This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/QNFQGcJqwR5MgwCVhTDShs1p8JI.asa
File:                     QNFQGcJqwR5MgwCVhTDShs1p8JI.asa (raw, json)
Hash identifier:          XnQ5Pgw+Hdb0Urr0tyXEs7v/2CmocEBJocw3nGIv1c8=
Subject key identifier:   40:D1:50:19:C2:6A:C1:1E:4C:83:00:95:85:30:D2:86:CD:69:F0:92
Certificate issuer:       /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial:       019BF627504D1DC68A2AF12FCAD137E724AB
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/QNFQGcJqwR5MgwCVhTDShs1p8JI.asa
Signing time:             Sun 25 Jan 2026 17:15:30 +0000
ASPA not before:          Sun 25 Jan 2026 17:15:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47311
Providers:                AS: 6939
                          AS: 24198
                          AS: 45735
                          AS: 58389
                          AS: 58495
                          AS: 133210
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:27:50:4d:1d:c6:8a:2a:f1:2f:ca:d1:37:e7:24:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
        Validity
            Not Before: Jan 25 17:15:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=40d15019c26ac11e4c8300958530d286cd69f092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:ad:60:24:54:bb:66:05:9f:a4:72:08:72:
                    b3:5a:4f:a1:2d:d5:fd:2b:ba:8b:14:47:45:4e:a9:
                    13:2e:12:cb:4d:b2:b4:40:29:2a:87:dc:ca:01:8c:
                    b1:cb:9e:6d:5a:67:26:ee:dc:9b:a5:b6:00:6e:1d:
                    c8:33:97:d9:5b:d7:29:01:50:61:17:3d:cf:3e:36:
                    b9:27:29:b1:3f:bf:ed:b0:6d:40:5d:b3:91:fe:ae:
                    4a:03:97:7b:6b:5d:fc:14:66:8d:57:c4:4f:e5:8c:
                    33:c1:d6:80:2e:88:72:4c:b0:62:e1:6b:0e:ef:cc:
                    44:39:95:fe:2e:79:60:39:dc:af:83:5d:01:bb:7e:
                    3b:d3:b8:1e:57:68:e0:e5:9d:a8:5c:a6:4b:bd:0c:
                    eb:dd:9f:0b:2a:cc:45:46:8e:de:43:2f:ec:7c:8f:
                    a5:39:61:91:b6:e5:3e:07:ee:16:32:8c:c7:58:01:
                    20:2b:03:ac:d7:a1:14:2d:80:93:96:37:58:4b:1a:
                    aa:80:23:15:0a:58:dc:9d:9d:79:b0:cc:01:64:33:
                    34:ef:47:b8:e2:6b:e0:3c:aa:f0:6f:c6:bd:2f:8f:
                    ae:c2:7d:32:f5:88:47:e3:c4:0d:67:e1:18:15:a8:
                    f8:7f:fe:6b:eb:fb:e8:58:55:82:d7:0c:e3:09:69:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D1:50:19:C2:6A:C1:1E:4C:83:00:95:85:30:D2:86:CD:69:F0:92
            X509v3 Authority Key Identifier:
                keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/QNFQGcJqwR5MgwCVhTDShs1p8JI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47311

    Signature Algorithm: sha256WithRSAEncryption
         31:54:64:e9:59:2a:1c:55:14:dd:34:21:b0:65:9d:2a:bb:d6:
         2c:80:7a:00:73:5a:cd:4c:eb:8b:45:c4:7d:f7:5c:3c:15:63:
         d8:7a:f3:b6:49:c8:58:ca:15:3e:de:23:f6:7e:10:6c:f4:15:
         d5:1c:49:a4:3c:5b:a8:96:9b:74:3d:30:4d:15:ca:84:6b:2e:
         1a:f7:f1:a5:8f:95:ab:e6:c5:00:fd:bb:54:df:8b:bc:a9:0c:
         a9:97:04:71:fe:5c:17:9d:94:92:b0:c0:25:2a:3d:05:2c:0a:
         72:35:fa:98:2c:25:e2:c8:40:0d:03:65:99:3c:d4:94:e3:bf:
         61:8e:c8:49:a2:4f:3a:78:3e:ab:b7:1c:06:9d:17:01:7a:c1:
         af:81:65:3b:32:77:ec:a0:5d:f6:7a:02:80:b5:9c:44:c7:60:
         0b:de:a3:82:e7:51:6c:40:9c:81:9e:69:18:6f:17:14:38:f8:
         b6:ce:cc:fd:64:86:98:6c:da:75:22:cb:f0:9e:c9:92:63:b3:
         c8:3a:42:0e:57:9c:23:a9:01:44:e2:de:ad:f1:29:dc:2b:a4:
         44:54:b8:71:ec:58:47:4e:46:90:b5:2f:75:dc:d8:c1:e7:ce:
         e2:e0:34:48:a0:d9:73:03:bb:e3:1a:de:91:34:22:82:35:7b:
         00:ca:69:49
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZv2J1BNHcaKKvEvytE35ySrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNmMxNzFiNGM3NWQ2NTBhOGFmMTc2ODg2ZDAyMzVhMzRl
NTlkZjAwHhcNMjYwMTI1MTcxNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGQxNTAxOWMyNmFjMTFlNGM4MzAwOTU4NTMwZDI4NmNkNjlmMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeutYCRUu2YFn6RyCHKzWk+hLdX9
K7qLFEdFTqkTLhLLTbK0QCkqh9zKAYyxy55tWmcm7tybpbYAbh3IM5fZW9cpAVBh
Fz3PPja5JymxP7/tsG1AXbOR/q5KA5d7a138FGaNV8RP5YwzwdaALohyTLBi4WsO
78xEOZX+LnlgOdyvg10Bu34707geV2jg5Z2oXKZLvQzr3Z8LKsxFRo7eQy/sfI+l
OWGRtuU+B+4WMozHWAEgKwOs16EULYCTljdYSxqqgCMVCljcnZ15sMwBZDM070e4
4mvgPKrwb8a9L4+uwn0y9YhH48QNZ+EYFaj4f/5r6/voWFWC1wzjCWnXlQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEDRUBnCasEeTIMAlYUw0obNafCSMB8GA1UdIwQY
MBaAFE9sFxtMddZQqK8XaIbQI1o05Z3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQt
ZTJmZWRhYjNjYjA5LzEvUU5GUUdjSnF3UjVNZ3dDVmhURFNoczFwOEpJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kY2Y5NjktMzg1OS00ZGNhLWFjZjQtZTJmZWRhYjNjYjA5
LzEvVDJ3WEcweDExbENvcnhkb2h0QWpXalRsbmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC4zzANBgkqhkiG
9w0BAQsFAAOCAQEAMVRk6VkqHFUU3TQhsGWdKrvWLIB6AHNazUzri0XEffdcPBVj
2HrztknIWMoVPt4j9n4QbPQV1RxJpDxbqJabdD0wTRXKhGsuGvfxpY+Vq+bFAP27
VN+LvKkMqZcEcf5cF52UkrDAJSo9BSwKcjX6mCwl4shADQNlmTzUlOO/YY7ISaJP
Ong+q7ccBp0XAXrBr4FlOzJ37KBd9noCgLWcRMdgC96jgudRbECcgZ5pGG8XFDj4
ts7M/WSGmGzadSLL8J7JkmOzyDpCDlecI6kBROLerfEp3CukRFS4cexYR05GkLUv
ddzYwefO4uA0SKDZcwO74xrekTQigjV7AMppSQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:51 2026 by rpki-client