This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/opsubjEoRPBD2SKWbQwhsyQi_lA.asa
File:                     opsubjEoRPBD2SKWbQwhsyQi_lA.asa (raw, json)
Hash identifier:          Wxgmik5eog5zeLftYBqHXvPHZjZbZr+djsPQFi4j55s=
Subject key identifier:   A2:9B:2E:6E:31:28:44:F0:43:D9:22:96:6D:0C:21:B3:24:22:FE:50
Certificate issuer:       /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial:       019B4B9C8D8E5D703A87735FB796FB33AB48
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/opsubjEoRPBD2SKWbQwhsyQi_lA.asa
Signing time:             Tue 23 Dec 2025 14:28:29 +0000
ASPA not before:          Tue 23 Dec 2025 14:28:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215510
Providers:                AS: 31543
                          AS: 48362
                          AS: 58115
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4b:9c:8d:8e:5d:70:3a:87:73:5f:b7:96:fb:33:ab:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
        Validity
            Not Before: Dec 23 14:28:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a29b2e6e312844f043d922966d0c21b32422fe50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:c0:b8:2a:57:05:b0:35:7a:f2:90:5e:9a:
                    86:d5:11:fa:1b:07:80:7f:25:ba:1e:c1:a8:af:98:
                    e6:f0:5d:38:3b:58:cd:ac:09:2e:77:e9:8d:6d:85:
                    1a:e0:94:6f:22:91:23:bb:7c:e1:34:fa:21:53:ae:
                    0f:d1:4a:0e:5c:f4:ac:f1:d9:7c:40:00:2e:b9:be:
                    9d:b0:f6:e1:ba:69:4f:a9:e1:3b:d1:8a:67:28:15:
                    1e:7f:3d:7b:b6:67:e5:1c:c8:88:48:8a:43:c2:cc:
                    2c:e9:b6:ca:88:08:5f:2e:ac:22:2f:2c:e0:fe:f9:
                    6e:36:cc:1f:80:cb:0a:20:33:62:f4:67:7b:db:b2:
                    98:47:70:be:6e:ca:37:23:94:60:84:c5:4f:4c:8a:
                    ed:7b:9d:b0:7d:a4:5b:4d:b5:63:1c:ab:e3:e4:93:
                    dd:ac:79:0e:db:ae:39:fc:ed:6f:5c:b1:0c:bb:e2:
                    4b:f6:d9:36:9e:60:ac:2c:f0:bd:72:96:49:35:0b:
                    02:8e:87:0e:f1:c9:83:c1:69:f6:92:93:da:8e:c2:
                    de:9f:ec:a9:3f:48:c8:bf:50:38:d7:c8:1d:f7:b6:
                    7a:c3:84:7d:bb:fb:6a:60:d5:33:c0:4d:b1:a8:6d:
                    76:cc:e3:1c:30:74:4b:f8:75:8b:36:79:a3:8a:52:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9B:2E:6E:31:28:44:F0:43:D9:22:96:6D:0C:21:B3:24:22:FE:50
            X509v3 Authority Key Identifier:
                keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/opsubjEoRPBD2SKWbQwhsyQi_lA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215510

    Signature Algorithm: sha256WithRSAEncryption
         90:cc:66:2d:83:b8:f0:4f:c5:8f:2f:50:19:be:44:b1:d1:1e:
         6b:d6:9e:cf:ab:aa:b3:8b:8d:71:3a:01:e7:2d:fb:0f:cf:e2:
         85:83:91:7c:71:1f:12:d3:c7:a2:19:9a:d6:69:7a:28:98:b6:
         ae:4d:96:e3:d7:a9:4a:94:1d:5f:0d:42:a1:61:94:ee:2e:02:
         31:23:2d:c9:8b:26:8f:01:a9:5a:53:4c:00:fb:b8:5b:c7:0f:
         b2:13:de:a0:8d:d8:ab:0d:ab:1c:ea:7c:4c:9c:8e:7e:fe:22:
         26:08:4e:59:e9:88:7d:43:6d:97:fc:16:f3:8d:48:91:d0:a1:
         89:3b:57:e1:ee:66:82:51:af:ce:07:c4:d1:d1:20:d1:5b:81:
         b6:2c:6f:9c:b7:02:a3:0a:c6:1b:26:22:58:af:a5:cc:01:8e:
         04:6d:1b:7a:58:a2:ca:a8:81:ab:1a:e0:37:89:86:bc:06:da:
         09:63:9b:6b:4a:13:56:14:f5:4a:8e:71:80:8e:b0:5a:df:e1:
         2c:ba:c4:1e:e2:fe:7a:a2:91:37:9e:8b:ab:7b:fd:d8:20:4f:
         d5:47:63:3f:4e:a3:05:75:c0:cd:7e:50:83:b7:f2:61:07:cd:
         6d:01:96:8f:07:d4:d9:d7:87:dc:79:e3:47:bf:33:cd:37:f0:
         65:61:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:04 2026 by rpki-client