This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/du7armHnMdJDuNQqNV4R0NlwAvw.asa
File:                     du7armHnMdJDuNQqNV4R0NlwAvw.asa (raw, json)
Hash identifier:          ci8jOh/1Qd1L/TuKvOYgtQOXNQCcGjWJZ4+8rrUkpRU=
Subject key identifier:   76:EE:DA:AE:61:E7:31:D2:43:B8:D4:2A:35:5E:11:D0:D9:70:02:FC
Certificate issuer:       /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial:       019B9D1BF801CF9C33E2B2A0F1B4677597D4
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/du7armHnMdJDuNQqNV4R0NlwAvw.asa
Signing time:             Thu 08 Jan 2026 10:16:54 +0000
ASPA not before:          Thu 08 Jan 2026 10:16:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            33924
Providers:                AS: 6936
                          AS: 58137
                          AS: 198890
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9d:1b:f8:01:cf:9c:33:e2:b2:a0:f1:b4:67:75:97:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
        Validity
            Not Before: Jan  8 10:16:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76eedaae61e731d243b8d42a355e11d0d97002fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:13:4f:e3:db:bd:ba:f3:9e:67:30:fc:cf:
                    ff:d7:4c:57:25:6b:88:1c:85:e2:b6:fb:0a:69:b6:
                    35:68:11:96:ae:62:24:ed:4e:21:e3:8e:57:2b:01:
                    58:7a:6b:97:17:84:2b:bb:a1:b5:99:0c:b4:b4:a2:
                    9d:4a:a6:b6:4d:0f:f6:25:14:56:a5:ad:9c:d4:47:
                    93:d2:5b:66:67:91:7d:ac:3a:c2:af:50:5d:d0:b1:
                    b7:a8:b7:d5:6b:07:89:27:c7:52:2a:23:54:8e:bd:
                    ec:bf:36:13:1f:c9:51:b4:ed:1e:fd:44:4f:83:8e:
                    a5:de:5c:cc:35:b6:a3:ae:a1:8f:be:07:04:b6:d9:
                    b8:e6:1c:31:12:83:b8:c9:9b:12:94:09:50:5b:08:
                    fa:0c:14:93:e3:9f:26:66:c7:29:e4:a5:fd:76:4c:
                    96:37:cb:17:c8:30:b5:a2:29:21:65:b6:fa:d6:93:
                    91:b3:25:12:ff:81:de:40:d5:24:23:eb:05:ae:f6:
                    67:dd:19:fd:0c:8e:47:eb:8f:96:5a:ad:4d:42:51:
                    ac:c9:55:f9:a8:5d:2b:37:47:74:7c:b2:06:2f:07:
                    ec:7a:3a:2b:0f:f1:c1:4f:23:bf:28:29:95:61:0f:
                    2c:ba:d9:0e:e1:5f:c2:c7:1f:01:cb:a3:1c:cf:4c:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EE:DA:AE:61:E7:31:D2:43:B8:D4:2A:35:5E:11:D0:D9:70:02:FC
            X509v3 Authority Key Identifier:
                keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/du7armHnMdJDuNQqNV4R0NlwAvw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33924

    Signature Algorithm: sha256WithRSAEncryption
         90:38:71:89:02:46:11:74:41:2b:c4:e5:6d:8f:14:a5:99:b7:
         30:f0:5d:e7:6b:d5:0e:da:5f:f4:d8:72:7f:02:73:37:f5:ac:
         4b:4b:85:06:41:18:5b:0f:e5:40:a2:56:b8:bd:95:89:38:04:
         72:f8:9e:07:d5:5b:c1:23:47:ac:e9:f0:db:48:18:b3:8a:ee:
         a5:cd:fc:ac:b4:1d:b7:62:8b:34:51:a5:c2:89:80:06:f6:b8:
         9c:86:cf:94:eb:37:da:99:d2:a4:7c:bb:49:79:0f:a4:28:46:
         f1:1e:82:58:92:e8:46:40:34:07:fa:39:af:6f:c9:f1:26:a5:
         39:b0:cc:04:79:4f:00:33:13:a1:22:33:5b:9d:fd:c3:7a:95:
         5f:3e:d9:54:20:17:dc:2c:b1:06:5e:dd:d9:4c:ea:e6:d3:a2:
         58:63:dd:24:7d:d8:ca:13:9c:b1:56:69:2b:f6:68:66:65:5a:
         3f:af:bf:e8:e0:84:d4:7a:f1:e8:d2:2f:2e:03:f7:7b:1f:81:
         b8:8b:24:e0:ef:ef:c7:64:9a:c2:74:8a:13:9e:a1:78:a5:57:
         65:60:2b:ed:bd:44:5f:3c:19:23:16:fc:75:8f:4f:6f:e2:68:
         46:1e:d4:f3:a8:23:33:d5:df:9d:dd:2b:80:f0:a2:85:e1:54:
         4f:42:f6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:51 2026 by rpki-client