This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/jE2_WqgXFNkY54CTie-65-UWSNQ.asa
File:                     jE2_WqgXFNkY54CTie-65-UWSNQ.asa (raw, json)
Hash identifier:          heW1TwT0yq1dP5dkHg76VMwsxCNVgvGMwKxBm3dH1w8=
Subject key identifier:   8C:4D:BF:5A:A8:17:14:D9:18:E7:80:93:89:EF:BA:E7:E5:16:48:D4
Certificate issuer:       /CN=98a3d09d2b456125a15d53f5520925f4fbf61728
Certificate serial:       019BA2254F3E11115459AFB15AE1A0DB6C3D
Authority key identifier: 98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/jE2_WqgXFNkY54CTie-65-UWSNQ.asa
Signing time:             Fri 09 Jan 2026 09:45:12 +0000
ASPA not before:          Fri 09 Jan 2026 09:45:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42729
Providers:                AS: 1113
                          AS: 39837
                          AS: 57169
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:25:4f:3e:11:11:54:59:af:b1:5a:e1:a0:db:6c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a3d09d2b456125a15d53f5520925f4fbf61728
        Validity
            Not Before: Jan  9 09:45:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c4dbf5aa81714d918e7809389efbae7e51648d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:07:1e:b8:38:0a:53:f0:84:b4:bb:ac:17:
                    fa:e1:b3:ae:b0:51:e1:3a:87:55:bb:d2:18:b7:6b:
                    e1:1b:c5:97:2d:b8:4f:1e:c5:1d:2a:37:64:80:42:
                    e9:d9:08:ba:f4:41:c5:7c:fb:64:66:7b:fd:84:aa:
                    bc:49:bb:33:f2:bb:cd:a6:85:ac:1f:88:67:93:15:
                    76:94:73:f9:91:4b:d0:93:f1:ed:a3:ff:97:d6:0c:
                    3c:3d:54:ee:32:7d:a0:cb:c9:11:f2:6d:5b:02:11:
                    82:09:79:bf:75:ee:ae:f6:f4:df:c6:f7:d2:0b:05:
                    81:41:19:d1:91:47:a0:29:bc:c4:1b:9c:b4:3b:59:
                    90:93:e0:b9:4d:a3:5e:83:80:e9:9a:37:6c:4e:e8:
                    0f:fa:d5:96:11:df:bc:25:e9:ac:88:54:67:c3:45:
                    57:13:24:23:e5:0a:d5:99:56:b2:05:ef:2e:ba:b2:
                    e0:43:08:f5:6b:f3:cc:36:13:eb:c7:05:ec:58:2b:
                    26:49:94:d0:82:ca:c9:d9:ba:4a:e0:6d:7a:05:47:
                    7e:73:9b:63:9f:65:d7:e2:93:82:dd:54:ff:b6:f8:
                    b9:06:64:ff:47:20:69:a3:3d:c5:b5:48:4a:94:eb:
                    23:ee:d9:6d:ef:1c:7a:1e:50:45:a7:bb:19:2d:32:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4D:BF:5A:A8:17:14:D9:18:E7:80:93:89:EF:BA:E7:E5:16:48:D4
            X509v3 Authority Key Identifier:
                keyid:98:A3:D0:9D:2B:45:61:25:A1:5D:53:F5:52:09:25:F4:FB:F6:17:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/jE2_WqgXFNkY54CTie-65-UWSNQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e7b304-e779-421d-b0a6-04320b1fc227/1/mKPQnStFYSWhXVP1Ugkl9Pv2Fyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42729

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:a4:7b:93:fc:c9:ca:60:98:e9:08:d1:12:97:61:dc:87:
         8c:96:bc:0e:63:a6:6c:15:02:07:4c:63:81:c2:14:0d:48:8b:
         c0:31:02:28:10:ae:4d:83:77:52:6e:d5:df:7f:82:f1:ec:bb:
         6f:1a:dc:c9:a9:ab:6f:f5:2c:90:b0:c3:47:1e:ee:5d:7b:0f:
         18:99:b6:14:81:4f:51:b2:d2:1e:f0:6c:e1:a4:b7:eb:6f:83:
         f9:7c:f4:d6:06:c5:f8:04:dd:e0:86:65:11:ae:29:80:f5:41:
         e0:88:62:a5:42:75:be:16:8a:85:c0:eb:23:2a:71:db:92:2b:
         73:de:e9:12:ee:07:c1:82:fb:4d:5b:61:ba:32:38:ef:36:56:
         a1:7b:41:39:42:9f:4f:f7:99:4c:c5:9b:b7:c0:b4:0d:13:7d:
         10:70:5d:b7:61:fe:df:65:d8:a1:f7:00:40:6b:f7:50:cb:77:
         f1:90:fe:67:e3:28:19:ca:50:c6:d8:46:67:5e:9a:35:8f:fd:
         bf:f1:1b:57:32:c5:d4:c0:fa:77:44:a7:bf:b5:6c:0b:f4:8a:
         50:22:03:78:cc:f3:9b:ab:31:9d:a8:77:4c:f8:12:be:e3:20:
         cf:35:55:4b:c3:bb:3d:bb:37:62:64:79:44:fb:cc:7c:bd:ed:
         a0:b5:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:52 2026 by rpki-client