This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/4-x_b7YAPW0lqNsX2mQE72BLwNU.asa
File:                     4-x_b7YAPW0lqNsX2mQE72BLwNU.asa (raw, json)
Hash identifier:          sqBEB26cGuqkuCnuPuobcaPqsCX12+bqK2ZHJ9suv/U=
Subject key identifier:   E3:EC:7F:6F:B6:00:3D:6D:25:A8:DB:17:DA:64:04:EF:60:4B:C0:D5
Certificate issuer:       /CN=7aeaa8486647188311aa4bdf91d5ede79e2a13d0
Certificate serial:       019C28734AB1AA61B1D7D3B51221DAB1DD47
Authority key identifier: 7A:EA:A8:48:66:47:18:83:11:AA:4B:DF:91:D5:ED:E7:9E:2A:13:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/4-x_b7YAPW0lqNsX2mQE72BLwNU.asa
Signing time:             Wed 04 Feb 2026 11:39:30 +0000
ASPA not before:          Wed 04 Feb 2026 11:39:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210546
Providers:                AS: 49418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:73:4a:b1:aa:61:b1:d7:d3:b5:12:21:da:b1:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeaa8486647188311aa4bdf91d5ede79e2a13d0
        Validity
            Not Before: Feb  4 11:39:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3ec7f6fb6003d6d25a8db17da6404ef604bc0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:aa:b4:e4:41:89:69:64:f7:7d:67:21:f4:
                    0d:29:d3:f1:bf:b9:91:d7:f7:60:32:df:db:21:01:
                    b1:37:11:e2:03:cc:1b:b1:8a:be:a2:9f:85:2e:9f:
                    ec:5e:f9:30:c1:5c:b6:cf:fb:31:c9:cc:11:ab:5a:
                    e4:59:e2:44:39:4a:73:9b:64:a4:cc:b6:a5:e4:a5:
                    e0:b4:a3:a1:a4:ac:23:64:8d:24:3f:59:b4:95:7d:
                    31:d2:f0:de:96:40:28:a6:2e:3f:f2:3e:e8:d4:42:
                    7a:b1:2e:81:47:c7:49:69:7d:d9:0d:e8:06:e7:da:
                    27:ef:50:1d:48:3c:26:0e:5e:b6:1a:1b:06:b4:0d:
                    53:25:12:16:fb:d8:8a:52:26:b0:7f:be:2d:9c:ee:
                    9c:14:fb:10:fc:9c:61:b6:b0:57:e0:a5:43:d0:2e:
                    fc:9b:ad:8d:40:b7:ed:73:ed:09:77:40:f5:19:45:
                    cc:12:e1:b2:9b:c3:aa:af:d7:79:fe:f1:8a:a3:d9:
                    cd:2f:d7:fb:a2:74:90:12:44:a4:e9:09:55:44:86:
                    11:9c:60:42:16:b5:ce:32:37:af:6d:15:ec:11:06:
                    96:00:79:89:bb:65:b9:bd:c3:59:84:93:32:18:d5:
                    3c:9c:c1:7a:1a:bb:8e:e0:3b:8f:92:14:f7:e8:79:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EC:7F:6F:B6:00:3D:6D:25:A8:DB:17:DA:64:04:EF:60:4B:C0:D5
            X509v3 Authority Key Identifier:
                keyid:7A:EA:A8:48:66:47:18:83:11:AA:4B:DF:91:D5:ED:E7:9E:2A:13:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euqoSGZHGIMRqkvfkdXt554qE9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/4-x_b7YAPW0lqNsX2mQE72BLwNU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5350af-9739-476f-9f2d-15b3306511af/1/euqoSGZHGIMRqkvfkdXt554qE9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210546

    Signature Algorithm: sha256WithRSAEncryption
         b0:48:50:96:52:89:f0:d5:12:4e:df:e4:db:d4:42:55:9e:58:
         ce:77:f7:91:6d:b2:1d:a6:11:81:91:50:30:67:f5:b6:fa:ae:
         1e:46:83:a0:9d:e1:bc:ff:17:e8:0e:37:6a:03:81:f6:86:96:
         a4:33:79:09:d0:15:c9:ad:aa:49:fc:0c:6f:ed:01:d2:ff:70:
         83:54:43:97:60:a5:e0:75:bb:50:63:a6:6d:9c:62:7c:4f:32:
         17:21:ac:c1:63:b9:85:c2:45:68:85:91:bb:b0:5b:4e:47:b3:
         01:09:40:46:55:9e:dd:74:c4:7c:11:16:eb:56:e4:12:97:e9:
         d9:37:bc:56:07:33:73:8d:f6:51:1c:0f:c1:cd:b7:74:d1:c2:
         81:01:05:53:0d:c2:c1:86:53:f0:b3:73:24:96:13:eb:ef:10:
         24:6b:46:23:9f:ee:2a:d6:e5:62:65:d8:a9:8b:56:a4:2c:f3:
         4b:38:e2:1a:dc:f9:b2:f7:7e:18:3f:12:41:e8:84:30:06:7b:
         ef:2f:75:bc:a9:6b:32:a3:50:60:f3:7a:04:75:4c:99:fd:d2:
         d9:de:ec:4f:24:55:88:a8:b2:39:39:9b:9b:d4:4d:df:11:a4:
         be:66:23:9f:a7:a9:34:cd:2d:be:b0:88:7b:05:71:41:41:2d:
         24:16:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:32 2026 by rpki-client