This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dhhgDn01VBGU33txgYz8NBfOFn0.asa
File:                     dhhgDn01VBGU33txgYz8NBfOFn0.asa (raw, json)
Hash identifier:          LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=
Subject key identifier:   76:18:60:0E:7D:35:54:11:94:DF:7B:71:81:8C:FC:34:17:CE:16:7D
Certificate issuer:       /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial:       019BC5BDA69E492F16FB6E0F3A5D0BF603C0
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dhhgDn01VBGU33txgYz8NBfOFn0.asa
Signing time:             Fri 16 Jan 2026 07:38:18 +0000
ASPA not before:          Fri 16 Jan 2026 07:38:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206844
Providers:                AS: 8240
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c5:bd:a6:9e:49:2f:16:fb:6e:0f:3a:5d:0b:f6:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
        Validity
            Not Before: Jan 16 07:38:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7618600e7d35541194df7b71818cfc3417ce167d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:81:b1:8e:56:21:c5:54:69:99:ef:bd:7b:
                    c1:9f:f7:6d:1e:e7:70:14:6f:b6:d9:6b:cf:4c:38:
                    58:ec:30:ea:55:33:30:1f:95:9f:b2:3b:f3:2e:15:
                    a7:b6:8b:5f:d5:9a:55:06:f8:af:d0:9f:c8:a6:a2:
                    1e:5a:01:64:2c:90:f4:f7:f2:91:03:1a:aa:82:b7:
                    31:07:1f:94:30:ee:4a:ea:91:94:5f:33:37:35:0d:
                    2f:d2:fb:97:22:72:84:c4:8d:bc:f9:d1:1e:47:d4:
                    b0:ad:ff:98:9c:b5:9f:f6:1d:64:9a:fe:1f:fb:56:
                    d5:0b:f4:94:34:3a:df:65:bc:ba:a0:c7:30:47:99:
                    cf:d7:b7:60:3b:d2:ae:13:7f:f7:bf:ee:4a:40:30:
                    58:fa:34:d7:6a:b0:60:d1:f4:93:72:15:3f:6f:01:
                    2c:9f:97:0b:be:cc:97:f2:3f:4d:99:9a:47:d4:b0:
                    0d:e1:ff:ac:a8:fe:de:07:34:4e:f3:c1:c6:c3:46:
                    73:54:bd:c2:14:3f:ac:2e:2d:ef:5d:f6:d4:2f:e4:
                    0c:d7:bf:61:de:7e:fc:46:b5:60:25:10:92:7a:f9:
                    29:02:7d:db:4d:20:47:a8:e9:f2:0e:89:4e:bb:33:
                    38:e6:00:9f:60:c5:3d:aa:ea:4f:57:00:28:b2:a4:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:60:0E:7D:35:54:11:94:DF:7B:71:81:8C:FC:34:17:CE:16:7D
            X509v3 Authority Key Identifier:
                keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dhhgDn01VBGU33txgYz8NBfOFn0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206844

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:11:b1:2c:9a:3a:05:2c:84:c8:5f:73:8c:e1:2a:65:c1:
         3d:28:bb:f6:14:f5:d7:0a:ae:f1:4b:47:8d:80:48:fb:ad:c6:
         42:7f:df:92:2c:04:4d:5e:f3:3e:f2:d9:a9:23:e9:ad:71:bf:
         2e:42:46:99:d6:07:d3:a3:b3:5b:44:80:f7:0b:c5:76:62:3a:
         5f:d0:02:f3:e9:a3:1b:74:a4:3c:f0:b2:ff:fd:00:b8:66:9c:
         68:91:a1:f2:c9:52:98:65:5a:e9:94:31:9d:c5:d4:86:0d:49:
         86:77:1e:b9:04:e6:ac:df:e4:fd:f5:3a:7d:d6:bf:3d:2e:13:
         25:76:e4:56:04:54:83:bb:50:d2:a0:38:57:7c:cb:a9:1b:35:
         2c:54:b3:62:ed:ba:1f:9f:a2:a6:f8:d2:c5:b1:29:fd:51:31:
         19:aa:93:5e:78:b0:f2:2e:7c:e9:0d:56:6e:bc:b7:6f:54:45:
         3a:b2:b3:c9:c1:79:98:e5:98:9e:c0:11:32:e5:4b:3c:02:9a:
         69:13:09:22:e1:aa:15:be:c6:61:bc:91:86:f6:63:a2:e2:9a:
         60:b0:29:3b:cf:b3:9a:9a:1a:55:33:e3:99:9c:8f:5d:87:2b:
         bc:be:a4:f9:2c:ac:f5:93:51:37:d0:5f:20:23:97:b7:18:3d:
         22:8f:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:46:02 2026 by rpki-client