This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/uldmgPFlTuQeBt-ipePLSPYN-eI.asa
File:                     uldmgPFlTuQeBt-ipePLSPYN-eI.asa (raw, json)
Hash identifier:          kElPpLT8qkmreugOZZKYSI8vXfLFDf0CKmt+bqNFxbU=
Subject key identifier:   BA:57:66:80:F1:65:4E:E4:1E:06:DF:A2:A5:E3:CB:48:F6:0D:F9:E2
Certificate issuer:       /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial:       019BD641E79913A4B81B8E597ECAD3E94E42
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/uldmgPFlTuQeBt-ipePLSPYN-eI.asa
Signing time:             Mon 19 Jan 2026 12:36:41 +0000
ASPA not before:          Mon 19 Jan 2026 12:36:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202225
Providers:                AS: 8315
                          AS: 49981
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:41:e7:99:13:a4:b8:1b:8e:59:7e:ca:d3:e9:4e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
        Validity
            Not Before: Jan 19 12:36:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ba576680f1654ee41e06dfa2a5e3cb48f60df9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:9f:7f:7a:27:74:fa:0c:a4:99:ed:80:1d:
                    7f:df:2f:e5:7d:39:f6:25:88:c7:02:c8:c3:0c:25:
                    1d:ef:b1:4b:be:cd:ca:8b:3b:1d:b6:ac:2c:6e:c9:
                    b4:e8:a4:3f:87:3b:fe:7c:09:0d:0f:e9:f9:33:c7:
                    8c:68:6e:54:d7:6c:7f:79:ff:95:f0:43:16:3f:45:
                    f6:e4:d8:5c:12:ac:ee:6d:29:87:6c:a3:27:d4:e6:
                    16:12:a4:f1:83:1e:d4:98:0c:af:b1:1b:86:7d:bf:
                    6a:df:e0:b8:ab:48:88:08:1d:9b:7a:6c:84:a3:9d:
                    ed:59:83:85:24:c8:18:67:dc:26:68:80:92:34:29:
                    79:4e:93:38:49:31:03:cc:00:d3:48:28:d3:45:2a:
                    bc:c5:c3:e8:df:3b:8e:2d:55:30:e0:d7:d6:a5:ef:
                    20:46:bb:c8:96:87:4d:31:23:c5:3c:ba:1e:2b:d9:
                    b3:d4:13:ee:f9:36:28:54:36:6a:4f:3f:8b:af:d8:
                    b7:40:3e:1d:f6:bc:b9:12:cc:c5:75:14:d0:f7:40:
                    19:73:bb:b9:65:8e:d1:b8:40:9c:e2:b7:ab:64:6e:
                    e4:20:e4:c5:66:90:e3:9b:a9:5a:a6:7f:01:2a:ed:
                    1f:06:ef:c5:5d:45:f3:e3:91:0f:ce:5f:f0:65:2e:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:66:80:F1:65:4E:E4:1E:06:DF:A2:A5:E3:CB:48:F6:0D:F9:E2
            X509v3 Authority Key Identifier:
                keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/uldmgPFlTuQeBt-ipePLSPYN-eI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202225

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:4e:ed:9c:ac:ca:ca:64:80:79:1f:3b:8e:78:09:90:1d:
         4c:47:f1:ed:30:58:84:dd:8a:83:af:51:cb:a4:f8:9c:32:b0:
         5d:77:d1:49:f9:ab:fc:a8:85:7f:14:04:7f:b0:65:18:30:32:
         07:5b:c3:9c:ff:03:53:cf:46:29:07:e1:c1:32:b7:ac:07:66:
         a6:3f:b0:55:80:be:57:ec:b6:1c:24:ca:0c:a4:bd:29:08:40:
         c0:ef:a9:0d:fd:92:d4:b7:85:6d:f6:6e:82:13:d8:ce:16:fa:
         11:dc:c4:36:dc:6b:27:f9:87:2e:22:c9:22:63:af:8e:9b:e8:
         0e:cd:72:58:18:28:b5:e3:9c:2e:58:48:f4:ac:0d:1b:dc:56:
         6d:73:f1:ef:d1:4d:35:f6:a6:b4:b5:f7:28:75:31:64:1c:d8:
         f6:56:c0:51:6c:1a:85:03:64:59:f1:e1:f8:8b:08:0a:08:2d:
         3d:85:9c:fd:ca:10:9f:03:52:1f:02:91:3d:44:9a:ac:56:aa:
         07:8a:12:99:34:1a:fc:5d:06:82:88:c9:c5:6a:06:a3:fc:25:
         39:6f:b3:be:80:07:45:b9:e9:ea:32:63:c1:8f:de:cc:bc:f1:
         08:e0:4e:b8:5c:85:7f:d7:ea:bb:d2:6a:a9:ea:91:f8:57:f0:
         3b:6a:37:32
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvWQeeZE6S4G45ZfsrT6U5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODllZTdkYzdhNGJlYThkMjY5Yzg3NDZjZmU3ZDM2MTk4
ZDIyMWUwHhcNMjYwMTE5MTIzNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTU3NjY4MGYxNjU0ZWU0MWUwNmRmYTJhNWUzY2I0OGY2MGRmOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph6ff3ondPoMpJntgB1/3y/lfTn2
JYjHAsjDDCUd77FLvs3Kizsdtqwsbsm06KQ/hzv+fAkND+n5M8eMaG5U12x/ef+V
8EMWP0X25NhcEqzubSmHbKMn1OYWEqTxgx7UmAyvsRuGfb9q3+C4q0iICB2bemyE
o53tWYOFJMgYZ9wmaICSNCl5TpM4STEDzADTSCjTRSq8xcPo3zuOLVUw4NfWpe8g
RrvIlodNMSPFPLoeK9mz1BPu+TYoVDZqTz+Lr9i3QD4d9ry5EszFdRTQ90AZc7u5
ZY7RuECc4rerZG7kIOTFZpDjm6lapn8BKu0fBu/FXUXz45EPzl/wZS7TXwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLpXZoDxZU7kHgbfoqXjy0j2DfniMB8GA1UdIwQY
MBaAFNOJ7n3HpL6o0mnIdGz+fTYZjSIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQt
MjFiMDM0YzJmOGRjLzEvdWxkbWdQRmxUdVFlQnQtaXBlUExTUFlOLWVJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQtMjFiMDM0YzJmOGRj
LzEvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMV8TANBgkqhkiG
9w0BAQsFAAOCAQEAUy5O7ZysyspkgHkfO454CZAdTEfx7TBYhN2Kg69Ry6T4nDKw
XXfRSfmr/KiFfxQEf7BlGDAyB1vDnP8DU89GKQfhwTK3rAdmpj+wVYC+V+y2HCTK
DKS9KQhAwO+pDf2S1LeFbfZughPYzhb6EdzENtxrJ/mHLiLJImOvjpvoDs1yWBgo
teOcLlhI9KwNG9xWbXPx79FNNfamtLX3KHUxZBzY9lbAUWwahQNkWfHh+IsICggt
PYWc/coQnwNSHwKRPUSarFaqB4oSmTQa/F0GgojJxWoGo/wlOW+zvoAHRbnp6jJj
wY/ezLzxCOBOuFyFf9fqu9JqqeqR+FfwO2o3Mg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:34 2026 by rpki-client