This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/EhxIXI0XnkOGUXg4FgywC-j7kfM.asa
File:                     EhxIXI0XnkOGUXg4FgywC-j7kfM.asa (raw, json)
Hash identifier:          0+ZksVAMIwmmN/gmxafjprn+omjy9onqP+qL2WNNf8g=
Subject key identifier:   12:1C:48:5C:8D:17:9E:43:86:51:78:38:16:0C:B0:0B:E8:FB:91:F3
Certificate issuer:       /CN=b50ecda8b2aefead594f4daf3ca5021b0f31e6ce
Certificate serial:       019C33FD6EA5906355BDB82EE3269A96A930
Authority key identifier: B5:0E:CD:A8:B2:AE:FE:AD:59:4F:4D:AF:3C:A5:02:1B:0F:31:E6:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/EhxIXI0XnkOGUXg4FgywC-j7kfM.asa
Signing time:             Fri 06 Feb 2026 17:26:12 +0000
ASPA not before:          Fri 06 Feb 2026 17:26:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201705
Providers:                AS: 20473
                          AS: 41051
                          AS: 216211
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:33:fd:6e:a5:90:63:55:bd:b8:2e:e3:26:9a:96:a9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50ecda8b2aefead594f4daf3ca5021b0f31e6ce
        Validity
            Not Before: Feb  6 17:26:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=121c485c8d179e4386517838160cb00be8fb91f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:18:13:9b:19:ad:87:76:81:4f:8e:f7:86:
                    6c:01:b7:d0:d2:75:72:4c:51:1e:7d:fd:d4:10:b6:
                    de:e6:c6:d8:68:d4:ad:28:f6:40:4c:fa:44:a9:0b:
                    67:b5:a7:8b:e6:e7:bb:7d:08:86:2d:a4:18:0e:bd:
                    39:73:de:f8:69:05:21:de:bf:14:e4:96:a9:84:57:
                    36:bb:7f:b6:79:57:b9:f8:4b:d6:9c:de:c8:3c:c9:
                    a5:67:d7:ce:e9:4c:6f:bb:ad:c8:6a:0b:7d:56:2a:
                    45:d4:c4:4d:a3:4f:4a:6f:a0:69:e1:06:3d:9e:f5:
                    28:6a:47:59:8e:e5:f9:c4:fe:f6:58:7f:61:71:d8:
                    a5:2b:33:03:8c:0e:7e:17:48:80:44:9b:6f:2f:af:
                    44:b2:7c:ab:36:5b:fe:0e:4c:70:51:40:2a:c1:86:
                    7f:c6:12:be:0d:1f:f3:92:30:46:f2:5f:81:6d:56:
                    8f:c8:a2:a2:f1:c6:d7:a9:0f:d9:cc:b7:b3:9d:84:
                    a3:5d:3f:ed:07:1a:83:fc:4c:1f:96:d5:57:ee:da:
                    0f:6b:ce:0f:78:39:30:dd:c8:dc:94:2c:64:6a:e8:
                    e4:30:54:d0:57:d0:6a:a8:b7:41:9a:5d:37:1b:22:
                    a0:b8:88:d4:af:0f:84:9f:47:a8:70:0e:37:30:dd:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1C:48:5C:8D:17:9E:43:86:51:78:38:16:0C:B0:0B:E8:FB:91:F3
            X509v3 Authority Key Identifier:
                keyid:B5:0E:CD:A8:B2:AE:FE:AD:59:4F:4D:AF:3C:A5:02:1B:0F:31:E6:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/EhxIXI0XnkOGUXg4FgywC-j7kfM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201705

    Signature Algorithm: sha256WithRSAEncryption
         79:ca:20:c9:d5:85:68:17:82:86:fd:6d:b1:31:94:16:82:d0:
         9f:34:7f:f5:3a:49:ba:7e:cc:ab:47:2c:96:90:5c:de:dc:64:
         54:fa:5d:53:24:7f:9a:a5:94:4c:63:6e:78:00:99:c1:45:cd:
         a5:a6:51:77:7a:dd:ad:22:e8:41:c8:55:c3:bc:d7:51:2b:c6:
         73:b4:80:96:f6:cd:92:de:90:b0:75:37:37:dd:e6:2c:cc:c3:
         7e:44:ae:23:25:b7:c4:67:13:67:f6:c6:51:b3:b1:bb:1f:05:
         b1:67:9e:08:eb:e6:a7:0f:24:29:54:ad:4a:ec:9d:76:e7:d2:
         c4:a1:e8:ac:05:c6:f6:63:a6:b9:07:96:f6:2e:1c:76:d5:12:
         a8:5e:09:07:05:c4:99:5b:77:74:92:9b:35:e9:fe:85:1a:73:
         ff:cc:64:63:28:93:4f:0c:78:8a:72:6e:b3:bb:3f:57:bd:93:
         3c:5d:d0:44:81:ee:98:82:47:1d:ee:f5:56:5d:40:64:86:46:
         3c:4c:1d:d2:c4:b4:14:7b:b2:de:08:d5:ad:fd:29:6e:05:86:
         1e:b5:99:aa:a0:f9:49:4c:8c:80:bd:46:db:31:0d:5b:7f:56:
         3d:89:85:49:54:76:cd:ae:fa:89:d4:24:c7:d3:90:d3:c3:2e:
         79:a4:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:37 2026 by rpki-client