This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa
File:                     jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa (raw, json)
Hash identifier:          4Rm+AgcIx2QNLzodYb14yKwLv1JgZDJIFSxZdtp7HDw=
Subject key identifier:   8E:D6:56:A3:6F:CE:27:8B:D9:35:98:16:52:62:7A:5E:99:58:A0:1C
Certificate issuer:       /CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
Certificate serial:       019C03EB2EC509F09C22AFF3D786AE71A56C
Authority key identifier: BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa
Signing time:             Wed 28 Jan 2026 09:24:30 +0000
ASPA not before:          Wed 28 Jan 2026 09:24:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200123
Providers:                AS: 20632
                          AS: 48354
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:03:eb:2e:c5:09:f0:9c:22:af:f3:d7:86:ae:71:a5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6190344d9eb6eb0ccb948e37aa0aaabe2f2e90
        Validity
            Not Before: Jan 28 09:24:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ed656a36fce278bd935981652627a5e9958a01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:03:f2:fb:5b:7d:83:95:4e:35:d0:6f:20:
                    25:e9:84:fb:32:a8:1e:8e:45:19:80:b3:6e:51:7b:
                    7b:46:a0:f7:01:da:b4:8d:e0:cc:a4:7b:97:e2:d9:
                    34:46:b6:d8:9f:7f:c6:ac:5c:c3:4f:7c:b4:e4:38:
                    22:8e:1e:66:b2:ee:3b:dc:f8:4d:64:dc:d7:98:fa:
                    5e:07:0c:5f:7f:a0:67:fb:e1:3f:a7:28:63:b9:82:
                    43:c5:22:28:39:b8:13:7d:7a:79:26:f1:2e:20:df:
                    7a:cd:31:23:06:79:c8:a7:a5:84:51:5d:21:a6:10:
                    03:0e:02:07:65:17:51:53:98:9f:59:07:d2:01:80:
                    24:90:1a:df:21:6a:3d:19:32:4f:d1:d8:c2:ed:53:
                    e9:0f:ac:08:e3:f8:31:5a:31:e6:73:b5:3f:9e:9d:
                    ed:9c:6d:e5:59:e1:14:99:52:cd:54:96:02:4c:df:
                    ca:1f:11:d2:a5:d0:eb:84:15:21:63:c6:73:4c:d0:
                    c1:e4:48:6e:70:52:4b:26:db:f9:46:0c:b4:31:9e:
                    0b:8a:ac:cb:79:ca:dd:7b:6f:1d:65:a9:be:a6:f8:
                    07:df:a5:2b:08:29:20:7d:b0:83:57:e4:1e:8a:5a:
                    da:9d:e4:2d:2b:90:4e:e8:16:17:30:a7:8a:94:4d:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D6:56:A3:6F:CE:27:8B:D9:35:98:16:52:62:7A:5E:99:58:A0:1C
            X509v3 Authority Key Identifier:
                keyid:BD:61:90:34:4D:9E:B6:EB:0C:CB:94:8E:37:AA:0A:AA:BE:2F:2E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWGQNE2etusMy5SON6oKqr4vLpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/jtZWo2_OJ4vZNZgWUmJ6XplYoBw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e38fc5-13a9-4906-b55e-79453adff1bd/1/vWGQNE2etusMy5SON6oKqr4vLpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200123

    Signature Algorithm: sha256WithRSAEncryption
         84:d2:c7:1c:3e:e3:fb:4e:50:a7:16:e7:c1:49:50:18:ec:1d:
         f1:16:af:98:2f:20:9e:d3:fc:93:ce:57:d1:9b:34:7e:cc:73:
         d4:aa:e0:60:ca:ac:bb:c2:5f:05:54:73:80:e8:5a:26:5c:01:
         3b:5c:d1:91:ea:24:8b:2f:e0:a5:f6:83:dd:08:7e:66:76:82:
         36:5c:db:cd:d1:a4:ad:f9:f1:7e:3a:45:f9:f5:26:48:4d:68:
         cc:5c:71:35:f8:df:1e:01:3d:d3:4d:7b:58:a4:c4:e0:ab:ab:
         6d:08:4e:f1:9f:93:a0:47:ee:b4:c8:88:2a:76:a8:c4:5d:8d:
         db:4d:2d:43:6a:1b:08:72:03:ee:8d:7e:03:b2:48:82:6a:29:
         20:6c:68:d8:b5:57:5b:50:b5:46:55:6c:62:90:f2:0c:90:0c:
         80:61:68:3c:eb:2f:09:61:3c:1b:7d:3c:6c:b7:6d:ab:11:a7:
         e9:b2:2a:cd:2d:be:97:6b:01:82:dc:ff:5f:e2:d2:00:76:b0:
         cd:ba:34:96:b9:c0:fd:e1:ea:4a:8b:4a:94:58:6c:ab:7c:8a:
         ec:ed:77:1d:0d:55:bc:b4:65:3c:65:05:58:99:98:59:21:ba:
         9a:96:bf:ea:4e:8d:7a:6a:e6:68:44:61:eb:eb:38:3a:53:93:
         c4:cc:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:13 2026 by rpki-client