This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa
File:                     W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa (raw, json)
Hash identifier:          tgVo7GEFMdcLKeWoqIyQC9dBMhmbDoLL5DmLM5lP/iU=
Subject key identifier:   5B:4D:C3:9A:5C:35:5B:0F:9C:14:8A:7D:BE:47:EC:58:2E:4B:F2:36
Certificate issuer:       /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial:       019BE921E227177BD99F0E9A8004DB20D4E7
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa
Signing time:             Fri 23 Jan 2026 04:34:30 +0000
ASPA not before:          Fri 23 Jan 2026 04:34:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            206777
Providers:                AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e9:21:e2:27:17:7b:d9:9f:0e:9a:80:04:db:20:d4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
        Validity
            Not Before: Jan 23 04:34:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b4dc39a5c355b0f9c148a7dbe47ec582e4bf236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:e9:d7:85:24:d0:a6:5e:be:08:d6:d0:b0:
                    6e:70:9e:3e:b6:e0:f2:45:2c:4f:c2:21:9e:34:1b:
                    d7:d1:0f:7a:8a:da:dc:23:54:d2:cf:24:7f:a0:31:
                    a1:6e:2f:03:68:93:3c:30:ac:2a:ee:48:5d:24:6f:
                    e5:6b:ea:51:4c:ec:9e:ac:f7:6d:22:a9:1c:ef:bb:
                    9f:b5:d8:b3:f3:56:21:2c:a5:18:84:54:b6:12:c4:
                    85:a6:f4:28:c5:85:9c:a4:f1:f8:6e:8c:ac:d9:cc:
                    b0:52:bc:8e:bd:66:a4:4c:da:9d:b9:1b:45:bc:c8:
                    e5:94:03:95:54:13:4f:dd:63:90:bf:6b:5a:9e:bd:
                    b3:59:bd:17:ea:aa:2e:84:03:c7:31:eb:f1:26:53:
                    7f:96:e6:df:8c:ea:0f:97:a6:dc:65:c9:51:98:f7:
                    96:e4:42:77:48:da:5d:b9:2e:e8:54:04:1d:a1:e1:
                    1b:0f:79:56:ed:9a:3a:55:d0:cb:43:b9:e6:c4:c3:
                    7c:e5:f0:bb:3d:58:6d:ee:bc:1e:2d:22:7e:f8:c4:
                    a4:be:4e:c0:a3:e1:f2:3a:3a:7d:29:b9:82:18:bf:
                    25:58:22:69:1d:75:7e:e4:ba:26:95:a5:1e:4b:d1:
                    97:99:87:ee:6a:be:be:64:fa:a5:15:4b:e8:90:c8:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4D:C3:9A:5C:35:5B:0F:9C:14:8A:7D:BE:47:EC:58:2E:4B:F2:36
            X509v3 Authority Key Identifier:
                keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/W03Dmlw1Ww-cFIp9vkfsWC5L8jY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206777

    Signature Algorithm: sha256WithRSAEncryption
         97:55:d6:52:a4:a0:63:31:0d:a9:08:e0:d7:80:b1:5e:cf:ad:
         33:17:f6:51:af:95:da:13:4c:4a:ed:83:f7:23:52:04:4a:d1:
         9f:84:0c:bb:f0:59:fc:70:23:11:fd:3b:ad:c9:44:a3:4e:e4:
         41:1d:ae:cd:1f:15:2d:67:96:91:88:cd:f2:35:8f:18:2b:1e:
         43:1d:05:05:01:19:34:5a:04:3b:25:10:11:cb:24:9b:56:5e:
         96:f6:d6:fd:6d:87:0e:d7:d1:8d:fb:c0:82:44:49:ef:7f:4d:
         58:3b:ad:07:ef:d6:54:81:33:e1:89:aa:c8:e1:1a:be:e1:21:
         4c:68:18:31:81:04:73:95:82:73:29:1a:07:56:c0:a4:cc:d9:
         ad:c2:5c:15:ca:05:26:cb:64:39:30:78:97:74:00:bf:19:5c:
         85:d8:cd:0f:06:d5:ac:d9:6d:9e:d6:e8:40:33:f1:aa:cc:2d:
         7e:78:7f:9d:8d:27:8c:e3:4d:28:a7:df:4c:cb:a0:60:35:c8:
         9e:45:36:cc:da:70:6f:c3:cb:be:32:1b:46:74:e7:ee:e1:6d:
         e7:31:91:96:98:a7:1a:cf:9a:64:cd:f7:dd:b3:fb:fb:a9:d6:
         6b:06:dc:fb:3a:97:ce:aa:a3:11:a6:92:0d:55:22:72:1b:16:
         01:4a:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:50 2026 by rpki-client