This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/uVFV8kqNrPbNo06fBIP9uhc9U_M.asa
File:                     uVFV8kqNrPbNo06fBIP9uhc9U_M.asa (raw, json)
Hash identifier:          BUwNCiOhWqyeV7lp+nZ7t7hip/8/TmJxyY/vBNSvBNQ=
Subject key identifier:   B9:51:55:F2:4A:8D:AC:F6:CD:A3:4E:9F:04:83:FD:BA:17:3D:53:F3
Certificate issuer:       /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial:       019BA841A9D778F69A2EE09931C6CD3C885E
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/uVFV8kqNrPbNo06fBIP9uhc9U_M.asa
Signing time:             Sat 10 Jan 2026 14:13:54 +0000
ASPA not before:          Sat 10 Jan 2026 14:13:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48387
Providers:                AS: 29670
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a8:41:a9:d7:78:f6:9a:2e:e0:99:31:c6:cd:3c:88:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
        Validity
            Not Before: Jan 10 14:13:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b95155f24a8dacf6cda34e9f0483fdba173d53f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:67:b3:c5:fb:69:35:14:4f:7f:8a:2d:1b:
                    a1:ba:87:86:76:c5:c7:47:71:4b:85:c1:19:88:87:
                    75:f8:b8:f9:99:4b:4d:38:ad:2b:db:82:9a:3f:1a:
                    1a:a4:d7:86:9c:86:e0:10:73:16:41:c9:f3:8c:ec:
                    f4:62:30:62:65:b8:23:56:c3:aa:be:27:b2:39:7c:
                    32:5e:62:d1:e7:c3:27:c7:aa:f8:6d:58:ed:c4:ab:
                    07:03:e4:be:df:ec:c5:63:e1:1e:dc:7e:0b:1d:5d:
                    c2:45:6a:7f:ee:3c:b5:40:7e:4c:eb:ef:42:35:4b:
                    5d:59:6f:87:ca:eb:e5:11:b9:56:7f:6c:90:11:fc:
                    fe:f6:bb:98:30:2a:76:d8:a5:2b:05:3b:c7:1a:a1:
                    fa:e9:83:99:e0:d8:a0:5e:a0:3c:b9:d1:bd:82:38:
                    02:02:52:03:ff:c7:58:5f:4e:7a:c2:75:87:7e:4d:
                    07:ec:63:d5:2e:6f:f0:39:19:f7:98:c4:3e:67:47:
                    0a:99:9b:63:d3:25:7a:27:48:44:f8:e4:3c:bb:3c:
                    2b:1e:08:28:97:29:8d:ef:fc:56:b6:1a:f6:b9:ee:
                    64:9a:93:6f:29:09:34:c1:44:5a:85:ee:97:98:44:
                    8a:d0:a3:2a:48:17:54:da:d5:c5:1a:c0:98:e1:4d:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:51:55:F2:4A:8D:AC:F6:CD:A3:4E:9F:04:83:FD:BA:17:3D:53:F3
            X509v3 Authority Key Identifier:
                keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/uVFV8kqNrPbNo06fBIP9uhc9U_M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48387

    Signature Algorithm: sha256WithRSAEncryption
         68:cc:72:35:87:24:53:cf:a6:5c:3c:bb:af:18:d4:a2:eb:d1:
         6f:c6:cc:ed:74:5d:ee:7a:2b:4b:a0:46:b2:3f:60:08:01:21:
         f6:1d:05:46:75:bb:38:33:0e:1c:f6:cb:47:46:cc:b5:f7:63:
         ab:bf:75:73:40:c1:79:c0:94:55:52:40:50:1a:47:42:1f:5c:
         b5:02:86:83:db:31:09:19:04:5e:b9:37:5e:60:07:1f:31:44:
         7a:20:cb:eb:38:7a:52:36:69:ea:dd:3b:1a:9f:c4:d4:75:5c:
         9f:f3:8b:99:8f:2b:d5:e9:20:da:7d:b6:ae:c4:cb:4a:5e:2b:
         c1:76:f2:af:b9:44:b4:cb:9d:1b:b6:cf:67:82:5d:02:db:70:
         ad:c0:00:8c:37:cb:61:c1:84:86:59:20:98:79:c7:87:60:c5:
         ee:57:ff:e2:bd:28:c6:9f:04:10:7d:77:7f:8e:51:09:49:4a:
         57:32:ff:e5:e6:02:7b:2a:9a:59:05:33:86:5f:3a:d6:c2:03:
         60:99:db:53:41:3b:6f:65:58:62:c0:6a:7a:a9:2d:0c:93:8c:
         e7:6d:7d:e8:e0:d1:c4:9c:cf:f6:ee:ee:5f:dd:b4:ed:44:9c:
         ba:78:91:d9:17:3f:24:e6:c2:0f:4a:53:a6:f6:fa:df:65:26:
         bc:c7:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:44 2026 by rpki-client