This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/ZCX1K491fuofD-KW-jb0pfq9nuw.asa
File:                     ZCX1K491fuofD-KW-jb0pfq9nuw.asa (raw, json)
Hash identifier:          0g8X9qZdEwEVTUpjkYItWEgd8L4aVsf8OFtpGdhGrQI=
Subject key identifier:   64:25:F5:2B:8F:75:7E:EA:1F:0F:E2:96:FA:36:F4:A5:FA:BD:9E:EC
Certificate issuer:       /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial:       019C24DED97306EFEB96695081B4E97F996F
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/ZCX1K491fuofD-KW-jb0pfq9nuw.asa
Signing time:             Tue 03 Feb 2026 18:58:30 +0000
ASPA not before:          Tue 03 Feb 2026 18:58:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212022
Providers:                AS: 20485
                          AS: 34757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:de:d9:73:06:ef:eb:96:69:50:81:b4:e9:7f:99:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
        Validity
            Not Before: Feb  3 18:58:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6425f52b8f757eea1f0fe296fa36f4a5fabd9eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:22:f3:8c:b7:92:6d:bc:b7:e7:83:4b:7a:
                    d2:46:c3:2e:01:03:36:fe:5b:1a:93:57:57:92:08:
                    4b:a3:70:30:2a:d8:fa:63:58:f1:bc:2e:de:3a:d0:
                    d6:52:ee:9b:26:7d:16:e0:91:24:33:00:06:02:46:
                    56:d6:c3:ad:64:d7:af:3f:a1:ac:69:dd:3a:94:65:
                    49:2c:8a:c3:52:b3:12:67:0e:60:08:29:14:c6:0f:
                    25:98:82:d9:54:f8:13:a4:92:b5:fa:80:2b:9f:27:
                    32:10:59:39:8c:87:b9:43:1b:30:d8:17:f7:67:41:
                    2a:ae:7b:27:9c:01:16:dc:b1:1e:69:0c:2c:04:fd:
                    bf:86:ee:3e:6f:78:43:37:44:90:d5:53:9a:5d:85:
                    03:a0:8f:41:1d:b6:79:bf:d5:b3:65:30:a9:e4:e3:
                    a2:5a:f8:7e:21:fc:04:24:a0:18:ca:c7:da:9e:18:
                    c0:99:b9:0d:8e:df:48:92:d3:b1:75:58:9a:f7:64:
                    61:0f:ba:1b:cc:3b:89:21:d0:ae:0c:28:3c:29:93:
                    fb:33:65:aa:05:83:aa:04:44:00:61:d9:ac:95:66:
                    31:0d:9f:fe:74:01:7e:ac:02:ed:d4:2c:69:69:76:
                    e2:9e:09:44:89:86:5b:ce:4a:f6:ea:37:80:43:46:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:25:F5:2B:8F:75:7E:EA:1F:0F:E2:96:FA:36:F4:A5:FA:BD:9E:EC
            X509v3 Authority Key Identifier:
                keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/ZCX1K491fuofD-KW-jb0pfq9nuw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212022

    Signature Algorithm: sha256WithRSAEncryption
         0f:eb:02:81:cc:20:2d:3d:6a:5a:31:b7:fe:9b:93:d8:29:9f:
         b6:9d:50:6c:9f:1f:43:2a:10:f8:80:6d:65:43:3d:e2:6c:52:
         fa:55:e1:5d:9a:cf:99:2d:a9:17:31:6d:1f:ad:a4:2e:86:60:
         b4:bc:c1:a1:4d:dd:15:3d:60:87:54:ef:8b:c8:ef:cc:94:9a:
         03:c2:84:ad:cf:47:c9:b5:b4:67:fd:51:82:14:85:81:a6:11:
         66:ca:18:64:72:cf:ab:48:d5:b5:80:4a:45:4f:27:59:76:eb:
         f9:82:dc:3d:9e:fc:3b:cb:9b:75:ba:24:87:8d:70:fb:9f:09:
         be:b9:0e:32:19:b6:b1:73:5d:50:b1:f6:0d:79:6a:7d:75:ab:
         e8:ed:de:e0:ae:63:c7:15:a0:11:ba:f7:d5:89:b4:02:37:43:
         35:9b:77:0d:05:94:e7:41:d9:50:c6:69:c0:11:45:18:44:ac:
         eb:19:78:50:31:ff:e1:82:57:ac:d9:fe:d6:4f:df:d4:57:21:
         ff:3d:c9:c6:a9:e5:45:38:1d:89:a9:28:4d:83:86:6b:91:31:
         43:b5:52:d3:1f:d2:e4:99:6f:00:4c:1f:ca:03:63:74:f7:d4:
         2e:46:cb:18:0c:67:bd:44:06:c5:bb:cb:b3:cb:5f:0f:9c:45:
         d2:fc:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:14 2026 by rpki-client