This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/fN_hQFE5b35EELYrDZN5uIVgqxs.asa
File:                     fN_hQFE5b35EELYrDZN5uIVgqxs.asa (raw, json)
Hash identifier:          JOHnxodCpkbxGa2pHLwv0EwYs8b3VngNrUcmrFpyldw=
Subject key identifier:   7C:DF:E1:40:51:39:6F:7E:44:10:B6:2B:0D:93:79:B8:85:60:AB:1B
Certificate issuer:       /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial:       019B6BDBAE5E4DD691E95A79FF436131ACEB
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/fN_hQFE5b35EELYrDZN5uIVgqxs.asa
Signing time:             Mon 29 Dec 2025 20:45:17 +0000
ASPA not before:          Mon 29 Dec 2025 20:45:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            211184
Providers:                AS: 6939
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:6b:db:ae:5e:4d:d6:91:e9:5a:79:ff:43:61:31:ac:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
        Validity
            Not Before: Dec 29 20:45:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7cdfe14051396f7e4410b62b0d9379b88560ab1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:cb:82:37:e9:bb:a2:5b:b9:8a:a2:2a:d5:
                    63:eb:da:9c:ad:5e:a3:97:03:14:47:aa:7b:c3:34:
                    49:b6:33:7e:0d:70:6d:a4:ad:6f:29:b7:b1:c8:40:
                    36:75:c0:e0:96:6d:26:bb:8b:ab:37:f4:92:0d:ab:
                    09:5b:36:c5:c1:24:de:0c:a2:54:3c:b5:8d:ab:10:
                    92:3d:98:b2:3d:ae:e1:db:97:a9:30:3e:0d:91:88:
                    62:d3:e6:6e:f1:16:e8:ad:74:34:85:5a:8e:98:56:
                    4f:49:61:0a:58:46:94:7a:65:29:86:f3:44:19:4f:
                    ee:3b:e9:3d:a1:9f:5e:ce:40:76:dc:e1:ca:54:b8:
                    7c:fa:4b:79:7e:2f:28:cf:60:b8:87:5d:2a:6e:9a:
                    62:aa:9c:c3:16:e6:81:e2:0c:b7:ee:e4:f9:65:bf:
                    fc:1c:bc:b6:d4:7f:63:d2:b5:be:f4:15:82:77:e8:
                    87:be:c8:bf:ff:10:e2:f5:99:17:37:88:94:14:e3:
                    2a:a9:19:2c:d3:c6:1a:2d:6d:65:b5:70:a5:f2:9f:
                    f3:63:00:0f:e7:f9:a6:28:6f:aa:cc:e7:cd:e8:66:
                    d0:b8:95:a3:2f:fd:b2:8b:d4:d3:7a:e7:c0:03:a2:
                    b7:b9:60:f3:2d:54:be:96:11:59:0d:be:66:19:64:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:E1:40:51:39:6F:7E:44:10:B6:2B:0D:93:79:B8:85:60:AB:1B
            X509v3 Authority Key Identifier:
                keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/fN_hQFE5b35EELYrDZN5uIVgqxs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211184

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:9b:e9:c5:3c:58:41:bc:63:6a:d2:18:fb:68:a6:9b:f6:
         1e:d5:0b:e6:7e:42:2c:a6:78:80:cd:25:bc:c8:e5:3b:a0:eb:
         35:b9:94:a9:64:61:e5:4d:a3:6d:84:00:5b:c9:d5:5e:57:89:
         aa:55:a8:91:ac:1d:58:50:fc:6c:be:2c:fb:1a:7d:6f:a4:e0:
         60:de:80:b5:0d:4a:23:a2:61:ea:42:a3:18:95:98:29:2b:7b:
         80:d1:0d:a9:52:a3:09:dc:c0:78:e7:7e:b0:f4:02:15:15:e1:
         b2:ee:c9:1e:b4:70:02:8b:a3:71:31:28:3d:3c:97:37:39:49:
         01:25:dc:e4:7c:66:0c:c4:3f:2f:20:ab:5b:2d:8d:17:10:17:
         82:b6:f0:05:ae:3f:71:16:02:ce:34:91:e1:13:0d:25:13:b1:
         1b:45:07:09:16:bc:ee:d3:0b:fb:b9:0c:58:43:a4:51:b5:ea:
         2e:f7:d0:6c:16:f5:76:c5:dc:fe:1c:f7:94:53:ba:4c:8d:76:
         1f:26:e8:1d:67:0d:d3:12:ca:9e:72:8b:60:6e:85:6d:29:a8:
         b8:2e:b0:99:30:d3:c9:eb:c7:a0:27:28:a9:b7:86:2c:a4:f6:
         c6:54:5f:d3:35:5e:84:ef:7d:2b:ae:1d:41:25:db:a5:59:9e:
         6f:0c:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 14:42:48 2026 by rpki-client