This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/nXPV6vL9Myf87iwdt8oMBUpIgzI.asa
File:                     nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (raw, json)
Hash identifier:          jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=
Subject key identifier:   9D:73:D5:EA:F2:FD:33:27:FC:EE:2C:1D:B7:CA:0C:05:4A:48:83:32
Certificate issuer:       /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial:       019C39C05990BC8C8547E6BD2106E9BE5817
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/nXPV6vL9Myf87iwdt8oMBUpIgzI.asa
Signing time:             Sat 07 Feb 2026 20:17:13 +0000
ASPA not before:          Sat 07 Feb 2026 20:17:13 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207196
Providers:                AS: 207252
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:39:c0:59:90:bc:8c:85:47:e6:bd:21:06:e9:be:58:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Validity
            Not Before: Feb  7 20:17:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9d73d5eaf2fd3327fcee2c1db7ca0c054a488332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:a5:61:db:b3:a0:be:86:ff:7c:47:0c:a3:
                    56:f1:ab:72:1e:e6:07:e1:be:76:97:12:a9:04:76:
                    a7:3c:33:f4:15:2a:c4:5c:48:8c:67:cb:b2:43:7f:
                    ca:c1:c6:38:ba:3c:a3:d2:9e:e7:bd:89:3c:a9:64:
                    6d:f9:86:a1:6b:64:47:5c:41:9a:dc:c2:22:c3:de:
                    c1:d5:14:75:34:6e:fb:34:dc:41:4f:f5:a5:93:7f:
                    64:9b:d3:35:a6:fc:d2:93:88:c3:94:ec:e1:4d:b8:
                    4e:a1:82:71:89:17:3f:07:f0:7f:b6:2d:dd:da:33:
                    4b:6f:ba:43:af:c7:d8:91:1c:b1:62:e9:29:37:35:
                    2e:4c:9e:c4:44:be:1b:48:45:2c:20:b3:42:57:1e:
                    87:1e:3c:b3:8a:4c:ac:68:77:47:71:f7:d6:61:5c:
                    9b:5e:70:bf:fb:d6:3d:d4:da:80:c0:77:c0:98:aa:
                    9d:0c:e1:01:fd:cd:2f:6d:8b:0f:ad:4e:9a:a9:9a:
                    bf:09:e3:d0:51:6f:06:94:c0:de:0e:cc:f7:cb:46:
                    70:c5:fc:8d:e3:2e:67:eb:47:9d:a4:25:ec:26:a5:
                    61:b1:ae:fb:4a:27:f8:62:f0:b9:83:cf:f5:c1:ca:
                    8d:8e:ee:73:7c:fc:92:e4:04:2b:5e:28:71:5a:3d:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:D5:EA:F2:FD:33:27:FC:EE:2C:1D:B7:CA:0C:05:4A:48:83:32
            X509v3 Authority Key Identifier:
                keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/nXPV6vL9Myf87iwdt8oMBUpIgzI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207196

    Signature Algorithm: sha256WithRSAEncryption
         41:49:81:e3:53:4f:5e:c3:e1:9a:a2:9a:62:bf:e0:b8:3c:6d:
         14:06:38:8b:25:8a:9a:43:79:27:da:32:ad:fb:9b:e3:1d:8c:
         e8:f9:9b:cb:01:45:e2:df:63:13:6d:a3:f9:22:fc:6d:93:fd:
         f6:96:97:cb:8a:76:dd:4c:30:20:6c:48:55:04:b6:c6:67:0d:
         7c:33:ee:28:c0:58:5c:41:80:ea:af:e5:0b:0c:ac:b8:87:52:
         1f:05:8d:05:85:60:f4:c0:73:64:79:8a:b9:15:44:b6:90:a5:
         ba:e5:db:22:27:b8:7d:08:c9:ed:b4:df:ad:65:01:ea:5d:07:
         1a:50:43:b2:e5:70:4b:04:0b:ab:41:fc:e5:cc:b1:b4:89:93:
         41:37:f5:fb:b6:85:65:fe:a6:ac:da:65:4d:4b:2f:a7:00:b2:
         9b:5b:de:75:fb:4f:fd:f1:39:f9:6f:3f:45:39:0e:44:3c:c2:
         54:85:71:2f:dd:7d:48:aa:c6:77:5f:2b:de:8d:d6:84:43:fe:
         50:cd:74:6d:1e:f7:cf:b5:4a:26:7a:70:d4:f0:cc:25:41:1a:
         19:32:86:8e:5d:c6:5d:e4:6d:3e:75:35:68:17:2e:d9:69:57:
         e2:1d:f1:a5:fb:a5:f6:2f:37:1d:01:de:c7:1f:15:0b:bc:16:
         05:58:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:12 2026 by rpki-client