This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/MuGN2Hka5jz3uKEmny_HpiiDodE.asa
File:                     MuGN2Hka5jz3uKEmny_HpiiDodE.asa (raw, json)
Hash identifier:          6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=
Subject key identifier:   32:E1:8D:D8:79:1A:E6:3C:F7:B8:A1:26:9F:2F:C7:A6:28:83:A1:D1
Certificate issuer:       /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial:       019B27539C3B6EB6B3B0E2496C2EFEB65B71
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/MuGN2Hka5jz3uKEmny_HpiiDodE.asa
Signing time:             Tue 16 Dec 2025 13:22:29 +0000
ASPA not before:          Tue 16 Dec 2025 13:22:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            210035
Providers:                AS: 42184
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:53:9c:3b:6e:b6:b3:b0:e2:49:6c:2e:fe:b6:5b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
        Validity
            Not Before: Dec 16 13:22:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=32e18dd8791ae63cf7b8a1269f2fc7a62883a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:bc:30:95:0c:3f:63:59:d9:ed:af:a7:6b:
                    5b:e9:96:f4:b6:06:a5:1f:df:63:b7:02:69:aa:0a:
                    c8:ac:4a:9d:ce:5f:b3:52:2e:a6:db:e6:9a:8c:81:
                    5c:77:ee:78:37:d3:90:5d:0a:f7:50:7e:57:c3:d8:
                    67:c9:20:5f:03:da:87:6c:55:ce:bf:5b:0b:03:30:
                    36:57:5f:36:6f:d9:e9:06:b5:95:f7:6b:40:f6:98:
                    a8:d5:ed:cc:cf:73:0b:79:48:29:7f:ca:a5:b6:d3:
                    7d:14:c2:12:8b:2b:ac:8b:d1:89:e1:c7:95:0e:8c:
                    1d:40:b7:c0:fe:cb:f3:f3:a5:cf:73:67:a2:34:5f:
                    d9:b8:f5:fc:3d:30:6f:7f:42:3e:b3:91:17:3a:6c:
                    1b:00:69:31:b6:d7:2d:25:e8:5c:11:a3:7e:59:a5:
                    32:e0:05:d4:71:19:4a:bc:f1:9d:61:4a:15:92:69:
                    ca:53:e1:75:16:25:cc:62:4e:d3:8d:af:07:da:ea:
                    bd:d9:71:12:6f:b6:a7:43:a1:5d:cc:0d:f2:e2:4e:
                    35:ee:35:c7:02:8c:f8:0f:8d:74:3d:73:6b:f9:5e:
                    4c:15:d8:b1:da:52:20:86:06:a1:20:55:6b:40:3a:
                    e5:d7:c3:ae:aa:4a:f7:11:d6:21:1d:6f:f4:39:ae:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:8D:D8:79:1A:E6:3C:F7:B8:A1:26:9F:2F:C7:A6:28:83:A1:D1
            X509v3 Authority Key Identifier:
                keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/MuGN2Hka5jz3uKEmny_HpiiDodE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210035

    Signature Algorithm: sha256WithRSAEncryption
         74:83:de:48:ff:99:5a:8b:58:40:ee:19:8d:04:b2:88:cc:f2:
         1e:3d:9b:72:b5:b9:98:55:4d:d6:3d:5a:a7:0b:0a:17:2b:1c:
         f3:38:fc:6c:e1:be:09:b4:22:91:a1:29:6b:3d:ce:ae:8e:1d:
         eb:2b:5e:d3:33:40:a4:5c:fd:71:1f:24:f0:1b:1c:ff:ca:f5:
         b6:f0:ee:90:b7:02:df:93:64:c5:15:94:38:d0:af:f0:03:f2:
         21:1d:d1:e2:3e:d2:00:62:d2:65:2f:77:4b:b3:4a:45:23:8b:
         70:3d:21:78:9b:5b:d1:02:fb:5d:44:5c:07:31:60:f3:08:3c:
         bb:e0:1c:ff:e9:fa:2f:a8:1a:df:d9:cc:f9:2e:9b:b5:98:70:
         99:28:5c:b6:e5:e3:b5:83:7e:7c:bb:80:26:28:6e:8e:4b:ba:
         ed:fd:f5:91:f9:f4:b4:5a:4b:f4:3a:44:fc:07:15:67:fb:be:
         74:a1:15:ea:b3:9e:cb:32:eb:17:f7:a5:56:b5:28:3b:eb:11:
         cc:07:4a:d0:77:7c:4e:38:6f:e8:f0:41:0a:9e:53:83:69:7a:
         e1:de:22:94:68:2e:51:54:ea:ac:16:22:47:b5:a7:9b:85:b3:
         b0:d5:27:c0:7c:57:1b:dc:93:c4:20:70:89:f8:23:01:0d:d8:
         91:f8:bc:94
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZsnU5w7brazsOJJbC7+tltxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5
MDI2MmEwHhcNMjUxMjE2MTMyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmUxOGRkODc5MWFlNjNjZjdiOGExMjY5ZjJmYzdhNjI4ODNhMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWW8MJUMP2NZ2e2vp2tb6Zb0tgal
H99jtwJpqgrIrEqdzl+zUi6m2+aajIFcd+54N9OQXQr3UH5Xw9hnySBfA9qHbFXO
v1sLAzA2V182b9npBrWV92tA9pio1e3Mz3MLeUgpf8qlttN9FMISiyusi9GJ4ceV
DowdQLfA/svz86XPc2eiNF/ZuPX8PTBvf0I+s5EXOmwbAGkxttctJehcEaN+WaUy
4AXUcRlKvPGdYUoVkmnKU+F1FiXMYk7Tja8H2uq92XESb7anQ6FdzA3y4k417jXH
Aoz4D410PXNr+V5MFdix2lIghgahIFVrQDrl18Ouqkr3EdYhHW/0Oa6uxwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDLhjdh5GuY897ihJp8vx6Yog6HRMB8GA1UdIwQY
MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt
YmJkN2IwYWJhNmFiLzEvTXVHTjJIa2E1anozdUtFbW55X0hwaWlEb2RFLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi
LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0czANBgkqhkiG
9w0BAQsFAAOCAQEAdIPeSP+ZWotYQO4ZjQSyiMzyHj2bcrW5mFVN1j1apwsKFysc
8zj8bOG+CbQikaEpaz3Oro4d6yte0zNApFz9cR8k8Bsc/8r1tvDukLcC35NkxRWU
ONCv8APyIR3R4j7SAGLSZS93S7NKRSOLcD0heJtb0QL7XURcBzFg8wg8u+Ac/+n6
L6ga39nM+S6btZhwmShctuXjtYN+fLuAJihujku67f31kfn0tFpL9DpE/AcVZ/u+
dKEV6rOeyzLrF/elVrUoO+sRzAdK0Hd8Tjhv6PBBCp5Tg2l64d4ilGguUVTqrBYi
R7Wnm4WzsNUnwHxXG9yTxCBwifgjAQ3Ykfi8lA==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:45 2026 by rpki-client