This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/3GF4RweBnJwOd-6nUT5PiBsu4pA.asa
File:                     3GF4RweBnJwOd-6nUT5PiBsu4pA.asa (raw, json)
Hash identifier:          DpP48tndWTlvXIujf26AwodQv/G4yY8pTSdg8bAtIy4=
Subject key identifier:   DC:61:78:47:07:81:9C:9C:0E:77:EE:A7:51:3E:4F:88:1B:2E:E2:90
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019B96471331205FFBB254CBE7C4DF8BA9DE
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/3GF4RweBnJwOd-6nUT5PiBsu4pA.asa
Signing time:             Wed 07 Jan 2026 02:26:38 +0000
ASPA not before:          Wed 07 Jan 2026 02:26:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211008
Providers:                AS: 31898
                          AS: 34927
                          AS: 41051
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:96:47:13:31:20:5f:fb:b2:54:cb:e7:c4:df:8b:a9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Jan  7 02:26:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc61784707819c9c0e77eea7513e4f881b2ee290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:d8:3f:b3:c2:a0:38:29:d9:7b:3b:b4:e4:
                    8b:f3:f5:09:f0:3b:e1:c4:98:d8:42:a5:81:09:ed:
                    f2:75:80:e1:9b:69:a1:ca:8d:cc:72:9e:bc:85:cb:
                    0f:12:2c:0e:f7:9c:99:98:e4:ad:d9:55:82:c4:0c:
                    98:3c:51:6d:31:dd:aa:fd:ff:f0:de:f9:10:4f:a7:
                    f9:9e:50:5c:9f:20:8f:3d:04:d6:e6:04:69:3a:d8:
                    6e:bf:40:67:43:d1:3b:26:b5:02:f4:b7:5f:06:66:
                    42:42:52:f8:e8:3e:54:33:7a:61:7e:28:01:27:d6:
                    70:e5:06:fe:91:ee:50:6a:63:82:d8:f1:d5:7a:bc:
                    45:2d:2d:74:1f:7f:8d:25:98:b0:46:84:b1:c3:e1:
                    42:93:fb:1c:da:6c:d8:fe:d3:f9:f7:b0:80:9f:b6:
                    b5:6a:c7:64:f3:92:6d:5b:3a:86:fa:36:e6:a3:ba:
                    a8:30:ea:8f:6c:f8:72:4b:d0:5e:13:34:d8:42:39:
                    37:6c:c3:b0:87:98:2b:48:fd:8e:94:16:0a:0b:31:
                    9c:47:75:5d:16:f2:67:10:84:2e:ae:f2:20:52:c3:
                    02:83:13:95:97:01:69:17:9f:ec:55:af:5e:58:03:
                    bd:28:a9:03:49:d5:69:db:ed:0a:91:e6:b2:4f:c0:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:78:47:07:81:9C:9C:0E:77:EE:A7:51:3E:4F:88:1B:2E:E2:90
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/3GF4RweBnJwOd-6nUT5PiBsu4pA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211008

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:7e:8e:31:c7:ba:e8:99:a7:27:d7:6b:03:fb:16:6b:a7:
         1b:bc:54:75:8b:5f:1c:0f:4d:3a:bc:60:ab:06:77:25:e7:fb:
         92:07:58:7a:d9:2c:b5:18:f0:5f:ba:18:2f:cb:87:3a:50:71:
         38:3a:29:e0:67:7b:f1:fe:61:d2:37:97:35:e5:14:6e:4d:b7:
         13:4f:cb:fe:d1:5e:83:5e:df:9e:fa:86:26:d8:84:28:4e:f9:
         bf:8d:0f:ba:d9:27:06:c0:e3:63:d4:fc:fb:0f:9b:cd:fc:68:
         c5:18:14:86:70:ab:f2:d5:47:43:1c:0b:2c:dc:94:8f:82:0b:
         2c:c0:9f:81:1c:97:74:09:a4:4c:04:85:98:38:5e:f5:c1:27:
         c4:49:ef:04:2a:10:88:6a:6a:ec:e1:59:91:7a:3b:d4:ad:cb:
         fc:4a:74:83:01:8b:2b:2f:50:dd:ff:8b:47:3f:ca:19:ad:b9:
         ef:92:b9:3d:ef:44:65:7c:12:33:ac:17:9f:34:98:78:6e:4c:
         8c:12:50:78:b5:98:2b:97:95:f0:d1:d0:76:65:fa:99:d0:a1:
         a2:13:ab:80:25:e5:73:59:c9:85:dd:2d:1b:c2:cc:3d:bf:53:
         5c:0c:4e:1b:85:db:b4:08:37:46:d5:87:23:cd:5f:9a:fa:70:
         d9:ce:ef:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:26:29 2026 by rpki-client