This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/saX-4zWOH4EUS7-f-fRnPdejWXs.asa
File:                     saX-4zWOH4EUS7-f-fRnPdejWXs.asa (raw, json)
Hash identifier:          7UdBDPMIJnC3A+b+O76GKd1Ogi2PwesKFjwNMkDRIyU=
Subject key identifier:   B1:A5:FE:E3:35:8E:1F:81:14:4B:BF:9F:F9:F4:67:3D:D7:A3:59:7B
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       019BCC924E0837DD445C8BECCFB409332B7B
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/saX-4zWOH4EUS7-f-fRnPdejWXs.asa
Signing time:             Sat 17 Jan 2026 15:28:18 +0000
ASPA not before:          Sat 17 Jan 2026 15:28:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200993
Providers:                AS: 35598
                          AS: 56584
                          AS: 56740
                          AS: 61400
                          AS: 62379
                          AS: 213753
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cc:92:4e:08:37:dd:44:5c:8b:ec:cf:b4:09:33:2b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: Jan 17 15:28:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1a5fee3358e1f81144bbf9ff9f4673dd7a3597b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:13:6c:22:88:40:44:34:e1:d5:fd:a8:e3:
                    7d:50:d3:1b:f7:8d:02:f8:7e:44:44:50:08:b9:ed:
                    e3:48:c6:b7:8d:df:5c:22:be:15:20:26:08:03:9a:
                    62:3f:82:3b:c0:1c:6c:22:74:39:20:e8:17:dc:56:
                    a2:d1:f1:cd:be:ef:e2:f4:0d:1d:7a:0d:d5:9e:92:
                    55:44:c5:0d:6d:ea:eb:f6:17:30:53:c0:ae:ce:34:
                    40:8c:a1:7e:61:d8:35:bc:f9:45:ce:eb:12:bc:02:
                    e7:94:63:15:1d:26:f6:01:99:28:3d:75:38:00:dc:
                    54:02:12:ba:fc:d4:6b:ff:39:40:06:63:92:6f:5b:
                    db:df:69:f8:46:3d:df:b0:51:24:f8:12:db:ed:a7:
                    9d:07:c3:3c:df:b7:20:87:16:ab:4e:2a:0c:95:c0:
                    8b:08:ba:34:ee:4e:0a:7e:88:d8:be:b1:44:22:a6:
                    a7:79:1c:dc:82:a0:b3:30:02:c3:be:14:52:06:c1:
                    25:03:88:71:88:c3:b3:e1:a2:c9:a8:37:75:07:0d:
                    98:2b:a1:3a:56:bb:65:3d:42:58:4b:24:d1:f0:be:
                    d1:9f:af:93:bb:30:03:ca:71:73:ef:14:fd:4e:3a:
                    5d:73:97:69:53:8b:25:c2:f5:65:b5:df:e2:a4:41:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A5:FE:E3:35:8E:1F:81:14:4B:BF:9F:F9:F4:67:3D:D7:A3:59:7B
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/saX-4zWOH4EUS7-f-fRnPdejWXs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200993

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:fb:a8:ca:ae:52:7c:53:75:c7:fa:b5:c5:22:d3:51:5e:
         7b:49:b7:50:28:a2:88:46:54:48:d5:6f:0f:0e:2d:81:e0:ba:
         99:4e:ad:1d:c4:a1:b4:4e:65:bd:bc:92:3d:18:0a:03:02:dc:
         92:43:5b:e6:97:9a:5c:a2:f8:60:24:9a:57:95:ee:a6:f8:bd:
         bc:dd:62:67:69:7b:a5:5a:cc:5d:d4:49:17:33:09:08:7b:3f:
         7e:96:fd:38:89:cf:60:79:d6:34:55:34:16:49:ee:f5:c1:71:
         64:c7:16:de:8e:eb:f2:eb:ad:1e:ed:f8:8a:38:67:3c:9c:db:
         ca:f4:db:0d:0d:b1:bb:2a:c3:e9:94:25:c5:af:a7:a0:96:b6:
         65:17:26:b9:9f:b3:3a:3e:e9:c8:84:f7:ae:06:b9:44:3e:9a:
         cb:80:1e:3f:7e:aa:c6:a4:72:73:00:aa:25:4e:50:c1:c8:8b:
         67:29:65:59:e1:81:d7:75:a0:5e:e4:d1:db:a1:d3:02:99:d7:
         95:e8:cf:98:7a:81:e7:a7:78:49:c0:fa:b9:1e:12:97:81:c4:
         da:da:58:6f:ba:02:d5:17:5c:b8:19:ce:6c:6b:96:a9:b6:9e:
         fb:4d:9f:eb:8c:77:14:d7:8d:b9:bf:84:e7:39:02:63:da:d8:
         5d:88:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:27:12 2026 by rpki-client