This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/2hSPx6rYzToH0pWcWn39SaZkcxE.asa
File:                     2hSPx6rYzToH0pWcWn39SaZkcxE.asa (raw, json)
Hash identifier:          52CB2Qc9c7IoeeGlVxpb69JAcbfNq968NJtdyxkcVBQ=
Subject key identifier:   DA:14:8F:C7:AA:D8:CD:3A:07:D2:95:9C:5A:7D:FD:49:A6:64:73:11
Certificate issuer:       /CN=ccb7e4bae639ab6e5cbc68f056a93a741ceb5b57
Certificate serial:       019C40656592EFC0DA4A4F89F3D8C4E71D2C
Authority key identifier: CC:B7:E4:BA:E6:39:AB:6E:5C:BC:68:F0:56:A9:3A:74:1C:EB:5B:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zLfkuuY5q25cvGjwVqk6dBzrW1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/2hSPx6rYzToH0pWcWn39SaZkcxE.asa
Signing time:             Mon 09 Feb 2026 03:15:12 +0000
ASPA not before:          Mon 09 Feb 2026 03:15:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201398
Providers:                AS: 56755
                          AS: 58057
                          AS: 209735
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zLfkuuY5q25cvGjwVqk6dBzrW1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:65:65:92:ef:c0:da:4a:4f:89:f3:d8:c4:e7:1d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb7e4bae639ab6e5cbc68f056a93a741ceb5b57
        Validity
            Not Before: Feb  9 03:15:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da148fc7aad8cd3a07d2959c5a7dfd49a6647311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:d2:1f:d8:ba:ee:93:ce:67:63:48:a9:bf:
                    af:10:c6:d6:f0:d2:d8:d1:7c:4e:de:8f:47:9a:45:
                    39:f1:71:ed:46:07:cb:10:6c:06:c0:3a:c1:b5:21:
                    85:b2:00:2c:50:99:b1:c0:f5:8b:9d:a8:13:9d:93:
                    23:a9:2b:a5:50:91:7e:25:55:5b:67:d1:dd:93:99:
                    0d:ab:64:06:e6:17:8f:c1:31:82:93:3d:74:70:94:
                    74:46:46:e4:01:f6:57:de:3f:cd:a9:5c:32:63:15:
                    e1:ee:9e:7c:36:b2:e2:9f:45:1f:5b:56:f4:52:a3:
                    39:21:a7:70:76:48:1e:09:c8:d3:21:5c:e8:25:ae:
                    a5:92:2f:90:84:a0:0f:a5:79:31:61:40:e3:03:e2:
                    7a:ab:2f:c1:8a:20:59:00:ba:96:50:87:fa:b5:7c:
                    73:bf:f7:4d:e1:95:a0:93:de:f7:c2:b7:78:2f:e8:
                    41:bd:a4:27:38:3d:79:33:c0:26:d1:e1:7d:72:2a:
                    9f:1a:d9:50:aa:c7:03:e0:33:19:78:33:71:d1:e9:
                    12:29:20:96:7e:1e:a7:7a:7e:c2:be:65:ce:a7:10:
                    a4:45:55:db:16:28:7e:3a:8a:99:da:1c:0a:b4:cc:
                    92:cc:bc:9b:b2:f5:03:4f:8d:b1:81:4a:6d:2b:17:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:14:8F:C7:AA:D8:CD:3A:07:D2:95:9C:5A:7D:FD:49:A6:64:73:11
            X509v3 Authority Key Identifier:
                keyid:CC:B7:E4:BA:E6:39:AB:6E:5C:BC:68:F0:56:A9:3A:74:1C:EB:5B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLfkuuY5q25cvGjwVqk6dBzrW1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/2hSPx6rYzToH0pWcWn39SaZkcxE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201398

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:c7:69:18:71:aa:4c:38:40:8f:cf:d1:21:4d:fb:40:ae:
         16:b9:2d:2b:bb:d1:71:c4:28:82:20:d9:a3:14:e4:40:ff:c6:
         ef:eb:69:35:de:d0:47:3d:0b:47:07:a6:8b:c8:16:36:c3:dc:
         d4:09:09:4f:33:4c:4d:cb:bd:44:35:c8:3d:a5:ec:df:68:4c:
         78:d6:17:a3:be:bf:9c:a7:3f:1a:4e:28:04:4a:75:67:66:fa:
         75:10:86:bb:14:41:c7:d4:45:e7:3b:f0:fb:36:01:19:16:7d:
         e3:7a:0e:6d:1a:35:53:49:a1:5b:2f:99:56:3f:e4:ac:77:f1:
         a3:a3:94:61:9f:a2:29:04:f1:fe:a0:0e:a3:4b:d7:d9:a5:9a:
         3e:90:da:5f:96:62:5d:e0:ad:4f:ad:06:26:ce:f2:e5:96:e7:
         9f:87:07:9d:4a:8c:41:f1:db:78:63:d9:a0:1c:5a:a9:05:57:
         39:cb:cb:52:11:b3:93:76:b0:43:71:b6:ea:32:50:d0:fa:c8:
         ef:59:64:13:4f:d3:21:67:c8:c5:fd:29:b3:8f:37:d0:42:25:
         9d:4c:bb:a9:8d:0b:b7:05:43:12:4a:25:e4:7c:36:e7:18:25:
         7f:93:e8:18:17:73:6a:ba:89:07:fd:de:6b:c8:a8:d3:a1:53:
         8c:5d:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:29 2026 by rpki-client