This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bTQItgTZaz6y9BWkOV_7uy4A8tA.asa
File:                     bTQItgTZaz6y9BWkOV_7uy4A8tA.asa (raw, json)
Hash identifier:          W+mQXmAe5LXb4oQS76AvMgQiEQnKAsQ/rixpE72aTEw=
Subject key identifier:   6D:34:08:B6:04:D9:6B:3E:B2:F4:15:A4:39:5F:FB:BB:2E:00:F2:D0
Certificate issuer:       /CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
Certificate serial:       019C010DD77AE944F120E3C8378B173E9368
Authority key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bTQItgTZaz6y9BWkOV_7uy4A8tA.asa
Signing time:             Tue 27 Jan 2026 20:03:30 +0000
ASPA not before:          Tue 27 Jan 2026 20:03:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48927
Providers:                AS: 174
                          AS: 6939
                          AS: 47536
                          AS: 196610
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:01:0d:d7:7a:e9:44:f1:20:e3:c8:37:8b:17:3e:93:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03
        Validity
            Not Before: Jan 27 20:03:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d3408b604d96b3eb2f415a4395ffbbb2e00f2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:2f:57:40:f9:fd:a6:74:12:19:15:a7:97:
                    e0:dc:22:7c:f1:11:c3:f4:43:36:a6:1d:63:78:58:
                    2c:d9:50:d9:3e:05:fe:cf:b9:8e:bd:bb:93:42:e7:
                    cb:50:6c:49:08:fa:08:46:9a:98:e7:72:46:9f:22:
                    5b:54:42:cc:1f:99:fa:de:53:94:84:af:4e:d2:49:
                    e8:c7:8f:b9:10:c8:f5:dd:4b:46:07:14:80:bf:62:
                    ad:20:dc:9d:a9:91:4a:ba:61:33:8b:8f:c5:13:55:
                    6a:8b:2d:d0:96:96:bd:2c:5c:b3:7f:fd:05:69:90:
                    cb:54:04:32:80:78:63:70:af:fd:9a:dc:10:8f:66:
                    8d:e5:8f:03:ea:de:af:f5:4a:30:dc:58:a1:1c:03:
                    c3:a8:e9:1e:48:1a:8f:de:46:33:26:1e:1a:b2:c2:
                    1b:a3:fb:d5:ff:a4:30:89:5d:c8:95:70:57:77:fb:
                    b2:76:fd:f2:54:01:29:ab:13:07:ea:cc:dd:11:f8:
                    94:2c:84:3c:80:ad:1f:b9:e6:34:b8:f0:fa:70:f6:
                    39:9a:73:e1:c4:17:0e:fa:8e:a4:e4:52:52:7b:c6:
                    71:ba:c2:9d:ab:57:41:b6:13:0f:26:5d:62:6c:b2:
                    df:99:52:2c:3e:b2:41:8c:42:54:37:ef:0d:7c:67:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:08:B6:04:D9:6B:3E:B2:F4:15:A4:39:5F:FB:BB:2E:00:F2:D0
            X509v3 Authority Key Identifier:
                keyid:E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/bTQItgTZaz6y9BWkOV_7uy4A8tA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48927

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:20:bd:27:54:6a:9c:ba:6b:a4:47:9a:e8:7d:8f:65:91:
         65:53:58:b1:2b:3c:ce:30:b0:92:8f:dd:46:41:b7:d5:c5:8a:
         23:bb:ba:17:26:51:42:62:3f:6a:fd:2e:01:39:8f:cb:14:e2:
         06:bd:8b:ae:1a:68:2a:08:c9:a9:5c:95:36:a7:38:d9:01:7e:
         43:c2:f0:1a:11:9c:d4:6c:0c:92:f8:88:e3:63:af:83:bb:bd:
         59:dd:ce:24:fe:7d:85:87:1f:b5:37:bb:3b:c7:f6:86:10:68:
         96:87:f2:a2:8e:10:55:9c:90:54:a3:03:2a:42:45:4c:e2:03:
         02:66:6e:75:35:64:1e:53:31:bf:e4:17:ec:7c:18:70:e6:eb:
         9c:e6:98:25:6a:b4:3e:f8:7a:5e:2b:ce:05:90:0d:25:f1:3b:
         8c:2b:9a:3d:e2:64:ed:de:a0:c8:a3:73:b2:47:df:1c:b7:14:
         d9:0e:ce:f3:8e:eb:da:20:17:45:24:11:53:49:b8:f8:02:77:
         ea:bf:07:39:28:05:05:6a:2b:c8:b5:08:a1:57:b9:3f:93:32:
         1f:6d:70:4b:3e:c0:3d:1a:68:a4:53:26:a2:02:39:96:37:d0:
         85:48:1c:2e:5e:c0:a3:42:99:de:52:be:d5:f7:55:39:bf:99:
         d2:64:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:43:26 2026 by rpki-client