This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/iAuyM0xRPm6k9WZkbf-UQmMAnfE.asa
File:                     iAuyM0xRPm6k9WZkbf-UQmMAnfE.asa (raw, json)
Hash identifier:          1Dvqf+mvs7T78l+ixE8gKt9/9BumHLWVuJV9OH5rDI8=
Subject key identifier:   88:0B:B2:33:4C:51:3E:6E:A4:F5:66:64:6D:FF:94:42:63:00:9D:F1
Certificate issuer:       /CN=55d25170750c4dbc2717b0c1771c8d8e45472318
Certificate serial:       019BF8672EE1BF70A71C18B60DFBDC6A72C2
Authority key identifier: 55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/iAuyM0xRPm6k9WZkbf-UQmMAnfE.asa
Signing time:             Mon 26 Jan 2026 03:44:30 +0000
ASPA not before:          Mon 26 Jan 2026 03:44:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215172
Providers:                AS: 6939
                          AS: 7720
                          AS: 34927
                          AS: 44324
                          AS: 53356
                          AS: 154185
                          AS: 199310
                          AS: 203168
                          AS: 206216
                          AS: 213605
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:67:2e:e1:bf:70:a7:1c:18:b6:0d:fb:dc:6a:72:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d25170750c4dbc2717b0c1771c8d8e45472318
        Validity
            Not Before: Jan 26 03:44:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=880bb2334c513e6ea4f566646dff944263009df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:52:1b:bf:07:09:5c:b2:d4:8d:bc:8a:06:
                    81:4f:08:68:e3:d3:e0:67:1f:c0:4d:e2:c5:fa:50:
                    4b:de:f9:3d:38:8b:3f:c0:85:5e:71:2b:c3:1b:de:
                    88:89:a2:e4:d0:a4:5c:8e:1c:1b:90:7a:08:4a:65:
                    d0:18:2d:26:d0:e2:5c:b0:77:8c:33:c9:5b:a2:55:
                    0b:58:5b:7c:a1:5d:9d:fa:38:82:38:59:c2:61:47:
                    69:f0:2c:c4:bd:d1:a3:32:65:60:ad:4b:17:e9:87:
                    fd:11:9e:70:88:b0:ce:24:c7:0f:51:f0:19:4e:95:
                    8e:5b:6e:21:60:f6:52:ea:b8:1f:65:79:21:cb:86:
                    f3:fe:d4:57:fb:f3:eb:6b:e5:49:2d:48:f3:6a:73:
                    89:cb:1d:ad:bd:32:4c:78:c0:37:2c:aa:fb:75:fb:
                    8e:0e:0a:d3:d4:6c:a2:8a:cc:7a:2a:1b:0a:19:a6:
                    80:57:ee:5e:cb:34:58:c8:bc:2c:6d:55:b0:40:5f:
                    b4:e4:fe:4d:98:e2:70:69:12:bf:8c:a6:45:3c:be:
                    a4:0b:19:5f:44:40:ed:c7:b9:ae:79:07:a0:4c:5f:
                    43:f7:f2:d3:78:3b:68:44:e8:07:26:ce:16:a2:f8:
                    8e:af:22:15:ab:d4:d9:b4:e1:3f:bc:65:ec:5c:72:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0B:B2:33:4C:51:3E:6E:A4:F5:66:64:6D:FF:94:42:63:00:9D:F1
            X509v3 Authority Key Identifier:
                keyid:55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/iAuyM0xRPm6k9WZkbf-UQmMAnfE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215172

    Signature Algorithm: sha256WithRSAEncryption
         35:2e:cd:20:d4:18:89:8e:03:57:af:1c:62:d9:37:c4:8e:94:
         df:c4:01:d0:e4:45:cc:6c:96:9b:e3:38:64:c1:fa:83:b5:ef:
         96:29:72:2e:74:84:b5:41:74:57:13:be:e2:0c:01:e4:7c:be:
         cd:3c:56:8f:e3:57:a1:1d:6a:b8:52:06:f4:9c:14:9f:35:1e:
         43:69:5e:02:54:d0:5e:b1:ff:f9:ff:c0:ed:5d:17:ec:84:1d:
         ae:d7:29:06:17:fc:73:53:8a:be:02:7c:8a:4b:83:ef:4a:3e:
         46:02:ea:90:69:93:0c:01:24:0b:31:40:38:bb:c0:58:5c:e9:
         de:00:c5:30:4e:52:f2:4a:f1:91:43:15:5b:46:53:f3:a5:36:
         7f:17:57:d3:aa:8b:8b:6c:b2:08:7e:3e:a5:48:6d:c1:be:02:
         73:b6:d9:ea:58:02:cf:bb:31:5c:e6:b4:5e:a9:40:40:9a:22:
         76:69:b1:a2:57:af:31:ac:0b:62:ed:eb:44:ef:3f:4e:a5:05:
         fc:78:a3:fc:87:3a:ba:1c:b3:c7:38:03:01:3e:6f:2d:31:6d:
         e1:b8:55:29:c2:a8:bf:26:a9:41:e5:ac:5e:ee:f1:d4:0a:81:
         6f:2d:82:24:66:33:b7:bc:22:90:10:59:78:e6:c1:2d:5d:63:
         83:6f:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:50 2026 by rpki-client