This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/Q_P7X5C1lmaNlkbuzVGT844GFfo.asa
File:                     Q_P7X5C1lmaNlkbuzVGT844GFfo.asa (raw, json)
Hash identifier:          nwImYSIcMFyAUiCaJ41mpvQb3aaHOwHGxJ4PTZp+Yz0=
Subject key identifier:   43:F3:FB:5F:90:B5:96:66:8D:96:46:EE:CD:51:93:F3:8E:06:15:FA
Certificate issuer:       /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial:       019BC5E32F2367F97CBEF848469A4FD7FB3B
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/Q_P7X5C1lmaNlkbuzVGT844GFfo.asa
Signing time:             Fri 16 Jan 2026 08:19:18 +0000
ASPA not before:          Fri 16 Jan 2026 08:19:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57913
Providers:                AS: 5398
                          AS: 41327
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c5:e3:2f:23:67:f9:7c:be:f8:48:46:9a:4f:d7:fb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
        Validity
            Not Before: Jan 16 08:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43f3fb5f90b596668d9646eecd5193f38e0615fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:87:f7:35:7e:cc:09:9b:87:fe:f6:7e:55:
                    8a:f7:89:7e:19:5d:28:2c:3b:2b:75:ac:c3:87:c5:
                    ef:0b:a3:bb:28:e7:b3:28:e2:e1:9d:cc:21:69:bd:
                    9d:26:a4:e1:45:8b:e1:4e:f2:ab:16:c4:14:a7:03:
                    cb:e5:b7:43:e4:06:de:e5:70:1e:8c:5b:6a:3c:e4:
                    b3:d6:59:92:56:7e:70:91:59:b4:3e:fc:aa:78:e6:
                    45:93:8f:d4:07:84:4e:19:14:2d:d7:28:2a:ba:64:
                    3c:79:35:f2:d9:46:23:81:55:1a:88:c1:e1:cd:4b:
                    47:02:b4:94:5d:9a:4b:ce:0d:5e:c1:d2:67:75:b0:
                    8a:32:fe:79:fb:d5:55:dd:5f:fe:05:b2:88:70:a2:
                    18:d1:8b:18:60:e2:30:7d:72:a0:7a:4f:63:4a:07:
                    5f:f8:5e:18:dd:e2:8a:86:0a:e1:78:6d:b9:2a:2e:
                    49:05:65:74:54:b5:80:f8:f1:ad:e9:bb:41:e2:21:
                    85:c1:4e:ed:ef:20:7c:15:76:c0:0e:90:f9:ea:21:
                    da:90:29:d9:26:9c:e7:20:1d:d3:ae:fe:4e:e8:07:
                    0b:34:e4:63:96:38:37:86:50:d3:60:77:92:78:ed:
                    be:43:8f:a4:1f:5d:e2:b5:2a:08:1b:ce:33:96:6e:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:FB:5F:90:B5:96:66:8D:96:46:EE:CD:51:93:F3:8E:06:15:FA
            X509v3 Authority Key Identifier:
                keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/Q_P7X5C1lmaNlkbuzVGT844GFfo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57913

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:66:9d:f4:7b:e9:1b:cf:dc:af:86:ec:35:f6:05:f4:38:
         7a:49:ea:dc:4e:75:d8:7d:37:e3:2a:c6:e2:9e:3b:4a:6d:0a:
         94:b1:cb:b8:df:f7:6a:16:97:53:80:28:ed:29:99:4d:f7:02:
         9e:e9:86:bb:3a:25:3e:80:77:f4:66:a7:40:3a:eb:fb:0b:8e:
         9a:92:ce:44:0f:fd:35:54:3d:43:0e:43:c6:7c:36:8f:63:c1:
         28:d5:f7:7c:c8:50:46:07:e0:51:3e:00:2a:8d:64:ed:74:aa:
         6f:c3:27:53:8b:77:0e:45:a7:c7:fa:c4:fd:e8:ed:6f:6f:d9:
         42:6b:ca:cf:d1:7a:ee:39:11:3a:9b:26:16:e1:a1:45:60:a5:
         c9:58:03:af:c1:39:c9:f5:a7:9d:10:e6:a2:7e:c5:77:60:63:
         44:4d:ec:d7:76:ae:cf:84:16:0e:72:56:ed:05:62:23:e4:ec:
         d8:50:bc:68:bb:c7:3b:79:fd:4a:b8:18:ad:92:2e:9e:03:f4:
         6a:5b:6a:7d:d5:e0:60:f5:88:d0:91:1c:fb:ff:66:15:02:86:
         91:8a:03:c6:cf:b0:74:d9:42:d2:c6:db:e7:1c:c8:bb:ca:8f:
         99:fd:99:58:b5:8f:91:ff:ba:6a:a5:ed:60:83:c0:77:f4:f1:
         b0:ed:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:00 2026 by rpki-client