This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/EDqPMphbUpVtTYoN1fyLYCs1biU.asa
File:                     EDqPMphbUpVtTYoN1fyLYCs1biU.asa (raw, json)
Hash identifier:          lzmUumz35rDjeAtkzbB8yQczkltYxxEG7y14DOkobdY=
Subject key identifier:   10:3A:8F:32:98:5B:52:95:6D:4D:8A:0D:D5:FC:8B:60:2B:35:6E:25
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       019BFAECEBC760218F9C54E4BE9D281AB22F
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/EDqPMphbUpVtTYoN1fyLYCs1biU.asa
Signing time:             Mon 26 Jan 2026 15:29:49 +0000
ASPA not before:          Mon 26 Jan 2026 15:29:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209242
Providers:                AS: 13335
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:ec:eb:c7:60:21:8f:9c:54:e4:be:9d:28:1a:b2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Jan 26 15:29:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=103a8f32985b52956d4d8a0dd5fc8b602b356e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:42:c2:e7:53:62:e5:46:c9:fe:9d:b1:12:
                    48:2f:80:1f:ee:45:7c:bf:d3:3c:5b:71:f7:09:44:
                    3e:45:a2:22:90:b2:31:60:2b:3f:ed:12:dd:af:42:
                    54:34:e1:c4:e5:13:0b:e4:77:54:e2:19:3f:97:ce:
                    ac:14:f0:9d:9d:ba:56:9f:ab:11:14:e4:84:11:1e:
                    55:66:8e:d8:86:13:3c:22:3c:d8:d1:9b:4b:45:b9:
                    8d:13:50:b2:ff:8c:89:60:9b:65:a2:e6:74:53:fe:
                    96:4e:ff:08:a8:a2:8b:1b:28:f1:e8:23:e7:49:fc:
                    6a:59:14:d5:7b:de:e0:69:6f:6d:d9:0d:63:99:c3:
                    29:c7:64:f5:0f:ac:43:8a:0f:dd:1b:d4:cd:11:ff:
                    f3:00:55:bc:23:a9:9e:29:49:5b:f9:79:63:84:d8:
                    e3:50:51:d2:20:38:25:fb:d7:e6:80:83:4c:1d:36:
                    61:08:d0:49:95:bd:a1:f6:45:8d:84:f9:05:fb:cf:
                    3c:f1:12:64:f0:92:b5:a3:e9:66:29:62:a4:1f:18:
                    0a:4b:c8:37:3a:70:30:ce:0a:73:c6:c0:a7:21:17:
                    3a:b1:39:8c:bb:fa:0e:de:79:f6:87:00:25:62:a4:
                    db:d8:2f:ca:28:6c:1a:4c:54:fe:a7:c6:ee:c8:37:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:8F:32:98:5B:52:95:6D:4D:8A:0D:D5:FC:8B:60:2B:35:6E:25
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/EDqPMphbUpVtTYoN1fyLYCs1biU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209242

    Signature Algorithm: sha256WithRSAEncryption
         6b:5a:f8:0e:7e:40:ee:6e:c2:59:9c:e6:a9:bb:f4:ca:03:3c:
         e8:1a:c6:8b:77:19:3b:f1:83:b6:b0:fb:62:6c:a1:8d:9e:0e:
         f4:3a:ff:a4:5d:d8:2d:09:7a:fd:f4:0b:d6:a3:2d:31:1e:4a:
         57:f3:ec:2e:27:fb:32:78:ec:66:68:25:92:32:2a:bb:75:28:
         b4:eb:53:ed:98:6b:00:95:42:55:66:c8:04:d7:3b:3a:d4:2a:
         a0:fa:af:5c:cb:50:b9:d5:45:9c:81:e7:e0:8c:cc:19:c9:04:
         ab:78:06:b3:84:c4:0c:c7:1c:00:d8:cf:a1:34:3f:b3:0c:87:
         d9:57:d4:e5:11:2b:a3:a1:c5:22:c4:85:f8:9e:aa:83:73:ea:
         04:fc:b0:c2:4c:cb:64:33:dd:38:53:c6:63:ee:be:d8:e3:0b:
         51:20:37:88:a7:9d:ec:a9:e4:77:df:c2:93:8a:3b:bd:cb:8b:
         57:78:dd:34:bd:de:dc:9d:59:2f:a8:aa:79:8b:5f:be:31:bb:
         57:8e:5f:33:8c:30:e1:dd:3a:4e:73:c8:93:f8:61:7b:68:46:
         ec:06:13:ce:ec:96:bd:c5:55:92:50:93:72:1b:f2:2a:22:ee:
         c6:b3:c7:ca:b3:ec:05:8b:8a:4f:50:2f:52:b4:4b:ac:d0:bb:
         90:55:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:13 2026 by rpki-client