This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/mm5FAF2vITiNN8_JTSW7hlKNww0.asa
File:                     mm5FAF2vITiNN8_JTSW7hlKNww0.asa (raw, json)
Hash identifier:          a629eA7bmm46rCQR4dOLZMNna4J6o8fKKDbTgCuyhAM=
Subject key identifier:   9A:6E:45:00:5D:AF:21:38:8D:37:CF:C9:4D:25:BB:86:52:8D:C3:0D
Certificate issuer:       /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial:       019BE0CE8849B4BA36934607464C0D45C933
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/mm5FAF2vITiNN8_JTSW7hlKNww0.asa
Signing time:             Wed 21 Jan 2026 13:46:30 +0000
ASPA not before:          Wed 21 Jan 2026 13:46:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214476
Providers:                AS: 13030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:ce:88:49:b4:ba:36:93:46:07:46:4c:0d:45:c9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
        Validity
            Not Before: Jan 21 13:46:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a6e45005daf21388d37cfc94d25bb86528dc30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:79:41:3e:75:7d:ca:3b:6e:57:aa:1c:36:
                    76:33:b9:c1:3f:c8:bf:b8:3b:71:ce:1d:32:05:e1:
                    13:8d:b6:d5:6a:48:7d:82:1d:ec:70:c6:8d:10:54:
                    bc:92:ae:7d:05:f4:a2:54:66:e1:eb:ca:2d:c4:45:
                    aa:2f:7b:a3:de:97:b8:83:00:58:0e:df:22:c4:92:
                    11:9d:e2:6c:65:98:58:97:27:d9:41:d8:70:89:f0:
                    33:08:71:7a:ac:5c:fb:25:94:76:c2:dd:3d:e9:0c:
                    27:c1:ea:c7:53:cd:71:b6:a8:5e:9c:49:4e:dc:28:
                    eb:df:0f:2d:75:a0:58:be:28:4a:a5:53:3a:61:01:
                    7d:3e:22:64:06:93:f8:e8:07:06:c7:ea:f6:0b:1d:
                    7a:4b:fb:6a:ca:41:5e:9c:a6:dc:4c:d2:ee:1a:00:
                    f9:a5:5a:d7:9f:9b:51:c1:ba:d7:04:85:22:29:9e:
                    44:22:7c:1b:8c:c2:38:d3:94:4e:22:e5:d2:0e:61:
                    1a:d5:a9:ae:b4:67:0b:37:46:59:f3:67:b0:e7:71:
                    8a:d6:d1:47:7a:c3:44:1f:bd:4e:eb:cd:90:41:4a:
                    b6:f1:5c:dd:e5:d2:8d:c2:c1:38:ef:5c:e1:3a:eb:
                    0a:2b:58:de:64:5b:30:b0:28:36:63:93:84:22:9f:
                    7a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6E:45:00:5D:AF:21:38:8D:37:CF:C9:4D:25:BB:86:52:8D:C3:0D
            X509v3 Authority Key Identifier:
                keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/mm5FAF2vITiNN8_JTSW7hlKNww0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214476

    Signature Algorithm: sha256WithRSAEncryption
         35:94:83:f9:33:a9:58:25:ca:a7:6c:0f:7c:b9:25:a3:9c:4f:
         70:73:05:00:68:29:a0:7a:9d:10:3c:8e:ae:31:1c:bd:40:13:
         ee:aa:3c:5f:a8:d3:d0:a5:59:99:62:bd:96:97:3a:6c:18:82:
         fe:4a:74:1a:96:06:b0:f2:da:74:3e:48:6e:dc:f5:1e:9b:a8:
         8d:fe:ea:8e:77:d2:ee:6c:9b:c0:bf:16:cb:77:a0:30:6a:72:
         cd:28:ca:4c:a5:83:ed:6a:84:07:ee:fe:48:50:cd:ee:0a:ab:
         9e:36:c3:84:83:bc:77:22:8e:9e:47:08:0d:8e:4d:53:f8:59:
         7c:5b:20:65:97:09:b1:af:43:c8:b4:35:e8:74:8e:93:cf:95:
         8f:43:ef:55:e9:f8:76:26:f1:07:21:b2:2e:5d:29:12:52:a2:
         c7:53:1e:86:0f:60:22:35:a3:7b:98:b6:67:5a:2a:21:40:b5:
         fd:c6:99:7c:bf:7c:99:aa:9c:cd:b6:b8:1f:dc:41:8b:62:83:
         3d:00:37:9b:2b:c2:09:6b:f1:4c:ac:2c:9a:be:8c:73:57:63:
         38:82:1b:5c:d3:24:af:37:1f:36:c3:80:a1:a8:99:12:84:98:
         7a:3a:af:fa:ec:bf:38:fd:c2:9a:9b:a7:cc:98:e4:e2:81:90:
         65:02:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:46 2026 by rpki-client