This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/2jQx973K_WHIEDeBwoceaInwrVk.asa
File:                     2jQx973K_WHIEDeBwoceaInwrVk.asa (raw, json)
Hash identifier:          Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=
Subject key identifier:   DA:34:31:F7:BD:CA:FD:61:C8:10:37:81:C2:87:1E:68:89:F0:AD:59
Certificate issuer:       /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial:       019B2B8BF07DF16D2FFB355425253FF21BF8
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/2jQx973K_WHIEDeBwoceaInwrVk.asa
Signing time:             Wed 17 Dec 2025 09:02:29 +0000
ASPA not before:          Wed 17 Dec 2025 09:02:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            205081
Providers:                AS: 174
                          AS: 29119
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:8b:f0:7d:f1:6d:2f:fb:35:54:25:25:3f:f2:1b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
        Validity
            Not Before: Dec 17 09:02:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da3431f7bdcafd61c8103781c2871e6889f0ad59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:ca:41:9a:a1:19:a6:df:dd:87:42:96:d7:
                    83:fb:e0:b0:9a:82:51:78:f6:09:26:34:f4:9d:df:
                    d8:87:91:78:3d:cf:6d:2c:4e:f0:09:4e:b6:c7:e1:
                    3f:28:3a:10:d6:a7:4f:09:2f:3b:9e:6e:13:ec:df:
                    55:c8:c1:56:df:a1:0f:cd:3f:47:c8:83:2a:41:55:
                    e9:8f:ed:7b:bc:5f:ca:09:e3:bb:91:52:fc:36:4d:
                    de:e8:a5:44:f7:4e:55:bc:4c:b4:f9:ba:c4:16:e7:
                    e1:75:a4:f5:6d:41:f8:76:92:19:f3:11:29:8c:fb:
                    71:83:19:1b:09:5f:ae:28:a5:6d:b5:53:5e:e3:be:
                    4a:62:60:d0:4b:5b:75:f4:57:05:c2:fc:67:57:eb:
                    8b:9b:7e:86:f9:c6:a5:98:08:aa:63:8d:31:b3:67:
                    56:54:62:de:0b:10:6f:92:1a:8d:18:c1:45:67:96:
                    1c:8e:0e:27:72:10:c2:6b:13:0f:8d:ba:31:39:f9:
                    3a:6f:80:fb:80:47:78:6c:a4:b5:c3:b9:28:26:5a:
                    c6:c5:8d:de:7f:76:c6:cc:40:f0:da:f3:6f:e8:db:
                    8f:4c:3f:4d:29:33:a8:d6:59:6f:dc:c0:8c:27:91:
                    cd:c7:5c:9b:0f:fb:97:7a:8f:21:ad:92:a0:ee:b1:
                    f2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:34:31:F7:BD:CA:FD:61:C8:10:37:81:C2:87:1E:68:89:F0:AD:59
            X509v3 Authority Key Identifier:
                keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/2jQx973K_WHIEDeBwoceaInwrVk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205081

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:7b:e0:76:bd:2b:00:47:0e:4d:ed:f6:24:e1:5b:2c:43:
         33:a3:1f:49:9d:78:b9:1f:78:41:08:0c:c4:be:3c:50:8c:8e:
         83:d2:b2:6c:69:87:88:63:64:50:0d:2a:27:c1:42:b9:f1:a6:
         3a:12:0a:d9:e7:4a:5e:43:51:fe:bd:f2:a5:d0:14:eb:f7:4c:
         76:56:e1:c2:f8:26:d1:bf:9f:2f:91:81:4f:6a:f9:bb:e9:0a:
         36:49:9f:e3:d0:d2:33:7f:99:2e:a5:b8:81:f0:22:7e:44:68:
         2d:ff:7e:79:53:72:ea:26:a2:e0:3a:44:de:cc:7a:b1:44:84:
         64:e2:47:6d:92:35:cf:92:21:0b:8b:6b:39:f9:d0:c2:06:c9:
         17:3a:a9:ca:c6:9b:67:86:b2:da:74:08:c8:70:ee:5d:ad:d2:
         2b:2e:5e:9c:a1:b7:07:ca:63:58:17:34:38:b9:c9:c2:a4:28:
         a1:c8:eb:56:e1:e8:28:73:4e:e0:52:20:17:b2:87:da:bf:ed:
         b7:42:91:22:45:1b:16:6d:90:fb:d5:1c:5f:7f:91:ef:8e:d9:
         a0:6d:17:1a:a6:44:5c:8c:2c:38:7a:c5:2b:43:99:23:31:5c:
         d1:a8:b8:1e:81:96:aa:56:a5:dd:ad:1c:ae:58:82:74:cc:7b:
         84:6a:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:31:34 2026 by rpki-client