This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa
File:                     iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa (raw, json)
Hash identifier:          sKFpbQOv+VAKl74vw4tXWmzHoGsmgKRxKsMYYfwwMC8=
Subject key identifier:   88:C3:AE:AB:9F:ED:1C:DE:5A:EE:AE:0C:E5:1D:83:32:80:74:0B:4A
Certificate issuer:       /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial:       019B7E44D1A4669E209D6D551E2BDB467F2B
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa
Signing time:             Fri 02 Jan 2026 10:33:17 +0000
ASPA not before:          Fri 02 Jan 2026 10:33:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41666
Providers:                AS: 6939
                          AS: 34927
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 10:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:44:d1:a4:66:9e:20:9d:6d:55:1e:2b:db:46:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
        Validity
            Not Before: Jan  2 10:33:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=88c3aeab9fed1cde5aeeae0ce51d833280740b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:40:f8:f6:f5:a3:67:2a:e7:a0:88:8d:46:
                    60:cf:a3:a6:b8:93:ee:2e:b5:62:e1:3a:4f:d9:a5:
                    cb:34:70:af:2f:9e:33:46:c4:97:9d:e1:11:45:90:
                    51:92:81:13:2d:26:7f:3e:30:a9:99:1f:cf:9b:99:
                    e8:f4:60:91:c2:df:59:50:82:84:8d:6f:80:50:e3:
                    b6:63:3a:e9:9e:e5:44:ce:2b:96:5e:dc:6e:e0:73:
                    5c:87:a2:1b:15:06:fb:76:ec:67:c3:10:e2:83:ef:
                    57:88:ff:f0:2d:30:2f:c2:fb:79:ca:99:e3:ba:5a:
                    05:f4:95:64:bc:ed:07:06:15:b9:c7:c7:4c:80:b2:
                    ca:36:a2:6b:b6:8b:5b:c7:ca:46:98:30:73:88:7f:
                    a7:5c:95:09:41:99:d0:93:43:b6:48:de:c6:2e:fa:
                    dc:9a:bb:de:92:88:58:64:7e:14:3a:a0:a2:4a:e5:
                    e5:99:e2:6b:bd:a4:26:dc:25:7e:6f:97:71:b8:16:
                    ee:ae:28:8a:b6:24:ca:61:38:74:cd:1a:2a:24:2e:
                    62:4c:c0:9b:fb:09:65:6b:2d:20:84:74:d7:4c:01:
                    af:c8:d7:75:cb:1b:1d:6e:7d:bf:8c:0d:36:98:65:
                    d5:6d:3f:d6:a5:c9:74:cf:1f:30:19:00:4c:6d:22:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:AE:AB:9F:ED:1C:DE:5A:EE:AE:0C:E5:1D:83:32:80:74:0B:4A
            X509v3 Authority Key Identifier:
                keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/iMOuq5_tHN5a7q4M5R2DMoB0C0o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41666

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:83:58:de:ee:85:86:00:98:a0:43:25:49:6f:57:44:70:
         d4:de:8a:a6:73:f1:c8:35:12:f3:ee:70:0c:5f:05:c9:ac:ca:
         14:f9:59:e1:0b:4b:ea:75:41:6b:eb:ac:f1:45:91:77:90:50:
         46:34:90:81:49:15:5a:0c:cd:92:7b:14:d1:0e:3f:b4:bc:6e:
         ef:11:b9:7e:66:1e:82:18:b8:5a:79:b2:22:8d:09:18:17:98:
         ae:df:9a:a2:62:4d:de:54:f6:a7:8e:87:8c:e7:ba:af:34:34:
         61:c1:76:ab:59:1d:0d:0d:a5:48:02:5e:21:58:0d:7b:35:7f:
         3e:ba:4f:cd:6b:3a:28:9c:76:64:d1:83:ae:60:2d:93:5f:26:
         34:12:2d:ce:e5:bb:17:e5:14:a8:bc:e9:d5:82:f4:03:e0:c3:
         8d:53:d6:fc:de:6b:73:1c:d7:c9:c2:5c:c9:1d:08:5c:cf:69:
         88:83:6f:0f:9e:f3:d8:72:e0:a9:4f:8c:cd:70:a9:d1:e7:6e:
         cf:bb:d0:70:39:8a:e0:81:a6:b8:ff:20:4c:90:45:87:2d:9a:
         d1:d8:6c:01:f7:84:3f:d9:5c:25:a4:62:c7:12:8c:ef:5c:f5:
         78:e4:4e:f7:da:f0:b2:f9:c2:fd:36:02:b1:f2:1c:83:8c:c2:
         3d:aa:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 18:33:59 2026 by rpki-client