This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/nn_JfFoGDqXnHnXClRYM8BVKfms.asa
File:                     nn_JfFoGDqXnHnXClRYM8BVKfms.asa (raw, json)
Hash identifier:          Go99gPjwQ2qP0Poq+GhGWvW0PoWn1a+y2XVSES6ZIPY=
Subject key identifier:   9E:7F:C9:7C:5A:06:0E:A5:E7:1E:75:C2:95:16:0C:F0:15:4A:7E:6B
Certificate issuer:       /CN=52856f38e0513f9feab0578c777d7bd063a274aa
Certificate serial:       019C04563AB1300646E7B4323E7E80C7E013
Authority key identifier: 52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/nn_JfFoGDqXnHnXClRYM8BVKfms.asa
Signing time:             Wed 28 Jan 2026 11:21:25 +0000
ASPA not before:          Wed 28 Jan 2026 11:21:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208267
Providers:                AS: 6461
                          AS: 41327
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:04:56:3a:b1:30:06:46:e7:b4:32:3e:7e:80:c7:e0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52856f38e0513f9feab0578c777d7bd063a274aa
        Validity
            Not Before: Jan 28 11:21:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e7fc97c5a060ea5e71e75c295160cf0154a7e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:ca:55:ec:e9:8f:82:4e:74:c8:3a:d8:f0:
                    b5:6c:c7:94:de:5a:17:e7:ac:61:dc:42:e7:6f:e5:
                    75:79:e4:43:78:04:c7:f2:cc:f3:3a:ac:7e:c2:5a:
                    2f:b4:c2:9e:30:f4:9f:42:aa:6b:d4:88:2d:82:ca:
                    06:c1:9f:df:f3:75:fa:55:1a:e0:fa:56:c6:21:d8:
                    a7:7e:12:3d:f1:3b:30:66:5a:c4:66:71:fb:c4:33:
                    fc:da:53:a2:f5:ee:68:f8:73:92:a0:4e:f4:cd:ad:
                    3d:fc:ec:c4:da:c6:c7:0f:4f:be:0a:11:c2:9c:7d:
                    91:77:bb:8a:ba:09:a5:d1:80:58:19:20:98:40:26:
                    55:72:cc:f6:6b:32:8a:f8:da:f0:48:bb:10:f6:89:
                    46:ba:61:df:cb:3d:19:eb:3b:4e:ec:e4:83:a9:4c:
                    ff:0e:4b:4c:6f:4e:61:bf:e2:03:83:35:d0:5f:aa:
                    28:07:54:03:82:14:c5:27:8a:22:52:a3:a8:8f:f1:
                    42:03:52:b3:eb:f8:9b:35:5a:9c:11:8e:31:57:03:
                    d2:c7:7e:93:2d:7c:b7:d3:21:c1:60:c4:54:86:f1:
                    a8:a1:72:ec:17:71:15:08:e9:a2:c4:16:5b:1c:41:
                    ff:b2:a8:a8:cd:d9:8d:67:d3:9d:78:21:5f:68:36:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:C9:7C:5A:06:0E:A5:E7:1E:75:C2:95:16:0C:F0:15:4A:7E:6B
            X509v3 Authority Key Identifier:
                keyid:52:85:6F:38:E0:51:3F:9F:EA:B0:57:8C:77:7D:7B:D0:63:A2:74:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoVvOOBRP5_qsFeMd3170GOidKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/nn_JfFoGDqXnHnXClRYM8BVKfms.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c43929-0c30-4b9f-b118-914a16e6a34e/1/UoVvOOBRP5_qsFeMd3170GOidKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208267

    Signature Algorithm: sha256WithRSAEncryption
         76:13:21:a6:45:8b:ff:09:84:33:81:08:ed:7d:27:75:c6:44:
         b1:f0:1b:14:97:54:db:12:be:3d:9d:7c:da:57:7a:de:12:71:
         66:0a:66:ee:d5:5a:75:26:92:1e:ce:2a:84:2d:b6:62:f0:cf:
         62:68:ad:e8:e4:03:5c:2e:0b:71:77:06:69:68:4c:72:55:7c:
         ce:b2:34:d5:30:e7:3c:8f:ba:76:b5:d1:98:25:42:ac:3e:ca:
         85:57:49:f4:7a:45:98:1d:f8:ad:da:bf:d6:03:8b:59:18:7b:
         0b:8e:fd:96:b1:0b:0d:b7:4c:46:d0:82:b3:2c:bd:94:d7:f2:
         dd:36:6b:f5:7d:c2:a7:fc:53:8a:05:8c:6d:4b:3a:e7:83:a5:
         ff:2e:b8:14:71:da:a1:e3:5a:12:d5:df:7a:a7:07:3c:18:6a:
         1c:d3:bd:ba:c7:1f:44:af:3e:ca:b6:2f:fa:8a:7b:1a:ef:31:
         7a:f9:07:c4:9c:10:33:13:41:98:ad:72:3a:e9:f1:2a:4f:8c:
         c7:58:3d:63:44:d2:80:25:69:1a:ba:70:c0:4d:e3:82:2e:5d:
         76:84:bb:c3:01:b7:e7:a9:c9:0b:c9:91:2c:ab:ce:b3:b8:d8:
         b5:7c:5c:22:12:59:6e:47:70:0f:ea:03:91:67:bd:25:55:94:
         62:5b:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:47 2026 by rpki-client