This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Bik7m89vzRCco3M88nPjZHbkJFs.asa
File:                     Bik7m89vzRCco3M88nPjZHbkJFs.asa (raw, json)
Hash identifier:          E3lk8QC7FZHK6rDbU0vSs7vixcRg0VKIQc1p3hHw6G4=
Subject key identifier:   06:29:3B:9B:CF:6F:CD:10:9C:A3:73:3C:F2:73:E3:64:76:E4:24:5B
Certificate issuer:       /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial:       019BF54B9A7BFE8716288532B095D465CE7B
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Bik7m89vzRCco3M88nPjZHbkJFs.asa
Signing time:             Sun 25 Jan 2026 13:15:31 +0000
ASPA not before:          Sun 25 Jan 2026 13:15:31 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211358
Providers:                AS: 6517
                          AS: 6939
                          AS: 8772
                          AS: 11967
                          AS: 16276
                          AS: 29632
                          AS: 33387
                          AS: 34927
                          AS: 41051
                          AS: 52025
                          AS: 152565
                          AS: 207841
                          AS: 209735
                          AS: 211288
                          AS: 212895
                          AS: 215638
                          AS: 215828
                          AS: 216324
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:4b:9a:7b:fe:87:16:28:85:32:b0:95:d4:65:ce:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
        Validity
            Not Before: Jan 25 13:15:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06293b9bcf6fcd109ca3733cf273e36476e4245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:2b:9e:91:22:f1:58:3e:b9:65:95:a2:0a:
                    e3:cd:9f:d9:a0:2f:77:12:f0:c8:ff:65:c7:34:99:
                    40:cc:31:1f:c3:65:ad:63:3c:51:fe:9c:44:0f:dd:
                    1e:c1:8e:36:95:72:18:52:26:ed:61:ed:87:b0:68:
                    44:f7:71:ab:1e:3f:d0:17:86:bf:35:58:7d:ff:54:
                    57:61:81:08:dd:08:80:c8:6e:a3:9d:7c:ba:eb:21:
                    9c:28:28:6b:c1:2c:fb:59:88:07:ef:4f:35:fa:e2:
                    9c:45:05:76:55:82:1d:81:3b:7e:1c:26:05:0d:d2:
                    0b:d4:ab:e6:cb:79:2a:23:31:2f:ca:e6:ce:5d:8d:
                    c4:18:db:f7:56:7c:11:65:4e:2f:d2:a7:22:d7:dc:
                    ce:e5:f8:1b:44:a1:bb:cb:37:a5:a7:3c:6f:65:fd:
                    b8:6b:e2:39:10:d6:cd:50:1d:ec:81:f0:a1:d8:67:
                    b9:9c:bb:c7:4e:67:43:7a:ac:90:6e:1c:f5:62:a6:
                    f9:80:eb:50:48:d3:18:37:61:d4:28:e6:59:be:d6:
                    e5:32:5f:72:d2:30:53:dc:cf:3f:fc:07:34:30:04:
                    0f:61:85:26:55:65:0e:9c:24:b0:2c:7a:54:7f:ac:
                    ef:11:0c:e4:87:dd:09:48:71:81:81:6a:b5:07:17:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:29:3B:9B:CF:6F:CD:10:9C:A3:73:3C:F2:73:E3:64:76:E4:24:5B
            X509v3 Authority Key Identifier:
                keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/Bik7m89vzRCco3M88nPjZHbkJFs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211358

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:ed:e0:6e:7a:00:65:00:4a:42:f1:ad:23:02:dd:28:ca:
         b1:19:66:ee:66:3b:ba:a5:0b:07:da:6e:41:e8:ac:db:f6:2e:
         3b:49:17:14:f1:b6:8f:fb:dc:4b:da:55:7c:2c:4f:09:b7:56:
         88:93:ee:89:e9:3b:fb:9e:71:e0:b2:35:1a:06:5e:17:32:3e:
         d3:0c:4b:b2:f5:66:44:65:db:31:27:54:9a:ea:8d:5f:5c:c7:
         23:0a:a4:a3:08:d5:c1:ad:55:bb:37:46:8b:40:5a:94:92:02:
         56:ea:58:2a:7c:78:16:24:35:89:ca:8c:69:e2:f8:10:8a:61:
         94:bd:bf:18:ae:0a:ee:09:59:d6:82:e5:fa:5c:1a:da:0f:bc:
         b0:14:88:87:24:63:18:3d:34:38:a9:26:b1:55:d8:f7:a6:51:
         88:75:51:b1:74:5e:57:80:ab:94:53:1d:21:6a:5c:fe:e7:ae:
         98:b3:ef:36:3c:a3:a7:f5:02:b9:fb:0a:45:b0:6a:02:52:bc:
         c4:5b:22:ea:fb:24:5f:d5:55:a7:22:da:50:ba:c8:06:98:78:
         28:43:66:1b:ff:c9:4e:29:f1:cc:34:d9:d7:46:53:cc:0f:b1:
         11:7c:91:9e:97:ef:05:78:ec:59:33:3f:f4:12:38:a5:4d:40:
         ec:2b:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:47:03 2026 by rpki-client