This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/2BtQZNhdik9gU2AxYKHe9sYV-jc.asa
File:                     2BtQZNhdik9gU2AxYKHe9sYV-jc.asa (raw, json)
Hash identifier:          lui6LaPwr93Rb+GSmojwCYHODV1kcUqrYGkCHlqnR8A=
Subject key identifier:   D8:1B:50:64:D8:5D:8A:4F:60:53:60:31:60:A1:DE:F6:C6:15:FA:37
Certificate issuer:       /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial:       019B268688921D5B8E723C05CB80196B3058
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/2BtQZNhdik9gU2AxYKHe9sYV-jc.asa
Signing time:             Tue 16 Dec 2025 09:38:29 +0000
ASPA not before:          Tue 16 Dec 2025 09:38:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            39728
Providers:                AS: 12389
                          AS: 41039
                          AS: 50509
                          AS: 198310
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:86:88:92:1d:5b:8e:72:3c:05:cb:80:19:6b:30:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
        Validity
            Not Before: Dec 16 09:38:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d81b5064d85d8a4f6053603160a1def6c615fa37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:f3:ab:6e:8a:be:23:cd:4a:48:c3:ff:44:
                    3b:b0:3b:07:88:93:5b:40:26:55:04:96:c3:b8:b0:
                    c9:17:d3:c6:c1:ed:a9:56:5e:ac:29:b9:1a:6e:42:
                    8f:45:77:fa:87:ad:a6:ce:47:8b:52:c5:cf:c5:c9:
                    c5:70:43:f4:e7:dc:2c:5b:5c:3f:4c:f9:28:ce:67:
                    7f:b6:57:70:da:1d:a9:86:e2:95:33:4b:2f:4c:fe:
                    36:29:be:19:64:09:4b:d9:ea:11:2f:f9:94:bb:06:
                    44:59:d2:d5:20:81:54:fd:5f:88:3f:d5:1d:c4:0f:
                    01:12:c9:38:0f:73:37:db:28:0f:ea:8d:a2:bb:b1:
                    cd:6f:3a:c6:be:c0:12:6f:be:94:26:f3:6b:1e:e8:
                    fe:50:e8:a5:4f:7a:c9:67:42:67:52:26:80:51:7b:
                    6f:1f:b4:ad:9d:f0:3c:cf:fc:bb:f9:d0:d1:ac:1a:
                    02:e9:f1:76:97:fd:61:fa:50:30:50:0e:6c:13:a9:
                    4a:e2:3c:67:44:13:35:4d:c3:27:c4:58:2c:74:9b:
                    5b:31:bf:b3:b4:1f:7d:7c:a7:92:38:01:a4:d4:4c:
                    36:50:d1:97:ae:23:ee:c3:e2:e6:60:10:e0:94:69:
                    b6:8f:96:ac:e3:25:1d:75:63:f1:4f:e4:0e:61:e2:
                    99:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1B:50:64:D8:5D:8A:4F:60:53:60:31:60:A1:DE:F6:C6:15:FA:37
            X509v3 Authority Key Identifier:
                keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/2BtQZNhdik9gU2AxYKHe9sYV-jc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39728

    Signature Algorithm: sha256WithRSAEncryption
         68:d7:19:99:ce:2b:1d:6d:cc:6f:fc:fc:e3:8e:a1:3f:a9:01:
         86:9e:cc:53:d1:46:86:77:74:8e:be:c5:92:44:27:8b:c1:d8:
         2a:ea:de:83:5c:7e:6e:6b:c0:2f:a9:69:31:59:fd:d4:26:c8:
         0f:99:88:3f:de:2d:c7:a4:7c:82:1a:74:3a:a6:c7:6f:8b:d6:
         39:e1:57:c4:11:dc:d8:24:24:7d:cb:a0:9e:26:ef:83:7e:45:
         a1:af:c3:b0:fb:95:5e:de:9f:2e:cb:fc:ba:4d:e3:54:62:ad:
         b5:1b:4f:4a:21:ac:83:74:62:b1:07:38:9a:79:d3:06:f4:c8:
         ba:a9:39:ae:45:ab:5b:e1:37:5a:b3:17:78:64:dd:44:d9:e0:
         a0:71:1a:8b:62:cd:0a:44:bb:fb:d9:d4:04:7a:97:2d:7e:d0:
         d2:4f:72:27:26:1b:ad:96:f5:58:f8:36:e5:c8:e2:a8:b9:af:
         29:d3:72:72:e0:ce:ff:3c:a7:6f:41:8b:a1:fc:ed:0d:6a:41:
         1d:34:09:b9:b7:d7:e2:64:cb:82:1d:dc:30:2d:d3:e6:b4:0a:
         8c:00:9f:6d:e1:91:b4:fa:ad:c9:28:27:63:1e:65:5c:96:06:
         35:39:c0:53:5a:58:3d:c2:95:78:84:82:e1:01:86:b5:78:80:
         65:57:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:41:37 2025 by rpki-client