This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/1-0HVLayObU8RuL6OrsnJm4gmTnI.asa
File:                     1-0HVLayObU8RuL6OrsnJm4gmTnI.asa (raw, json)
Hash identifier:          KYPcud2EQy4OYgiyeuat0HLeEC0DLCcTFa4Ml4StUxY=
Subject key identifier:   FB:41:D5:2D:AC:8E:6D:4F:11:B8:BE:8E:AE:C9:C9:9B:88:26:4E:72
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       019C05596380A8424643F4632E3FAE54C4E4
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/1-0HVLayObU8RuL6OrsnJm4gmTnI.asa
Signing time:             Wed 28 Jan 2026 16:04:30 +0000
ASPA not before:          Wed 28 Jan 2026 16:04:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203592
Providers:                AS: 3320
                          AS: 8220
                          AS: 15372
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:59:63:80:a8:42:46:43:f4:63:2e:3f:ae:54:c4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Jan 28 16:04:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb41d52dac8e6d4f11b8be8eaec9c99b88264e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:c9:66:56:90:4f:42:3b:7f:0d:5a:a0:e2:
                    df:eb:ee:3b:b1:05:00:8f:36:1b:72:9e:ad:26:dd:
                    de:a3:b5:7a:ff:98:76:3a:63:15:48:11:11:df:fc:
                    da:f4:6a:52:dc:2c:40:db:50:0f:6a:94:63:f0:7a:
                    65:2f:ea:1d:8f:ca:5d:7a:27:10:bf:41:14:04:16:
                    03:f7:d9:f2:d5:31:1e:3f:7c:82:a6:72:b3:fb:c9:
                    10:09:43:3f:de:77:b9:63:da:75:ac:21:fb:85:ad:
                    88:8c:c7:f4:9d:26:55:ea:75:03:82:75:08:78:66:
                    68:85:9b:92:86:e9:c4:2f:66:12:a2:3b:44:71:70:
                    ec:92:d4:60:3b:51:7b:d6:4d:ae:09:ae:91:10:2f:
                    d0:83:d2:ea:40:53:63:aa:d7:6a:bd:a9:e6:10:84:
                    f2:27:4e:d1:58:d7:72:08:ae:e2:62:81:be:96:6c:
                    a0:ab:49:87:28:1f:95:4f:c5:3e:fa:d0:50:23:f4:
                    72:85:50:02:8a:f4:71:56:3f:12:b2:7c:9d:a3:0e:
                    b9:bf:7f:46:22:ba:92:62:a5:c4:73:11:d7:91:da:
                    23:57:43:bd:dd:c7:ad:a1:47:fd:22:0b:3b:e5:a2:
                    ce:66:01:bb:49:a2:29:3a:67:1d:04:40:3b:4a:af:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:41:D5:2D:AC:8E:6D:4F:11:B8:BE:8E:AE:C9:C9:9B:88:26:4E:72
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/1-0HVLayObU8RuL6OrsnJm4gmTnI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203592

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:cd:c9:dd:89:1b:5d:3f:2f:ca:05:c8:94:59:2b:4c:cf:
         28:0f:8a:2b:3e:d4:bb:6e:60:40:ad:8b:e4:99:2f:d6:cf:92:
         21:15:d0:1e:ee:76:29:89:64:f5:60:9e:e9:51:4a:a3:e3:42:
         37:73:09:fe:e7:cb:74:01:bc:5d:8c:41:b9:1a:22:35:cd:6a:
         40:d3:10:14:cb:76:26:3f:99:ca:fd:eb:fb:92:9f:b0:4e:e8:
         b6:87:8e:25:ec:e8:60:16:01:cb:bb:3c:8e:e7:db:da:f4:19:
         52:75:1e:56:3b:fa:45:0a:2c:15:29:fc:c6:2d:b7:31:09:bb:
         ef:1f:47:9c:30:fe:56:6a:d5:77:68:98:c3:dc:12:08:9f:a9:
         9b:87:39:f5:9b:56:d0:2e:27:b1:75:3f:e0:28:3b:2e:2e:c2:
         34:81:08:09:d6:08:38:4e:79:30:0d:5c:20:d9:be:0d:f1:8f:
         1a:1f:ea:5c:53:ef:8f:96:75:b7:fa:4e:82:6c:86:76:b8:ce:
         dc:2f:42:44:dc:ce:ee:ae:db:a7:30:05:eb:81:aa:71:97:0d:
         3d:da:92:d5:54:10:fa:28:fa:dd:9d:db:ab:8d:3c:db:b1:92:
         e4:10:1f:0e:0d:1f:02:c5:0f:fe:cf:7f:13:76:54:2b:bf:6c:
         e3:8c:2d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:47 2026 by rpki-client