This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/W_Kar0uJwXlXOzuDKt9rwAJX2us.asa
File:                     W_Kar0uJwXlXOzuDKt9rwAJX2us.asa (raw, json)
Hash identifier:          UIHczsABtmRacuRTevHUQnFL5cTMHwmVMwcU0uahIGs=
Subject key identifier:   5B:F2:9A:AF:4B:89:C1:79:57:3B:3B:83:2A:DF:6B:C0:02:57:DA:EB
Certificate issuer:       /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial:       019B528385D09C9E43C82FBC7451731CB300
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/W_Kar0uJwXlXOzuDKt9rwAJX2us.asa
Signing time:             Wed 24 Dec 2025 22:38:29 +0000
ASPA not before:          Wed 24 Dec 2025 22:38:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            44384
Providers:                AS: 174
                          AS: 3257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:52:83:85:d0:9c:9e:43:c8:2f:bc:74:51:73:1c:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
        Validity
            Not Before: Dec 24 22:38:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5bf29aaf4b89c179573b3b832adf6bc00257daeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:9b:87:02:f4:ea:e1:6d:05:b9:79:e7:3c:
                    0c:c2:19:ba:ee:a3:10:06:af:3e:d1:3b:47:99:03:
                    21:c7:79:69:b9:0a:39:02:6c:8c:a2:03:91:c3:eb:
                    08:ae:b0:56:32:81:44:55:92:87:e8:bc:9e:43:2e:
                    62:af:41:fa:f4:8d:62:d8:4d:39:6b:a4:b5:83:93:
                    43:8e:83:43:7d:b9:e2:72:27:a7:75:73:71:38:2b:
                    0f:65:57:2c:83:ef:e3:fa:b6:22:24:6a:42:cd:36:
                    86:e8:89:ff:1d:6e:28:3b:b2:ba:6f:3b:e3:72:58:
                    c5:61:da:1f:24:85:ba:0d:6f:63:12:dc:e4:9a:d8:
                    fb:54:c2:38:34:a1:45:29:5b:f8:ef:b3:e5:4c:62:
                    31:1c:6a:bd:df:34:49:8a:de:ff:31:01:73:19:48:
                    7b:d6:b0:8a:0c:c4:cf:b6:24:a5:74:15:2b:06:9b:
                    71:10:09:e9:14:29:51:06:de:49:67:af:c2:d0:0a:
                    98:9d:dd:8c:22:3c:81:7d:07:2f:08:04:78:08:2c:
                    25:ba:86:c1:29:61:9f:29:46:b4:26:ec:e1:57:ee:
                    94:dd:a1:a1:1d:df:fd:25:b2:d9:2d:b8:fd:51:3d:
                    30:4b:7d:67:f2:68:c9:d0:8a:46:31:8f:51:e3:e4:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:9A:AF:4B:89:C1:79:57:3B:3B:83:2A:DF:6B:C0:02:57:DA:EB
            X509v3 Authority Key Identifier:
                keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/W_Kar0uJwXlXOzuDKt9rwAJX2us.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44384

    Signature Algorithm: sha256WithRSAEncryption
         c9:a9:74:ec:b6:68:1c:85:79:1b:c2:76:0b:81:01:4d:b4:1b:
         f4:06:f1:3f:84:46:53:1a:e5:a7:19:75:d5:af:7b:20:cd:b9:
         40:9c:af:12:0c:41:ec:a5:45:82:dd:6c:00:a7:18:62:30:50:
         d4:8f:79:0d:80:f8:c1:8a:0d:6e:1c:32:8d:38:a0:8d:36:35:
         f3:b9:a4:e9:28:7b:09:5c:8c:f3:f4:24:d8:1f:9a:cc:be:8c:
         1a:85:7b:d1:ca:65:55:5f:30:b5:14:4e:ab:9c:43:cb:5d:c7:
         dc:24:2a:ce:34:9d:3e:b5:c2:0e:d0:ea:5a:dd:ff:07:d5:69:
         a8:c4:e6:4b:ca:f0:14:68:71:9b:63:42:79:7a:e9:49:d1:29:
         55:47:c2:c9:e4:6c:c1:e4:a0:21:69:47:eb:41:95:e0:54:de:
         84:65:db:bc:25:48:08:03:a4:2b:03:d7:2a:51:86:3e:ff:9a:
         48:40:7c:99:1a:07:e6:88:3a:b5:0c:0a:b5:32:6b:b7:4c:d5:
         90:60:53:c6:a4:83:86:89:5e:51:d4:c5:d7:ad:ab:e4:fe:aa:
         3d:53:b6:5d:de:79:e3:94:c7:7e:a1:8f:38:c6:a6:32:8e:2a:
         22:02:82:c5:73:9a:bc:5a:92:10:f1:32:90:0c:6c:0d:19:cd:
         2e:81:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:24 2026 by rpki-client