This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/oGFjYMB457098tjZcB4IDP8t_T8.asa
File:                     oGFjYMB457098tjZcB4IDP8t_T8.asa (raw, json)
Hash identifier:          wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=
Subject key identifier:   A0:61:63:60:C0:78:E7:BD:3D:F2:D8:D9:70:1E:08:0C:FF:2D:FD:3F
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019BA9937DD8F1ABB8D3B1966A3E2F5A6E26
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/oGFjYMB457098tjZcB4IDP8t_T8.asa
Signing time:             Sat 10 Jan 2026 20:22:54 +0000
ASPA not before:          Sat 10 Jan 2026 20:22:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41451
Providers:                AS: 49436
                          AS: 50873
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a9:93:7d:d8:f1:ab:b8:d3:b1:96:6a:3e:2f:5a:6e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Jan 10 20:22:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a0616360c078e7bd3df2d8d9701e080cff2dfd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:9b:61:ba:71:c7:7c:c7:ca:87:2f:66:8a:
                    f5:75:e3:69:56:98:a8:0e:0b:54:12:12:6d:8c:80:
                    1e:b3:cc:6a:91:5c:bd:0b:85:fe:66:72:24:5c:05:
                    09:d5:f1:e9:d1:5a:f1:51:6d:3d:19:7c:f4:6b:63:
                    09:e6:32:6d:c3:e5:e7:05:de:3e:07:fc:78:d8:5a:
                    d2:67:d3:40:fd:da:47:a6:b7:a3:ef:b2:0c:e8:c7:
                    cb:93:58:34:32:c7:43:13:83:30:5d:e0:4e:2a:f3:
                    f9:85:78:bf:fa:57:00:39:f4:6e:10:51:68:83:21:
                    5d:46:3d:7a:9a:57:6e:fb:f8:ac:98:9a:eb:f9:3f:
                    30:06:a5:4a:fd:13:5c:a5:dc:90:68:eb:93:51:2a:
                    de:62:9a:3a:73:2d:4e:40:12:52:4b:26:b0:d9:55:
                    98:a8:96:ff:a6:c2:6a:d1:99:1c:d1:2d:f0:69:23:
                    d8:78:70:fb:3c:1f:1d:48:7a:42:80:79:31:18:94:
                    64:15:65:50:00:02:29:7f:bb:2e:53:d5:9e:c4:44:
                    60:ac:1b:ad:88:4e:c8:bc:a2:5f:57:85:9e:29:aa:
                    72:12:95:cf:d0:54:50:d6:b2:cb:17:d6:5b:a0:20:
                    0e:9c:67:12:02:8f:fa:8c:84:97:5f:ae:88:d4:6a:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:61:63:60:C0:78:E7:BD:3D:F2:D8:D9:70:1E:08:0C:FF:2D:FD:3F
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/oGFjYMB457098tjZcB4IDP8t_T8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41451

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:3d:3b:ea:3e:39:ef:c7:6f:c3:a6:0b:82:a7:17:c6:47:
         4f:00:42:b0:55:9a:d4:23:a3:20:f4:9e:be:3d:12:90:dd:c3:
         b3:ff:8b:15:58:dc:5b:aa:f6:ed:0b:df:52:e3:51:fb:4c:32:
         73:70:eb:de:8a:b9:68:9e:88:33:fc:f2:47:fb:65:42:2b:f2:
         7b:87:87:c4:8f:10:1b:b2:cc:af:e9:f6:95:09:15:b2:06:1c:
         02:d6:d3:06:62:32:bd:f5:a2:00:33:6d:3b:75:29:85:24:7c:
         9d:92:f0:ca:cd:59:bc:b0:8b:59:aa:ea:d3:2e:2c:d6:86:e4:
         db:b6:c7:aa:32:fc:a5:93:73:c5:ef:f7:96:83:a4:35:9c:aa:
         f6:33:04:24:bf:32:75:f0:96:bc:38:04:f0:e0:c3:58:e4:d9:
         07:34:a1:7d:b8:45:0c:f3:24:1f:cb:05:73:68:70:19:04:49:
         d9:2c:b6:1a:6e:29:e4:e9:65:63:58:7c:df:b3:2c:01:c6:c3:
         8d:35:f0:f5:e7:14:ce:5d:6f:25:2a:fe:8a:7d:7f:0b:62:0a:
         b7:c5:b4:66:67:10:5b:bc:4c:2c:c1:e6:56:44:ad:ba:1a:e7:
         b7:10:ca:c6:c1:b9:a2:10:69:a0:8d:3b:a4:58:8f:df:c7:5f:
         52:b3:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:56 2026 by rpki-client