This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa
File:                     Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa (raw, json)
Hash identifier:          ZStz8VWjv9JWorKywmlp8CUIrtYl6f6S3mkhtfoiopc=
Subject key identifier:   52:28:9C:DC:F3:14:ED:72:B7:46:71:69:DA:41:79:86:1E:FE:06:47
Certificate issuer:       /CN=0cad4273094d3710816dce2d1004a6258501f6db
Certificate serial:       019B9311D894C1A74EC14A2EBD7494BACEDB
Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa
Signing time:             Tue 06 Jan 2026 11:29:38 +0000
ASPA not before:          Tue 06 Jan 2026 11:29:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214751
Providers:                AS: 48434
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:93:11:d8:94:c1:a7:4e:c1:4a:2e:bd:74:94:ba:ce:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db
        Validity
            Not Before: Jan  6 11:29:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=52289cdcf314ed72b7467169da4179861efe0647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:80:d4:85:2c:46:ad:3d:8d:91:f1:cc:23:
                    be:c7:46:bb:34:ac:6f:62:3c:1a:3d:a5:35:1a:12:
                    b5:67:7d:5f:e0:56:e0:6c:23:a9:17:e0:f8:f9:da:
                    3b:41:85:8e:a9:25:2a:f1:54:4b:73:0b:da:d7:3c:
                    7c:08:8e:55:1c:7c:6f:5b:09:61:ee:fc:0d:a8:d7:
                    93:ab:4a:82:a3:11:1b:ea:1e:26:26:3a:12:4a:c6:
                    09:b9:2a:73:00:13:57:06:b6:ca:1a:3c:4a:a2:51:
                    12:d0:5d:c9:3d:86:98:b2:9c:8a:22:76:45:0a:0a:
                    cf:5f:ba:fc:bb:2a:99:73:ec:aa:85:84:5f:c2:c2:
                    a7:a1:ce:12:e5:e9:7e:be:57:83:a1:7c:51:9c:f0:
                    9e:79:de:bd:bf:09:dd:4a:37:2f:47:fd:62:13:d7:
                    23:fb:8f:e4:16:88:94:4f:ee:1b:f5:2f:a8:55:a0:
                    86:af:03:0a:6a:18:ed:e1:27:01:bc:0c:5f:41:f2:
                    d3:ff:86:f1:79:73:e7:b3:da:4e:4a:1c:24:2a:19:
                    56:ef:5f:f7:a5:cb:2e:3a:1b:a2:aa:89:79:25:14:
                    8f:15:cf:d8:a9:5f:91:67:4e:fb:23:85:50:97:99:
                    7c:6c:7c:18:c6:3b:84:85:78:0e:a2:8e:2c:30:87:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:9C:DC:F3:14:ED:72:B7:46:71:69:DA:41:79:86:1E:FE:06:47
            X509v3 Authority Key Identifier:
                keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214751

    Signature Algorithm: sha256WithRSAEncryption
         8e:ac:34:a1:17:53:83:57:fa:75:c6:1b:19:2e:29:02:70:a9:
         2c:3a:32:75:a4:4d:53:c2:a9:73:3f:44:74:5a:d7:90:86:d0:
         e3:80:3c:dd:2d:06:fa:d1:92:0f:2c:c0:a7:20:c4:82:c3:a4:
         fa:be:e7:e0:17:11:e9:92:f5:75:6d:21:c1:4e:16:88:0f:74:
         bd:d8:91:31:b9:bc:2e:c0:e0:1f:f9:f8:00:ac:5f:f7:8f:29:
         06:d3:c2:4b:e1:c8:e9:10:e1:cb:15:54:12:4d:5d:db:5a:72:
         12:70:98:f4:5a:04:02:58:ba:38:1d:c4:55:c5:91:bc:a9:dc:
         94:52:c4:b5:ca:74:ff:cb:05:4e:a3:fa:f3:13:2e:6d:c8:25:
         e8:98:ab:71:c6:c9:2a:91:ad:5f:40:20:ac:a1:7d:ac:c5:f8:
         3a:14:70:5d:17:b3:f0:77:06:f2:81:f9:46:7b:57:99:b8:8b:
         ab:d2:e4:80:c5:f8:63:48:b1:73:51:5b:d5:bd:40:fe:e7:7d:
         70:e4:49:09:16:6d:da:11:e3:a4:96:22:57:86:16:21:d3:1e:
         43:1b:a6:bd:06:9a:67:dc:e8:e6:70:7d:4c:be:bf:47:2b:d7:
         41:d5:ea:40:63:2c:9e:2a:de:ca:56:10:a9:fa:c4:54:d4:9c:
         f5:56:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:44 2026 by rpki-client