This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/2l98OJUUaR9ta-P_Yl3BL25xX6E.asa
File:                     2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (raw, json)
Hash identifier:          epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=
Subject key identifier:   DA:5F:7C:38:95:14:69:1F:6D:6B:E3:FF:62:5D:C1:2F:6E:71:5F:A1
Certificate issuer:       /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial:       019C15A2B4B0D5A06667BBFC04AA77E75456
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/2l98OJUUaR9ta-P_Yl3BL25xX6E.asa
Signing time:             Sat 31 Jan 2026 19:58:30 +0000
ASPA not before:          Sat 31 Jan 2026 19:58:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215980
Providers:                AS: 8772
                          AS: 29632
                          AS: 41051
                          AS: 209533
                          AS: 215492
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:15:a2:b4:b0:d5:a0:66:67:bb:fc:04:aa:77:e7:54:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
        Validity
            Not Before: Jan 31 19:58:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da5f7c389514691f6d6be3ff625dc12f6e715fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:15:48:7c:12:83:17:26:4f:9b:f4:58:9e:4c:
                    23:17:1d:73:bc:94:3b:25:1e:52:66:99:0b:04:02:
                    e1:4a:09:bb:c9:d5:64:72:57:34:19:ba:27:b7:9b:
                    fe:57:b5:c5:8e:e5:d6:36:50:29:3a:86:f1:47:e1:
                    1d:39:aa:1b:80:21:fa:3f:7e:82:b9:78:12:35:a4:
                    46:85:bf:e0:d1:d7:f0:bf:80:05:26:9a:89:df:41:
                    cc:4f:b8:1f:c7:11:23:dc:30:ab:d2:74:b0:8d:76:
                    a3:50:a6:ff:c2:d9:15:80:23:42:bc:38:46:3c:2b:
                    00:af:05:b2:fb:7a:73:80:2f:c1:4b:4a:01:c2:22:
                    1b:96:b4:99:5d:37:35:0f:96:55:7c:03:50:16:c9:
                    83:f4:c0:b3:97:f9:d9:58:32:93:1e:fc:af:42:5c:
                    cd:93:ae:86:a5:b1:a6:42:1e:a7:b0:7a:74:06:5b:
                    a9:8e:01:18:1d:28:70:d8:88:8d:a3:f2:ca:4f:14:
                    b8:b3:27:99:ed:ea:d9:1a:5b:e3:f1:ab:46:9e:a7:
                    30:33:f9:0d:fe:0d:2a:de:9e:86:ba:af:cf:ad:81:
                    61:4a:3f:24:70:1e:58:82:5e:58:f9:6f:30:0f:69:
                    5f:34:87:d9:15:b6:72:9f:9d:cf:3a:bc:b3:d2:64:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5F:7C:38:95:14:69:1F:6D:6B:E3:FF:62:5D:C1:2F:6E:71:5F:A1
            X509v3 Authority Key Identifier:
                keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/2l98OJUUaR9ta-P_Yl3BL25xX6E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215980

    Signature Algorithm: sha256WithRSAEncryption
         3b:0c:32:65:27:65:97:98:00:90:36:65:09:2f:b6:50:a4:60:
         24:96:0d:5a:22:c6:2f:14:84:1a:6d:8a:a2:1e:3a:20:4d:0a:
         28:69:c7:8e:a4:17:6a:a5:7f:74:bd:fc:18:75:6f:c6:ef:d5:
         69:33:bc:ff:f3:3d:da:4d:84:27:c0:ab:62:89:02:c0:97:98:
         e0:a8:8d:d8:f2:fc:c0:d9:74:e8:0c:e9:03:5c:7d:bb:14:60:
         87:d4:84:58:03:c3:57:59:ea:7b:a5:72:97:54:33:be:34:df:
         ec:a1:93:92:14:12:b2:b5:f0:68:07:60:4c:87:2b:1e:a5:98:
         9e:88:c6:b9:83:2d:c9:a7:6f:89:94:29:d8:88:36:2b:de:8d:
         12:3b:06:d1:e3:e2:29:bd:42:01:91:17:e9:ce:ca:b9:0f:73:
         77:fd:6b:8f:7e:50:20:a5:a6:8a:59:39:78:70:6a:1c:50:46:
         b2:d1:00:9e:6a:71:86:f3:b0:75:28:1f:b0:0f:7c:e5:81:9d:
         0b:a5:28:ae:cb:72:d4:9f:16:80:55:e8:5c:f9:cb:62:b9:53:
         95:c0:c0:50:f3:5c:16:6c:9f:a3:dc:53:82:c7:57:e5:c5:61:
         54:ca:98:79:3a:50:75:cf:89:dd:1f:86:12:2c:19:57:64:a3:
         48:6e:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:01 2026 by rpki-client