This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/mfXbQXByPJPp7zX33-P_nEyA7pw.asa
File:                     mfXbQXByPJPp7zX33-P_nEyA7pw.asa (raw, json)
Hash identifier:          vbrHO7MLkLBiT3RBDfJV+Hh6ozoURTvz1tPkV6hsSa4=
Subject key identifier:   99:F5:DB:41:70:72:3C:93:E9:EF:35:F7:DF:E3:FF:9C:4C:80:EE:9C
Certificate issuer:       /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial:       019BB954C49072C22512FE812D02F4E55049
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/mfXbQXByPJPp7zX33-P_nEyA7pw.asa
Signing time:             Tue 13 Jan 2026 21:48:18 +0000
ASPA not before:          Tue 13 Jan 2026 21:48:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49752
Providers:                AS: 45049
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b9:54:c4:90:72:c2:25:12:fe:81:2d:02:f4:e5:50:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
        Validity
            Not Before: Jan 13 21:48:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=99f5db4170723c93e9ef35f7dfe3ff9c4c80ee9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:97:8c:5b:69:62:fa:75:fd:2d:ba:ce:61:
                    2f:ae:a3:50:c6:7d:a2:37:76:8d:9a:99:5c:47:f4:
                    e4:34:85:fe:1c:d7:d0:b2:10:62:36:f6:46:2c:99:
                    57:87:fd:02:75:2e:83:e1:b5:db:df:9d:de:72:91:
                    fc:3f:e6:6d:4f:3d:fa:e5:05:df:14:da:b2:2b:35:
                    6d:33:52:15:24:53:e3:63:8f:c8:89:4b:1e:61:c9:
                    60:69:0e:09:74:47:5e:36:8a:82:3f:cb:c8:c5:7c:
                    61:3e:1d:9c:88:0a:e9:8d:a7:4f:f7:5f:23:5e:0f:
                    8a:e0:e7:0c:44:47:59:f1:cf:ea:c2:c7:58:52:d7:
                    36:d0:48:c9:63:cd:40:f2:63:76:5e:78:2f:8a:3f:
                    f1:e8:df:9f:5a:04:04:4b:b3:70:97:a0:f7:20:0f:
                    ce:2d:72:c2:4e:91:fa:87:1e:14:26:68:df:76:92:
                    bd:24:cf:b8:6b:e3:65:e2:41:f8:cb:4c:09:65:20:
                    67:a4:c3:ca:db:eb:a1:56:72:da:fe:3b:e4:1b:c3:
                    8b:6b:a8:76:51:c0:06:b2:8d:3b:26:0b:23:80:a4:
                    d9:29:1d:dd:cf:50:43:4f:b7:c0:dc:4c:9e:75:39:
                    11:8e:fa:76:66:b0:1e:b5:73:b1:60:f3:b0:a9:77:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:DB:41:70:72:3C:93:E9:EF:35:F7:DF:E3:FF:9C:4C:80:EE:9C
            X509v3 Authority Key Identifier:
                keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/mfXbQXByPJPp7zX33-P_nEyA7pw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49752

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:18:28:d7:c5:36:2d:fc:47:21:08:cd:f9:54:cb:0c:0a:
         c6:9c:8c:30:ee:16:f2:b3:af:12:20:30:f5:da:69:48:18:f6:
         81:0a:a2:26:9f:59:95:4c:e8:35:0f:3c:c1:07:e2:fd:64:52:
         fe:45:bf:dc:a3:f9:b3:e8:b9:e8:08:68:75:3a:30:7a:0b:25:
         e7:f5:ae:ac:49:c9:31:cb:b7:30:e5:6d:7a:07:1c:db:40:05:
         6c:5f:6f:f3:5b:6c:71:de:04:4c:34:23:13:2d:8d:31:c4:5e:
         10:c5:28:69:fe:23:08:c8:1f:85:3a:87:c4:53:72:f6:25:a6:
         b0:7d:82:81:b1:a0:1a:a2:cb:b5:db:84:28:f2:44:e7:ae:88:
         d6:5c:da:06:6d:8f:97:d8:2a:99:ae:c3:e7:98:2d:d6:14:26:
         8f:ae:c9:29:1b:38:52:e3:bc:5c:f1:cd:61:71:c8:e2:d5:f5:
         22:d0:33:64:21:a0:c3:f7:99:5b:70:25:40:53:b2:05:c4:03:
         c1:07:70:25:ba:c8:6a:31:84:57:2f:46:e4:5e:89:14:ba:ff:
         5c:81:1a:85:29:24:e2:0d:75:99:6e:a5:8a:28:8a:6d:f3:9e:
         b9:92:3a:dc:0d:96:9e:ce:08:29:27:c4:61:27:fb:ef:9e:a5:
         86:02:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:47 2026 by rpki-client