This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a6442a-8515-413e-bae0-e538194c2610/1/QWUIzACqa3YeR-8WTrPcnWhJn8s.asa
File:                     QWUIzACqa3YeR-8WTrPcnWhJn8s.asa (raw, json)
Hash identifier:          24bEH7dSiAnsWZslWFEbphiym0vZBf5Pe0tl7xv21Cc=
Subject key identifier:   41:65:08:CC:00:AA:6B:76:1E:47:EF:16:4E:B3:DC:9D:68:49:9F:CB
Certificate issuer:       /CN=765fb7099010c04cfa87bd82e1b59450a35cabbe
Certificate serial:       019C1414BA95DEBAE5EE252BE98FAA9E92FE
Authority key identifier: 76:5F:B7:09:90:10:C0:4C:FA:87:BD:82:E1:B5:94:50:A3:5C:AB:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dl-3CZAQwEz6h72C4bWUUKNcq74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a6442a-8515-413e-bae0-e538194c2610/1/QWUIzACqa3YeR-8WTrPcnWhJn8s.asa
Signing time:             Sat 31 Jan 2026 12:43:48 +0000
ASPA not before:          Sat 31 Jan 2026 12:43:48 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214891
Providers:                AS: 49418
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/a6442a-8515-413e-bae0-e538194c2610/1/dl-3CZAQwEz6h72C4bWUUKNcq74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/a6442a-8515-413e-bae0-e538194c2610/1/dl-3CZAQwEz6h72C4bWUUKNcq74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dl-3CZAQwEz6h72C4bWUUKNcq74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:14:14:ba:95:de:ba:e5:ee:25:2b:e9:8f:aa:9e:92:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765fb7099010c04cfa87bd82e1b59450a35cabbe
        Validity
            Not Before: Jan 31 12:43:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=416508cc00aa6b761e47ef164eb3dc9d68499fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:47:8a:da:6c:8a:8b:44:de:0a:c6:84:be:
                    2e:04:26:f1:d2:94:80:e3:29:28:a8:7f:c5:62:7f:
                    e0:09:c0:08:cc:d4:22:41:ba:f4:c4:0d:97:18:44:
                    bb:48:02:98:40:98:83:bf:af:dc:d0:73:28:75:47:
                    8a:4c:d2:3f:ff:af:06:80:bd:b1:40:c0:40:cf:aa:
                    65:b3:9d:e6:a8:a8:50:d0:c5:9d:60:6f:a4:eb:96:
                    16:2a:1a:bf:76:6e:33:8f:3f:d7:fb:e8:78:f9:02:
                    55:bb:70:7c:7b:bb:29:37:94:1e:b3:77:e9:b6:5b:
                    eb:48:76:8f:37:60:38:60:9d:e2:25:3a:2f:1f:17:
                    20:b2:c7:b6:dc:3e:6c:a3:41:f4:ee:84:38:91:9b:
                    8b:c4:b6:3a:42:1c:7e:19:14:9c:c9:a7:ad:23:9a:
                    91:42:ef:15:b2:dd:b9:b6:1b:6c:fa:c0:75:95:23:
                    9d:0a:97:76:aa:08:9f:3e:c3:b1:6f:9d:dc:da:f1:
                    33:bd:30:79:10:f0:de:fb:b7:cb:b3:3f:63:48:d5:
                    56:9f:84:20:aa:99:de:39:3c:1d:00:cb:a1:eb:5d:
                    9e:18:61:bf:e0:66:11:75:3f:48:db:bf:6b:6b:62:
                    64:ee:f4:82:f5:36:58:8f:9c:cd:e4:19:af:d5:57:
                    12:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:08:CC:00:AA:6B:76:1E:47:EF:16:4E:B3:DC:9D:68:49:9F:CB
            X509v3 Authority Key Identifier:
                keyid:76:5F:B7:09:90:10:C0:4C:FA:87:BD:82:E1:B5:94:50:A3:5C:AB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl-3CZAQwEz6h72C4bWUUKNcq74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a6442a-8515-413e-bae0-e538194c2610/1/QWUIzACqa3YeR-8WTrPcnWhJn8s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a6442a-8515-413e-bae0-e538194c2610/1/dl-3CZAQwEz6h72C4bWUUKNcq74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214891

    Signature Algorithm: sha256WithRSAEncryption
         65:48:9d:92:65:26:f9:c3:5d:e0:08:d4:8b:aa:a7:e4:b1:63:
         bf:3f:84:3a:d2:42:be:c3:62:5a:36:7b:a3:1a:b3:2c:b5:9b:
         67:e9:b6:d1:28:44:80:9c:1a:71:85:b7:2f:c7:1a:89:3e:b9:
         aa:20:6e:bb:74:d3:19:da:16:2a:1c:50:c1:03:57:15:a7:2a:
         4e:58:39:d4:2f:98:7b:01:3a:be:c7:5d:56:81:be:01:82:39:
         89:a3:ee:aa:14:8c:ab:3e:d1:54:f2:04:a6:68:5c:5a:ae:e8:
         8e:19:18:aa:a9:c4:09:e2:f3:81:ba:24:69:db:b4:b6:dc:84:
         e5:14:47:28:3e:0c:92:df:1b:29:61:c2:5f:c2:6f:45:60:af:
         b6:5c:3e:e8:25:d5:7c:b2:91:18:bd:ae:3a:9b:37:f2:6b:ac:
         7e:65:1a:de:24:f6:01:c3:2e:2e:74:fb:4a:fe:13:93:43:cc:
         e7:d9:71:d8:e5:bd:61:24:52:00:05:95:86:9d:5b:8d:7c:21:
         39:21:45:ae:c2:ff:6c:e7:c2:bb:f4:24:0a:32:dd:63:2d:e3:
         55:15:74:89:a1:d4:b3:47:ec:75:bb:0e:d8:d4:06:54:b7:0f:
         dd:92:05:19:bc:3c:6e:20:0f:7e:43:fe:d5:89:ee:e7:20:cf:
         ff:db:2f:33
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwUFLqV3rrl7iUr6Y+qnpL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NWZiNzA5OTAxMGMwNGNmYTg3YmQ4MmUxYjU5NDUwYTM1
Y2FiYmUwHhcNMjYwMTMxMTI0MzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTY1MDhjYzAwYWE2Yjc2MWU0N2VmMTY0ZWIzZGM5ZDY4NDk5ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBFHitpsiotE3grGhL4uBCbx0pSA
4ykoqH/FYn/gCcAIzNQiQbr0xA2XGES7SAKYQJiDv6/c0HModUeKTNI//68GgL2x
QMBAz6pls53mqKhQ0MWdYG+k65YWKhq/dm4zjz/X++h4+QJVu3B8e7spN5Qes3fp
tlvrSHaPN2A4YJ3iJTovHxcgsse23D5so0H07oQ4kZuLxLY6Qhx+GRScyaetI5qR
Qu8Vst25thts+sB1lSOdCpd2qgifPsOxb53c2vEzvTB5EPDe+7fLsz9jSNVWn4Qg
qpneOTwdAMuh612eGGG/4GYRdT9I279ra2Jk7vSC9TZYj5zN5Bmv1VcSuQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEFlCMwAqmt2HkfvFk6z3J1oSZ/LMB8GA1UdIwQY
MBaAFHZftwmQEMBM+oe9guG1lFCjXKu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGwtM0NaQVF3RXo2aDcyQzRiV1VVS05jcTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hNjQ0MmEtODUxNS00MTNlLWJhZTAt
ZTUzODE5NGMyNjEwLzEvUVdVSXpBQ3FhM1llUi04V1RyUGNuV2hKbjhzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hNjQ0MmEtODUxNS00MTNlLWJhZTAtZTUzODE5NGMyNjEw
LzEvZGwtM0NaQVF3RXo2aDcyQzRiV1VVS05jcTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHazANBgkqhkiG
9w0BAQsFAAOCAQEAZUidkmUm+cNd4AjUi6qn5LFjvz+EOtJCvsNiWjZ7oxqzLLWb
Z+m20ShEgJwacYW3L8caiT65qiBuu3TTGdoWKhxQwQNXFacqTlg51C+YewE6vsdd
VoG+AYI5iaPuqhSMqz7RVPIEpmhcWq7ojhkYqqnECeLzgbokadu0ttyE5RRHKD4M
kt8bKWHCX8JvRWCvtlw+6CXVfLKRGL2uOps38musfmUa3iT2AcMuLnT7Sv4Tk0PM
59lx2OW9YSRSAAWVhp1bjXwhOSFFrsL/bOfCu/QkCjLdYy3jVRV0iaHUs0fsdbsO
2NQGVLcP3ZIFGbw8biAPfkP+1Ynu5yDP/9svMw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:52 2026 by rpki-client