3:8e:12:0f:ff:b0:07:
                    b8:02:a6:db:21:a1:76:e3:9e:b0:f1:7f:a0:25:48:
                    95:db:ed:26:11:17:6f:f5:85:f0:ba:0d:df:19:0f:
                    e7:ef:14:53:f5:21:62:1c:68:fa:fa:ee:b6:a4:ca:
                    a0:c4:ae:45:a1:b1:9d:78:66:8e:7c:2f:13:f8:7a:
                    8b:e7:0b:41:0b:3d:e6:3c:e1:e6:c4:96:79:66:b9:
                    c3:76:c4:d6:69:c2:64:1c:5f:29:14:b3:01:f2:0b:
                    18:2c:6a:8b:6e:6a:6b:0a:25:d9:e6:48:04:d8:d8:
                    f3:e6:88:d4:d6:a6:03:c1:23:d0:e0:6b:26:74:7d:
                    25:40:34:c8:c2:7d:fc:73:07:33:04:a3:ff:60:4e:
                    f5:8f:92:8d:2c:b1:c5:86:c5:3b:ba:17:42:52:84:
                    e2:13:8c:ec:d9:d6:5f:c2:7b:61:17:21:21:b0:1c:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:24:E5:43:21:AD:BE:B2:83:EB:FE:37:99:7C:01:A7:97:49:42
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/rJsk5UMhrb6yg-v-N5l8AaeXSUI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208824

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:da:11:ca:b4:a1:12:a3:15:3c:65:01:fa:10:65:e8:72:
         d1:83:29:88:a0:a0:58:79:7f:a8:28:e9:c8:f1:15:cd:e8:d5:
         24:aa:28:17:29:ca:0f:3d:f7:c3:52:21:31:26:ea:2c:79:df:
         46:78:28:33:e5:c6:ab:92:e5:23:3d:84:04:17:cb:e9:ff:ce:
         62:d4:09:2b:84:10:d3:29:24:9b:a7:99:49:6a:b9:00:db:64:
         36:e7:a6:dd:be:33:69:9c:0a:5d:1f:ba:f0:b3:4b:6e:2d:84:
         f4:13:44:80:75:c7:4a:85:0b:48:a0:9a:d3:20:a7:5a:90:ec:
         a6:7b:1f:15:92:43:ab:c5:19:64:bc:34:eb:c2:5d:89:e8:90:
         50:ab:7c:42:5a:d9:57:b0:22:d4:9f:19:b2:e6:b3:69:34:24:
         f1:3c:09:7d:d5:3e:05:f0:a0:f7:10:b8:69:59:a4:b1:69:6c:
         d4:06:1e:4a:05:e6:2e:ff:97:dd:b3:f2:ac:b1:68:58:fd:8a:
         fb:af:4d:fe:a3:99:1b:06:0b:b3:48:a4:87:89:e4:64:3f:cc:
         e4:40:55:32:b5:7c:3a:09:ae:ef:c2:c0:60:63:2d:65:a0:e9:
         e7:aa:d3:1c:20:d7:44:aa:66:5d:11:3b:f1:2d:54:fb:c5:ab:
         23:f8:b8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:28:22 2026 by rpki-client