This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/AHAqO1me7Q2s--h2lJgebqIw5iw.asa
File:                     AHAqO1me7Q2s--h2lJgebqIw5iw.asa (raw, json)
Hash identifier:          h2RJjsngCpCQ1Exj6koTNpi08FwNJUQcJduwFp94muM=
Subject key identifier:   00:70:2A:3B:59:9E:ED:0D:AC:FB:E8:76:94:98:1E:6E:A2:30:E6:2C
Certificate issuer:       /CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
Certificate serial:       019BB7759234F98084F7DCCF283437D36AF7
Authority key identifier: 79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/AHAqO1me7Q2s--h2lJgebqIw5iw.asa
Signing time:             Tue 13 Jan 2026 13:04:54 +0000
ASPA not before:          Tue 13 Jan 2026 13:04:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204433
Providers:                AS: 202632
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b7:75:92:34:f9:80:84:f7:dc:cf:28:34:37:d3:6a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
        Validity
            Not Before: Jan 13 13:04:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00702a3b599eed0dacfbe87694981e6ea230e62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:9a:9d:95:9e:3c:35:17:f4:88:b5:3e:a2:
                    8d:0c:99:34:95:35:5d:d5:02:31:ac:a2:7c:07:20:
                    f2:5a:ae:9e:bb:cc:b9:5e:6c:dd:cf:09:89:86:f8:
                    2e:6b:79:ad:8d:16:34:35:0d:60:59:65:22:dd:2c:
                    b6:76:79:0d:b6:8a:30:0c:e6:e4:5c:cd:3a:6f:d3:
                    6f:12:72:ba:59:96:4b:78:6e:ce:77:eb:b1:33:8a:
                    e5:4f:e1:cd:a0:a1:4b:d4:d7:40:61:8d:77:a1:81:
                    94:be:e7:ac:3c:2a:67:3e:37:67:99:bd:b9:f8:e1:
                    a8:64:7b:41:71:7a:ce:08:d5:70:47:46:87:eb:e3:
                    f9:38:41:13:8b:70:36:97:9d:4f:15:81:92:9e:ec:
                    c8:9a:01:21:7f:f8:aa:8a:29:ca:bc:33:0d:1f:e6:
                    54:72:0a:47:b5:d4:ee:5b:f8:d1:43:3d:6e:af:21:
                    f0:95:2c:db:d9:38:d4:6c:e4:f8:72:ed:5c:3e:1d:
                    2c:ae:98:42:cf:96:e6:a8:05:e7:4c:14:b5:63:72:
                    3c:6b:bf:bd:ec:d3:c6:d9:f0:1d:73:aa:0d:3a:36:
                    92:cd:20:db:80:87:dd:a8:ca:b5:c3:a0:8e:01:9b:
                    98:06:8b:65:2b:5f:bf:ca:03:55:ee:60:dd:2f:26:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:2A:3B:59:9E:ED:0D:AC:FB:E8:76:94:98:1E:6E:A2:30:E6:2C
            X509v3 Authority Key Identifier:
                keyid:79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/AHAqO1me7Q2s--h2lJgebqIw5iw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204433

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:1f:f1:05:5a:82:86:ed:27:69:e9:08:3f:d3:e1:94:cd:
         f4:8c:e8:82:ba:0e:79:e3:e3:1b:61:4e:f5:65:82:59:74:ce:
         e7:2c:09:2f:fc:3a:a2:7a:ae:0a:7f:2f:f3:e3:0e:56:79:c3:
         3e:54:c5:6f:a2:49:8f:ce:a5:bb:70:b4:2f:71:27:c7:76:84:
         57:1a:94:03:a9:98:14:e5:6c:ac:ae:fa:d8:41:90:5e:84:32:
         7d:a0:8f:62:fb:bb:fc:cc:4e:28:ee:ae:ab:55:ef:ce:34:15:
         ee:f8:61:c7:3c:d8:0c:32:8f:14:6c:df:da:2a:e2:99:67:4b:
         a7:18:f5:06:7b:73:53:a6:cb:75:11:01:c0:72:5b:8b:dc:ba:
         bd:ba:37:93:1d:1d:0c:87:7c:55:ec:e3:3b:e6:63:12:3b:b2:
         ce:94:f9:2a:da:a5:0d:38:4b:df:37:ff:29:fe:a3:94:f0:9c:
         e3:f9:9d:23:9a:60:58:0c:f4:69:39:46:3e:36:ca:b7:0c:a8:
         e0:44:33:cf:6f:e6:44:78:dc:68:2c:d1:0f:bd:32:e2:c7:d4:
         8d:9b:47:4b:f3:58:6b:f2:72:bb:89:22:c2:45:f2:bc:5d:72:
         5e:f5:c0:7f:81:11:cb:40:87:63:27:d1:eb:17:ab:f5:41:ce:
         db:e7:b8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:13 2026 by rpki-client