This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/o-XODVf1hZc2qeOEskGvrZ916vI.asa
File:                     o-XODVf1hZc2qeOEskGvrZ916vI.asa (raw, json)
Hash identifier:          t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=
Subject key identifier:   A3:E5:CE:0D:57:F5:85:97:36:A9:E3:84:B2:41:AF:AD:9F:75:EA:F2
Certificate issuer:       /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial:       019B9D9C23A178BCEDCF155EC32D988CD45C
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/o-XODVf1hZc2qeOEskGvrZ916vI.asa
Signing time:             Thu 08 Jan 2026 12:36:54 +0000
ASPA not before:          Thu 08 Jan 2026 12:36:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214145
Providers:                AS: 6939
                          AS: 34927
                          AS: 43754
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9d:9c:23:a1:78:bc:ed:cf:15:5e:c3:2d:98:8c:d4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
        Validity
            Not Before: Jan  8 12:36:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3e5ce0d57f5859736a9e384b241afad9f75eaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:1c:c9:6a:a7:b2:a6:9e:89:bd:e6:25:84:
                    18:8f:fd:76:88:bb:79:55:03:27:8e:fb:f8:c5:54:
                    cf:7c:bf:5d:5b:35:0a:82:1b:8e:8d:30:a2:ab:db:
                    cd:f0:7f:b4:12:8f:30:25:a0:bf:5f:3f:f9:e8:77:
                    f2:d9:01:e6:c3:62:02:6a:a9:b5:80:e7:11:81:99:
                    a2:dc:16:96:9f:d4:24:06:e1:ba:8f:32:f0:00:23:
                    e6:7a:61:6e:d2:aa:ed:d8:9b:ac:79:13:08:83:63:
                    51:7a:fd:06:02:87:d1:90:f0:a8:fb:2c:b7:79:cc:
                    4a:f1:55:e9:42:94:50:1a:d7:5c:2a:7f:75:f2:3a:
                    70:e4:be:10:a4:b9:23:90:a5:a5:9a:c2:eb:06:96:
                    ac:59:c1:83:6f:ea:e8:44:4a:9e:f8:64:ff:4e:3f:
                    eb:b2:56:6a:6d:5b:d5:e3:ac:b5:62:91:cc:97:1f:
                    71:a0:b5:08:2c:9d:8f:a3:5b:59:6d:05:f3:2b:32:
                    17:3c:89:c8:d6:5c:20:29:19:ad:2b:95:68:f5:97:
                    11:1d:08:59:de:1c:f0:00:24:89:c0:b7:d9:f2:fd:
                    53:3a:28:81:60:7f:1b:71:ec:ed:9a:22:fc:3e:df:
                    3d:75:2e:d5:ed:57:ef:5a:7e:9e:0a:e4:d9:05:bd:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E5:CE:0D:57:F5:85:97:36:A9:E3:84:B2:41:AF:AD:9F:75:EA:F2
            X509v3 Authority Key Identifier:
                keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/o-XODVf1hZc2qeOEskGvrZ916vI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214145

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:de:1c:6d:9d:7a:67:a2:f6:d2:11:7b:0f:df:ec:ea:e4:
         f4:23:25:ea:21:77:92:3b:6a:3f:f9:43:09:f4:e6:e8:8b:c5:
         0c:d8:54:a9:86:1d:6b:f3:60:74:fb:36:22:53:16:2c:08:ef:
         08:ae:7f:86:8c:5a:38:cb:ff:5a:40:6e:0e:6f:8e:c9:58:5c:
         c8:62:86:cc:64:e3:ca:ec:ed:4e:6e:41:6a:81:06:30:19:fa:
         b7:4b:b6:a5:ef:a3:f3:25:b7:01:17:c7:56:a8:54:2c:5d:af:
         15:4f:f5:81:93:91:9c:10:22:4a:0d:f5:ae:3a:a0:41:6b:e5:
         1d:d0:4c:93:e0:00:00:1c:66:f8:db:bd:64:de:be:7e:f5:9d:
         d5:e8:09:97:b0:f2:07:2a:06:c9:b9:01:16:68:b9:12:f8:1d:
         9d:3e:4b:f3:d5:b9:2e:74:09:33:e7:f1:6b:93:cc:7f:b1:18:
         52:fd:b0:58:5d:c8:15:a7:ab:98:38:73:ee:36:d7:5d:05:61:
         8b:22:5a:c3:ee:38:30:90:8c:7b:3c:d8:c3:81:85:6c:7e:5e:
         0e:f6:cf:d5:10:66:76:23:0b:d5:e8:c8:6f:32:96:c8:63:32:
         20:7f:33:9d:e5:19:2a:37:6f:31:85:47:4a:d0:95:ba:2d:5a:
         a5:3c:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:03 2026 by rpki-client