This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/AS39002.asa
File:                     AS39002.asa (raw, json)
Hash identifier:          oyDoTANhQRXLCQdgvhL9SeLGQrIOydY2P1W36z+VWSQ=
Subject key identifier:   8E:1B:8A:0A:3D:59:69:40:76:A3:DB:7F:21:44:3B:73:B4:EA:DF:1C
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       606742D03AF559B9129D3DE95D7203FA6A7A6EBA
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa
Signing time:             Fri 02 Jan 2026 04:47:42 +0000
ASPA not before:          Fri 02 Jan 2026 04:42:42 +0000
ASPA not after:           Fri 01 Jan 2027 04:47:42 +0000
Customer ASID:            39002
Providers:                AS: 44854
                          AS: 48112
                          AS: 57984
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:67:42:d0:3a:f5:59:b9:12:9d:3d:e9:5d:72:03:fa:6a:7a:6e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Jan  2 04:42:42 2026 GMT
            Not After : Jan  1 04:47:42 2027 GMT
        Subject: CN=8E1B8A0A3D59694076A3DB7F21443B73B4EADF1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2b:79:f1:3d:6b:2d:97:bf:dc:36:50:60:68:
                    fe:20:2a:c8:89:18:71:41:6c:90:7b:c7:cf:a4:da:
                    d6:88:dc:c1:b0:8f:c7:f3:00:f9:a7:54:fd:61:f0:
                    92:98:ce:0d:36:ef:62:ae:2e:97:96:26:74:9a:0c:
                    1b:a1:15:c8:ee:80:80:c5:df:dc:8c:f3:fa:70:48:
                    f2:16:31:6b:be:aa:42:6c:ee:f7:b2:8d:50:c6:6c:
                    37:1e:69:aa:e7:4e:84:2e:2d:bf:e5:37:db:d4:58:
                    e1:f3:0f:d7:fe:ef:da:ab:77:c0:93:60:be:8d:e4:
                    c2:a7:89:fc:f0:55:ff:3c:27:d2:93:59:ff:9d:3f:
                    5b:59:c9:c9:67:94:17:3a:10:3f:90:80:7f:a2:59:
                    b6:62:65:58:e2:04:4c:07:c9:64:78:2c:c6:c6:a7:
                    22:94:83:a7:c2:4a:b2:f3:f5:c8:7e:ce:bf:4f:66:
                    55:48:60:2d:b0:17:d9:9d:74:a5:17:80:01:95:c2:
                    46:3e:1f:96:51:b0:30:8c:02:eb:50:52:1d:8f:05:
                    93:77:30:87:85:e2:97:75:49:db:cf:35:d7:fe:ee:
                    b5:87:4a:3e:da:86:bf:6d:a6:a0:bc:02:11:4a:8c:
                    f3:8b:45:f6:34:3b:c2:0d:2c:2b:5c:ac:d7:e0:06:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1B:8A:0A:3D:59:69:40:76:A3:DB:7F:21:44:3B:73:B4:EA:DF:1C
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39002

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:fd:66:26:5c:60:a9:08:3a:68:61:56:37:8e:ef:c4:7b:
         db:70:a7:68:cd:94:b8:d5:7c:b9:1d:a7:b8:c4:b0:c2:70:77:
         15:77:97:31:9f:8c:25:0a:c9:96:7b:fe:0f:0d:09:0c:99:69:
         9c:56:e1:01:6f:5a:d2:25:26:9d:17:cb:c9:41:31:e9:17:7d:
         ae:c8:ee:95:d0:e0:52:c0:58:f9:02:ae:17:44:80:27:87:78:
         31:87:f5:d3:f2:27:97:00:90:24:00:c2:d2:b7:75:17:02:b1:
         9e:98:1b:c6:58:dd:8b:cb:8a:96:51:31:85:23:a2:3c:b1:46:
         44:73:c0:bd:b3:56:1d:f4:6b:a4:5a:65:c0:0c:20:30:2c:b6:
         09:95:17:39:ac:59:9d:b8:2f:cc:7f:97:91:41:85:95:23:6a:
         45:3d:cf:da:79:0b:6a:7a:8b:0e:54:36:fc:58:1f:81:ee:e9:
         d9:cf:79:f6:14:d9:ca:5a:37:bf:f5:30:0f:c2:19:d0:a2:55:
         4f:8b:29:a6:be:38:09:62:36:d6:07:e5:89:98:a1:cd:86:6b:
         1e:9a:23:73:b0:ac:6f:10:14:01:83:f7:cb:37:5e:69:66:81:
         b2:39:ea:3c:d4:33:ae:1a:56:d3:5f:6d:62:52:a8:ca:4b:4a:
         28:6b:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:46:02 2026 by rpki-client