This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa
File:                     1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa (raw, json)
Hash identifier:          ek3lFQhBM69m11IFyrspDmCB7+jlGlnfEWGxNiaYwFg=
Subject key identifier:   FA:A4:A2:0D:7A:C0:85:04:22:12:42:4A:56:26:E1:1C:74:FD:5C:76
Certificate issuer:       /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial:       019B73FCADC1AFC177BFE089FE3CB3192C01
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa
Signing time:             Wed 31 Dec 2025 10:38:17 +0000
ASPA not before:          Wed 31 Dec 2025 10:38:17 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            199789
Providers:                AS: 20647
                          AS: 50030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:73:fc:ad:c1:af:c1:77:bf:e0:89:fe:3c:b3:19:2c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
        Validity
            Not Before: Dec 31 10:38:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=faa4a20d7ac085042212424a5626e11c74fd5c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:42:5e:59:c9:b0:ce:6e:c0:03:01:9e:53:
                    f5:e2:7e:db:26:7f:b7:ab:2f:9c:d5:92:f1:ee:70:
                    a3:1b:68:f9:5c:aa:3a:77:80:3e:94:17:eb:83:78:
                    49:93:00:14:8c:68:c7:23:95:7e:9a:b4:98:5e:45:
                    b3:36:a2:15:2c:d5:4c:95:19:93:3a:e8:15:46:9f:
                    ab:63:1d:0f:02:9a:c2:62:3e:65:18:55:36:39:bb:
                    1c:b3:8b:0e:d0:e6:c6:dc:24:b6:cb:12:43:54:27:
                    1e:17:b6:ae:11:72:e5:9c:c4:c7:15:d5:00:71:55:
                    e5:6a:23:73:8d:b1:40:cd:f8:f1:ae:d7:b9:bc:84:
                    5b:6d:a6:02:8d:cd:89:77:85:87:6b:47:4b:44:18:
                    93:8d:a3:50:6c:fd:04:42:aa:01:3c:3e:86:a6:0e:
                    fb:f2:c8:04:7e:91:74:5a:3a:d3:14:30:a5:68:50:
                    b8:36:31:47:ad:f5:8e:bb:cb:b5:a7:0b:05:7a:fd:
                    d5:b5:e5:c1:53:9b:1c:c9:08:b7:7b:4e:da:f5:a5:
                    1d:b8:10:78:70:10:ff:7d:70:23:5e:0c:73:6b:77:
                    47:25:fb:18:31:57:82:4e:09:dc:b2:62:d3:18:95:
                    62:5f:16:76:14:fc:17:e5:6e:f7:ae:b8:a6:5f:3e:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A4:A2:0D:7A:C0:85:04:22:12:42:4A:56:26:E1:1C:74:FD:5C:76
            X509v3 Authority Key Identifier:
                keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199789

    Signature Algorithm: sha256WithRSAEncryption
         70:06:bc:64:6b:b3:45:83:a4:33:2e:83:06:03:31:86:a9:58:
         cd:cd:87:36:c2:1b:0f:84:47:1c:0e:0f:b1:b3:50:eb:0a:ef:
         4f:ab:2f:1c:84:9a:42:55:c6:a2:7f:0d:82:f9:e7:a2:a5:3d:
         a5:d4:48:96:ae:8b:c9:1b:e7:9a:53:bd:90:53:0d:ca:c5:56:
         0a:9d:ec:fb:e4:b6:67:76:17:fe:f7:35:ca:20:8c:17:e8:37:
         69:d0:48:c0:89:51:66:11:1c:2a:e2:89:e4:1d:b6:f7:ef:42:
         91:d5:4c:d1:ff:bd:89:43:05:31:f2:74:c8:bb:dc:61:3b:c6:
         65:23:9b:8d:f4:d2:49:7d:f2:f5:64:8d:b4:2c:cf:af:a1:5c:
         cc:2d:69:ec:09:db:62:37:94:09:04:c8:34:bd:d4:69:2e:ea:
         22:df:8f:c8:b8:3b:11:48:59:0b:69:2d:49:50:b9:b1:f3:6e:
         aa:42:8c:cc:a5:bd:a7:98:2d:e8:06:2d:9f:1b:ae:d6:46:91:
         93:41:90:e3:18:7a:ba:51:44:6c:3d:3c:01:96:39:25:08:5b:
         1e:71:0b:be:8f:c2:0c:35:8b:71:ed:bf:1e:22:c1:01:1d:32:
         61:cc:62:97:75:21:35:ea:f9:cc:42:6d:93:fe:0d:ef:e6:78:
         38:db:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:48 2026 by rpki-client