This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa
File:                     KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (raw, json)
Hash identifier:          5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=
Subject key identifier:   29:74:3A:03:77:5E:EA:78:24:93:55:86:F5:C1:EE:D5:68:7A:CF:C5
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       019C3E2B071632FE2CA194D96F381253FA93
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa
Signing time:             Sun 08 Feb 2026 16:52:13 +0000
ASPA not before:          Sun 08 Feb 2026 16:52:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            38965
Providers:                AS: 6206
                          AS: 8283
                          AS: 50673
                          AS: 61349
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3e:2b:07:16:32:fe:2c:a1:94:d9:6f:38:12:53:fa:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: Feb  8 16:52:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=29743a03775eea7824935586f5c1eed5687acfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:c3:8f:9d:42:05:67:c5:ee:6a:b8:7e:8c:
                    19:77:b2:dd:0a:b4:2b:a3:bd:52:db:75:c6:a6:66:
                    13:3f:80:c3:5a:c7:94:67:4a:22:33:4e:ff:59:dc:
                    4c:3a:82:87:26:30:15:a7:fb:df:b4:31:11:73:81:
                    40:27:4d:28:b2:f3:3f:0e:5d:2a:3e:c5:50:f1:58:
                    e0:d6:c0:06:7e:01:23:18:3c:11:b9:65:b0:04:e1:
                    b4:03:ec:91:f2:2e:51:14:08:07:8e:e5:37:23:b2:
                    cd:1a:49:67:f9:bb:88:a5:bf:01:cd:b1:a4:30:24:
                    65:3d:12:87:63:7c:90:f8:84:b5:be:e3:32:0c:5a:
                    8e:ac:5b:b1:85:2c:84:4c:0f:eb:02:75:ed:c1:43:
                    4e:5e:2d:4b:ed:0f:64:e1:cb:78:0b:2a:80:99:8c:
                    4e:47:79:a3:1c:c5:7b:f7:d1:42:97:2d:23:2e:9f:
                    18:c8:52:4f:27:32:e4:18:9a:94:85:54:f5:55:7d:
                    28:2c:c6:3d:62:24:1e:68:5a:26:ad:aa:d3:cb:95:
                    84:6c:e7:77:21:5c:fe:de:78:0b:f8:b5:eb:2d:e0:
                    d9:9c:c7:bf:d1:b0:e8:9a:3c:29:da:cc:90:7b:7a:
                    ec:c2:4a:e2:7f:48:44:13:73:d6:f9:11:2b:45:ab:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:74:3A:03:77:5E:EA:78:24:93:55:86:F5:C1:EE:D5:68:7A:CF:C5
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38965

    Signature Algorithm: sha256WithRSAEncryption
         00:83:dc:46:b5:cf:7d:ef:ae:6c:0a:f9:b8:69:6e:04:4d:d4:
         24:fd:d9:9b:6d:79:eb:84:6f:5c:fd:2e:d7:44:d3:93:8a:bc:
         a4:4a:f6:e2:1e:77:02:f6:2d:13:63:bf:db:ea:96:6c:a6:34:
         2d:b9:21:f7:db:cf:82:bd:11:26:d4:d0:00:91:ad:2d:1a:3d:
         e4:03:af:b5:83:41:fb:de:62:42:93:db:9e:c2:08:73:27:89:
         bf:bd:28:16:0e:8e:24:b5:29:43:f9:fb:d0:ec:21:f2:27:28:
         99:b5:f8:6b:17:ac:b0:b9:ac:29:47:63:01:1b:7e:79:ee:d0:
         2f:3c:bc:5e:bf:28:e7:a3:03:8d:d7:8a:f4:6a:cb:64:3f:eb:
         8a:52:14:33:48:ed:1d:62:3b:25:0d:df:e6:e6:8a:ed:5a:bf:
         64:86:07:cb:6d:52:0c:5a:90:7f:c3:af:82:b3:14:79:39:1a:
         da:bd:65:44:01:0a:73:92:e7:21:c3:1c:d6:78:7e:07:70:0a:
         01:6c:49:c6:67:42:5a:f3:cd:60:5d:fa:80:b9:a5:ff:33:bc:
         e3:bf:be:46:9e:45:32:bb:55:31:b4:be:c4:81:bf:9d:47:21:
         cf:4f:b7:0e:fc:62:f4:b3:65:58:73:11:fd:61:0d:f9:24:70:
         73:af:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:34 2026 by rpki-client