This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa
File:                     bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (raw, json)
Hash identifier:          SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=
Subject key identifier:   6C:53:51:40:4D:E9:C5:C0:38:83:E4:60:F3:6E:FB:27:43:DF:CA:F8
Certificate issuer:       /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial:       019BE18B22783DA4ED7837D9C44AF8475AE6
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa
Signing time:             Wed 21 Jan 2026 17:12:30 +0000
ASPA not before:          Wed 21 Jan 2026 17:12:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51210
Providers:                AS: 43541
                          AS: 51025
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e1:8b:22:78:3d:a4:ed:78:37:d9:c4:4a:f8:47:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
        Validity
            Not Before: Jan 21 17:12:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c5351404de9c5c03883e460f36efb2743dfcaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:2d:77:89:88:82:30:b6:c7:be:d1:d2:ea:
                    90:77:3e:c0:52:e1:ba:a2:69:d4:9c:7f:e4:9c:59:
                    6f:4b:5e:f5:3b:3b:00:17:8a:98:58:1f:9d:aa:4b:
                    85:c6:e4:7c:2a:40:52:70:2b:27:74:24:c1:92:c5:
                    5d:0f:c3:b7:88:40:67:0a:02:67:7c:ea:0c:2a:78:
                    e2:ce:a3:4e:a3:3f:eb:86:7d:69:2c:34:16:c7:38:
                    a6:c6:ab:8e:ae:00:99:17:c0:95:77:45:36:cd:e4:
                    91:ca:d5:18:82:f2:25:df:28:87:49:25:ac:63:d0:
                    e2:b0:41:71:e2:fa:1a:5d:b6:57:e6:c8:30:10:0a:
                    75:d3:b6:11:bf:e7:c4:6c:d2:22:9c:ed:9a:c6:03:
                    f8:e6:0d:db:c5:62:90:18:5a:2b:0f:c4:fb:da:d2:
                    a1:bc:49:63:64:cc:dc:c7:6d:88:58:51:0b:a1:7e:
                    ca:7a:09:83:27:78:6a:52:5c:67:9b:fc:fd:3a:3f:
                    8d:5d:c3:2b:e1:38:cd:e7:3c:6c:fc:55:5c:ef:66:
                    6f:dc:bf:6e:9a:fe:ec:d8:2b:f0:21:3f:82:24:48:
                    0f:66:33:2a:50:f8:f8:58:14:46:72:97:3d:2c:37:
                    34:e4:af:2e:77:49:bd:a7:81:9d:10:7d:b9:26:95:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:51:40:4D:E9:C5:C0:38:83:E4:60:F3:6E:FB:27:43:DF:CA:F8
            X509v3 Authority Key Identifier:
                keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51210

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:b4:09:c8:64:cc:c2:24:30:f3:47:5e:7e:0b:f0:32:cd:
         16:10:18:fb:36:fe:01:9c:d7:9c:28:bf:ab:b2:ab:3e:5b:69:
         ff:93:72:b3:74:18:e4:c3:b4:a2:ff:45:74:ee:80:94:e8:11:
         81:07:78:0d:9d:5e:80:4b:6f:50:ac:d6:f9:67:df:6d:7c:9a:
         06:ce:9c:a8:72:b5:56:2f:1e:e9:51:b4:22:49:52:e8:04:86:
         b9:46:ef:3d:fd:ed:e0:cd:ca:10:09:a0:3e:96:7c:73:54:89:
         61:66:0d:04:bf:ae:bd:76:78:03:ff:69:35:92:57:1e:b7:6f:
         42:98:58:91:00:70:e6:27:d5:9b:26:3f:af:c3:43:09:5d:9c:
         dc:3b:06:57:5f:1d:b2:06:e6:00:28:b5:9e:e7:7b:40:98:d4:
         aa:2e:d8:32:0b:57:a1:34:82:b6:9c:1e:88:15:9b:b2:23:2a:
         f7:a5:16:b6:d1:1e:76:9d:ce:52:5c:fd:04:41:f3:13:18:d2:
         f0:1e:40:01:3e:18:53:b5:10:f9:17:0f:00:f5:3b:eb:8e:7b:
         34:99:8d:7d:5a:5e:14:f5:fa:9e:bb:68:94:63:06:42:46:f2:
         03:fb:8b:41:42:0b:7f:b9:2c:e8:2f:3c:3d:de:22:d5:2e:06:
         0b:ab:08:4f
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvhiyJ4PaTteDfZxEr4R1rmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1
NTdmYTEwHhcNMjYwMTIxMTcxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzUzNTE0MDRkZTljNWMwMzg4M2U0NjBmMzZlZmIyNzQzZGZjYWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu50td4mIgjC2x77R0uqQdz7AUuG6
omnUnH/knFlvS171OzsAF4qYWB+dqkuFxuR8KkBScCsndCTBksVdD8O3iEBnCgJn
fOoMKnjizqNOoz/rhn1pLDQWxzimxquOrgCZF8CVd0U2zeSRytUYgvIl3yiHSSWs
Y9DisEFx4voaXbZX5sgwEAp107YRv+fEbNIinO2axgP45g3bxWKQGForD8T72tKh
vEljZMzcx22IWFELoX7KegmDJ3hqUlxnm/z9Oj+NXcMr4TjN5zxs/FVc72Zv3L9u
mv7s2CvwIT+CJEgPZjMqUPj4WBRGcpc9LDc05K8ud0m9p4GdEH25JpUfaQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGxTUUBN6cXAOIPkYPNu+ydD38r4MB8GA1UdIwQY
MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt
NjU2MWM4NDkwNTdmLzEvYkZOUlFFM3B4Y0E0Zy1SZzgyNzdKMFBmeXZnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm
LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDICjANBgkqhkiG
9w0BAQsFAAOCAQEAgPq0CchkzMIkMPNHXn4L8DLNFhAY+zb+AZzXnCi/q7KrPltp
/5Nys3QY5MO0ov9FdO6AlOgRgQd4DZ1egEtvUKzW+WffbXyaBs6cqHK1Vi8e6VG0
IklS6ASGuUbvPf3t4M3KEAmgPpZ8c1SJYWYNBL+uvXZ4A/9pNZJXHrdvQphYkQBw
5ifVmyY/r8NDCV2c3DsGV18dsgbmACi1nud7QJjUqi7YMgtXoTSCtpweiBWbsiMq
96UWttEedp3OUlz9BEHzExjS8B5AAT4YU7UQ+RcPAPU76457NJmNfVpeFPX6nrto
lGMGQkbyA/uLQUILf7ks6C88Pd4i1S4GC6sITw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:54 2026 by rpki-client