This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/0Jl1abYGtc0G0VxCIikfpEXcyQA.asa
File:                     0Jl1abYGtc0G0VxCIikfpEXcyQA.asa (raw, json)
Hash identifier:          spCudA/BRA5WS4oGW3ZjJD1TfyKLPu1VOB18U9BAu44=
Subject key identifier:   D0:99:75:69:B6:06:B5:CD:06:D1:5C:42:22:29:1F:A4:45:DC:C9:00
Certificate issuer:       /CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
Certificate serial:       019B9FE55F74B20FCB3CE04A6251053AF449
Authority key identifier: 1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/0Jl1abYGtc0G0VxCIikfpEXcyQA.asa
Signing time:             Thu 08 Jan 2026 23:16:08 +0000
ASPA not before:          Thu 08 Jan 2026 23:16:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50989
Providers:                AS: 3399
                          AS: 202395
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:e5:5f:74:b2:0f:cb:3c:e0:4a:62:51:05:3a:f4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abe5eecb23af569aa701a7ab16cf7ac1f90f960
        Validity
            Not Before: Jan  8 23:16:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d0997569b606b5cd06d15c4222291fa445dcc900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:37:c7:c6:32:6a:5c:dd:f7:76:83:c4:77:
                    87:6f:cb:74:02:00:1f:8e:b6:b4:2e:82:f3:ef:ec:
                    23:e4:4e:4e:8b:1b:73:8c:b6:23:dc:94:08:e4:ed:
                    dc:a2:80:1c:d4:11:c2:b4:ab:18:7f:b9:bc:e8:f9:
                    f7:68:0f:eb:a3:2e:22:33:f3:b3:98:3e:c4:32:c7:
                    6b:c2:f6:b1:66:e5:e7:36:17:06:7a:d8:1d:ec:8b:
                    7d:6c:50:28:25:25:75:d7:62:54:bf:cd:bd:61:07:
                    cb:4d:f5:dc:a4:a1:12:ff:85:6d:6e:6f:bb:32:b2:
                    40:36:78:0f:61:d9:92:e4:21:b0:ac:35:11:b9:5e:
                    82:13:da:a2:f3:7e:85:59:12:d9:2c:43:e5:05:d7:
                    33:3b:4e:61:2c:22:aa:73:dd:3a:8c:e1:15:f8:d9:
                    8e:3d:0e:fb:35:72:23:d3:58:a8:50:ca:f8:9a:fd:
                    ce:3a:3b:47:4f:6e:ed:78:2e:e0:37:fc:6f:f6:64:
                    d3:26:7f:63:75:f9:24:72:9d:11:ae:a3:cd:a2:d4:
                    07:30:56:c7:4e:7e:b8:4b:70:c2:fb:d6:df:85:93:
                    3e:2d:76:b3:71:cb:ea:8a:b5:69:1b:f1:eb:0b:95:
                    ef:1c:36:7d:ed:ea:f3:2d:d3:0f:f3:d2:e6:80:1a:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:75:69:B6:06:B5:CD:06:D1:5C:42:22:29:1F:A4:45:DC:C9:00
            X509v3 Authority Key Identifier:
                keyid:1A:BE:5E:EC:B2:3A:F5:69:AA:70:1A:7A:B1:6C:F7:AC:1F:90:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/0Jl1abYGtc0G0VxCIikfpEXcyQA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bec335-5ee0-4c4d-bda7-7e6d12c3736f/1/Gr5e7LI69WmqcBp6sWz3rB-Q-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50989

    Signature Algorithm: sha256WithRSAEncryption
         1a:11:2b:9b:4a:41:90:69:8c:51:d5:06:9d:a4:41:a8:30:26:
         e9:d9:0c:51:10:21:54:9b:3e:9b:92:41:28:07:2c:57:f4:5d:
         8a:a8:96:7f:3f:87:62:d6:ac:2c:55:76:e8:a1:84:57:e1:10:
         16:86:7d:93:bc:5e:3d:b2:69:47:d3:22:b4:85:21:11:51:ac:
         73:48:b2:95:97:4d:ff:d0:47:42:cd:3d:c1:ba:71:33:5f:aa:
         67:31:3a:c0:3c:cc:a6:f9:a7:e2:8f:aa:98:6c:ae:f4:84:bc:
         d8:df:71:1a:98:75:07:e5:b5:58:31:5e:bb:ca:42:8b:38:a4:
         3a:fc:6b:d0:3e:8e:fc:4b:af:12:6c:86:1e:d7:90:ae:4a:43:
         8e:65:0f:22:8c:2c:5f:2f:06:36:67:f7:e2:04:c8:14:19:7f:
         b2:08:c6:c2:00:a1:eb:8b:78:06:8c:29:fe:7f:18:35:64:e5:
         23:60:bd:0c:ec:9d:1f:00:0d:25:e5:42:38:04:58:a3:89:b5:
         33:18:89:5a:05:9a:63:cc:de:9b:eb:81:9f:df:81:54:8f:a2:
         5c:72:a4:70:26:41:4c:d9:c9:1d:ab:29:1d:cb:a3:58:b0:0c:
         51:1e:4a:3b:98:8c:39:51:90:45:60:b2:fb:36:69:a3:1d:91:
         e8:d6:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:07 2026 by rpki-client