This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/1PhEt7d2bIZajs7zcFZXSrntDY4.asa
File:                     1PhEt7d2bIZajs7zcFZXSrntDY4.asa (raw, json)
Hash identifier:          BYzdd5z1dD/0QZaOur8Wom9Qky9ooHw4d1Iq4ijc28Y=
Subject key identifier:   D4:F8:44:B7:B7:76:6C:86:5A:8E:CE:F3:70:56:57:4A:B9:ED:0D:8E
Certificate issuer:       /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial:       019C049CCA7ED79936AFC81EA239E4EDC5B7
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/1PhEt7d2bIZajs7zcFZXSrntDY4.asa
Signing time:             Wed 28 Jan 2026 12:38:30 +0000
ASPA not before:          Wed 28 Jan 2026 12:38:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210152
Providers:                AS: 6939
                          AS: 56655
                          AS: 206260
                          AS: 212514
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:04:9c:ca:7e:d7:99:36:af:c8:1e:a2:39:e4:ed:c5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
        Validity
            Not Before: Jan 28 12:38:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4f844b7b7766c865a8ecef37056574ab9ed0d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:02:04:55:ca:a8:59:99:02:18:03:d3:c6:
                    1b:2b:08:c3:4a:b5:a6:4d:c5:34:6c:e0:fb:cb:1c:
                    cb:9e:d8:ee:c1:82:ff:e7:18:86:e9:b0:40:03:96:
                    e1:27:83:6c:49:62:44:80:49:5c:69:ff:49:c6:71:
                    43:a1:1b:fb:ee:4d:51:8d:43:77:61:4a:8e:63:30:
                    d7:eb:1f:b9:05:83:ce:a0:66:15:92:62:1e:cf:e1:
                    91:bd:e9:ea:46:4a:2d:cb:c5:2d:ca:80:16:9d:8b:
                    81:dd:ed:f2:43:37:18:d1:ee:78:dc:f4:3d:6e:0b:
                    39:35:4a:e3:0b:61:f3:78:e2:55:60:70:cf:8f:79:
                    fd:f6:49:2c:bb:1f:82:16:3c:d9:c5:ce:da:63:04:
                    ee:e1:fb:03:61:e6:d0:ee:3c:38:04:26:92:54:d1:
                    a9:95:23:2c:25:6f:4d:ea:e1:83:1b:7b:d1:81:4a:
                    36:c8:c5:87:e4:a9:c9:89:84:71:b5:55:8b:86:b6:
                    a3:39:18:9d:4d:71:14:d0:cf:06:b6:8c:85:e2:b0:
                    aa:5a:d7:2b:23:e2:ab:3e:ec:ae:3a:7f:3d:4d:ef:
                    72:da:a7:57:a0:ce:46:5c:48:33:d9:f7:d0:ea:af:
                    ca:f2:54:72:7e:da:dc:62:46:ed:3f:88:83:ea:23:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F8:44:B7:B7:76:6C:86:5A:8E:CE:F3:70:56:57:4A:B9:ED:0D:8E
            X509v3 Authority Key Identifier:
                keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/1PhEt7d2bIZajs7zcFZXSrntDY4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210152

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:09:78:58:93:09:fd:ef:92:55:39:bf:46:0f:da:b5:29:
         f6:8f:74:e0:74:b7:e8:cd:45:77:c7:5d:f3:f9:e0:bc:15:86:
         71:3c:6b:42:1c:fd:6c:cb:8b:df:c9:fe:85:5f:66:de:14:1f:
         ba:28:f0:44:02:d2:dc:79:8e:fd:16:a7:be:f4:af:1c:0e:5f:
         9d:77:20:ed:7e:62:5b:cb:5c:08:cc:55:f0:2c:16:b3:80:69:
         ea:da:d9:9d:4b:45:0c:9d:bb:21:48:b2:c5:71:e1:dd:c5:6c:
         ca:d9:3d:08:56:fa:76:2f:e4:85:9a:38:15:b1:b2:b9:ad:fd:
         c5:06:bf:dd:4d:51:56:ad:98:0e:6c:81:a3:55:0f:b6:b4:a6:
         8f:6d:a6:02:c5:5e:05:1e:89:84:1c:d3:da:e8:c7:ab:f3:80:
         cf:24:99:a1:d5:36:7a:34:d1:f0:c2:ab:68:1f:77:19:d6:c7:
         91:f9:ea:c1:0a:a1:f7:9d:f6:aa:c7:f1:ab:f3:82:7e:ef:05:
         ad:ad:b9:bd:ba:9c:24:33:d7:d9:bd:5b:a4:bb:47:64:64:0f:
         5e:f3:d7:d9:fe:a7:55:d6:d1:c5:7c:d7:91:e8:38:a0:76:6a:
         7e:fe:65:0f:bd:4a:ce:13:5d:03:3d:8a:b3:25:aa:a1:ca:b4:
         e3:fb:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 03:57:25 2026 by rpki-client