This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/kpvqRPUEAmQO0O4WaugdHW1aYng.asa
File:                     kpvqRPUEAmQO0O4WaugdHW1aYng.asa (raw, json)
Hash identifier:          OUyLx1kMPpxYu9iTqQs+D/qkf4nArIUYr0ik+YK47VA=
Subject key identifier:   92:9B:EA:44:F5:04:02:64:0E:D0:EE:16:6A:E8:1D:1D:6D:5A:62:78
Certificate issuer:       /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial:       019C005A66A6C11AA8BF2134361E98B14374
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/kpvqRPUEAmQO0O4WaugdHW1aYng.asa
Signing time:             Tue 27 Jan 2026 16:47:30 +0000
ASPA not before:          Tue 27 Jan 2026 16:47:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42755
Providers:                AS: 174
                          AS: 8455
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:00:5a:66:a6:c1:1a:a8:bf:21:34:36:1e:98:b1:43:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
        Validity
            Not Before: Jan 27 16:47:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=929bea44f50402640ed0ee166ae81d1d6d5a6278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:16:e0:35:ae:d4:eb:ef:3c:ca:de:85:e3:
                    f9:fc:ee:3b:f0:e2:2a:bf:26:5f:9a:db:b5:70:03:
                    82:83:21:26:5d:02:22:f0:4b:06:c0:eb:7c:66:7e:
                    f8:86:4d:25:01:a7:6e:58:48:4d:d2:70:d7:40:ab:
                    b0:32:86:cc:26:9d:61:00:a6:95:c4:27:7b:23:39:
                    d0:9b:77:28:14:7d:81:01:a7:7d:36:fe:48:57:33:
                    90:97:23:f2:f5:80:57:ab:3d:c9:36:23:ec:cd:4c:
                    50:ab:89:17:bc:fd:d2:a6:0a:be:db:d4:b4:fc:6b:
                    63:3e:78:23:1b:e9:79:52:02:08:b5:8b:62:9c:35:
                    ef:95:d2:1f:2d:ab:8a:61:01:91:42:b8:07:f0:2f:
                    54:7d:8e:ef:08:f6:37:28:89:26:ed:64:6f:35:b9:
                    f4:84:51:f5:ea:e3:8e:34:a9:e0:63:45:82:d0:81:
                    4e:e2:45:26:15:fd:ed:6f:59:24:9a:59:a4:86:c1:
                    4f:eb:b0:6b:3a:23:cb:87:53:7c:23:7c:55:a0:db:
                    24:b7:72:17:c4:9e:27:08:2d:7c:8f:85:4f:7c:4c:
                    06:a2:b0:8c:80:3f:27:e6:0b:0e:8c:2b:52:f6:a1:
                    ea:86:e9:e8:45:87:25:a1:29:69:0e:0f:a4:9f:64:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9B:EA:44:F5:04:02:64:0E:D0:EE:16:6A:E8:1D:1D:6D:5A:62:78
            X509v3 Authority Key Identifier:
                keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/kpvqRPUEAmQO0O4WaugdHW1aYng.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42755

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:c8:17:be:dc:c0:65:64:69:c6:c4:90:9f:cb:ef:02:c3:
         4b:d9:cf:ee:3d:e8:8f:30:5c:b7:32:66:b4:14:1d:94:58:04:
         03:45:1a:b5:03:9e:70:8f:79:1c:7c:b4:00:32:1e:66:c4:5a:
         d8:a7:22:4a:d7:e7:83:6b:68:e9:b6:49:74:ed:cf:35:6d:b6:
         4e:40:cb:47:28:d5:31:84:3e:30:25:a7:54:9e:8c:31:6d:d5:
         50:c3:10:d1:f4:b6:56:42:81:a4:08:5e:59:01:65:e0:f4:b8:
         af:cd:31:f5:2e:84:db:05:9f:ee:60:5f:1c:d4:b2:66:f0:14:
         fd:ce:a9:a8:b1:3d:c8:e0:5b:19:be:cb:d0:f5:86:a7:96:ba:
         72:8e:98:95:13:6e:f6:4f:47:f2:19:c8:b6:b6:a0:14:05:5e:
         43:45:3c:50:ac:83:ac:2a:ff:76:e0:bc:7f:08:21:e6:20:f7:
         8d:76:73:bf:56:da:63:69:b3:48:0f:65:e1:79:07:88:94:93:
         eb:5f:8f:09:b8:05:71:74:7d:53:f1:01:84:f4:0b:03:3f:ac:
         52:f8:6c:ee:4d:54:a0:2b:2f:f0:c7:48:e2:f9:fe:52:9b:90:
         4c:4c:5c:3f:81:e6:c7:0a:02:5f:f4:2f:86:16:83:a6:7a:b7:
         a9:f4:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:09 2026 by rpki-client