This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/Ncdi86qG3HQ9DUgWZbEHaW9PcFU.asa
File:                     Ncdi86qG3HQ9DUgWZbEHaW9PcFU.asa (raw, json)
Hash identifier:          fyniArHiC1WFFBjWeWSZsDgdpxc01uvZWE1DTfuzr84=
Subject key identifier:   35:C7:62:F3:AA:86:DC:74:3D:0D:48:16:65:B1:07:69:6F:4F:70:55
Certificate issuer:       /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial:       019B331A71BDEFEB5CE80A0E86236C3F775A
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/Ncdi86qG3HQ9DUgWZbEHaW9PcFU.asa
Signing time:             Thu 18 Dec 2025 20:15:29 +0000
ASPA not before:          Thu 18 Dec 2025 20:15:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            62379
Providers:                AS: 12389
                          AS: 20764
                          AS: 35598
                          AS: 50509
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:1a:71:bd:ef:eb:5c:e8:0a:0e:86:23:6c:3f:77:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
        Validity
            Not Before: Dec 18 20:15:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=35c762f3aa86dc743d0d481665b107696f4f7055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:f8:bc:c7:d3:24:ab:69:c6:02:04:2a:11:
                    b1:bf:86:3b:1d:00:4d:75:0f:d1:c0:40:c8:1c:d4:
                    04:00:f4:ac:d6:1c:31:d9:50:d5:98:fd:72:6e:2a:
                    a3:ce:de:4a:c8:7a:c8:55:36:d1:28:68:8f:98:95:
                    63:8e:2f:b2:3e:1c:62:d2:f1:a3:df:7e:47:dd:5c:
                    7a:7b:fd:33:05:6f:88:a5:75:d6:5d:70:b1:dd:f9:
                    60:b7:1b:4e:7c:67:25:f1:c8:31:08:a1:b7:e4:22:
                    93:26:9a:ba:97:39:e6:a1:f9:a8:bf:04:ae:36:0c:
                    5d:bf:03:4e:d2:87:2c:b3:d8:5a:01:c8:0f:1f:bd:
                    d1:48:a0:4d:78:12:b1:be:7b:e0:74:5c:58:0e:d5:
                    90:25:6c:d7:a4:52:95:2e:dc:57:dc:c4:2e:8c:57:
                    c9:4b:49:7e:85:f1:be:f6:1c:02:2f:5a:17:2a:e5:
                    49:39:0a:01:3e:38:00:5f:33:c0:d6:d8:a2:0c:09:
                    d5:42:fe:69:f1:e7:f4:94:9b:68:da:af:aa:17:00:
                    90:82:94:85:b2:00:fe:51:a8:b4:66:fe:ac:5d:69:
                    ad:ed:d5:ee:e2:9e:89:cd:c4:39:9f:7a:ce:a5:44:
                    19:92:f7:3c:cc:4a:9e:b3:59:51:c0:e9:ed:84:d5:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:62:F3:AA:86:DC:74:3D:0D:48:16:65:B1:07:69:6F:4F:70:55
            X509v3 Authority Key Identifier:
                keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/Ncdi86qG3HQ9DUgWZbEHaW9PcFU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62379

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:34:4e:55:c1:7d:2d:46:47:71:eb:1c:c3:ea:2b:3a:07:
         42:99:6d:21:d8:fd:c7:2c:02:e8:b2:f2:8e:25:23:dc:2f:bd:
         94:30:a4:a4:81:c0:53:8e:03:8e:21:89:45:10:2d:01:c5:c1:
         0d:0d:ff:f3:05:c2:a2:b5:3b:04:7c:c0:a1:4b:be:46:04:16:
         f9:e5:87:ac:21:f3:02:5d:fa:3e:07:78:12:b7:ac:52:f6:7a:
         cb:1d:2c:69:a8:bd:07:28:70:31:b6:e8:a9:05:dc:2c:07:f1:
         11:c2:98:7e:a1:8e:51:33:2f:19:ab:1a:4e:20:b8:2f:61:88:
         f6:0a:21:1e:db:b5:e7:ea:fb:be:95:a7:8e:88:05:fb:ae:84:
         4c:98:d8:32:1c:c7:d4:f9:3b:75:2b:17:c6:16:e8:8b:bd:41:
         69:a8:c6:32:bf:d4:c7:16:e4:f4:29:7a:db:8e:78:f1:e8:c0:
         2d:54:a4:cf:97:fe:08:08:4c:4b:7a:a9:09:27:f5:1b:36:d9:
         e6:5d:20:a6:b4:3e:b2:cc:b7:81:22:86:4a:47:ba:6b:43:a9:
         92:7d:48:36:e9:93:7a:1a:eb:33:6b:24:ad:cf:de:14:d9:ad:
         74:44:a1:cc:61:28:06:32:50:a8:a4:1d:15:67:a5:bc:3b:2e:
         28:14:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:53 2026 by rpki-client