This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa
File:                     Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (raw, json)
Hash identifier:          vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=
Subject key identifier:   43:AF:41:19:A9:AA:3F:DF:D6:A0:D9:CC:09:D9:ED:D5:B9:B4:66:E9
Certificate issuer:       /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial:       019BE00F3052E64F20CDF0D6E179BDFB17E2
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa
Signing time:             Wed 21 Jan 2026 10:17:30 +0000
ASPA not before:          Wed 21 Jan 2026 10:17:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            39719
Providers:                AS: 1267
                          AS: 3302
                          AS: 12874
                          AS: 16004
                          AS: 61968
                          AS: 200199
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:0f:30:52:e6:4f:20:cd:f0:d6:e1:79:bd:fb:17:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
        Validity
            Not Before: Jan 21 10:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=43af4119a9aa3fdfd6a0d9cc09d9edd5b9b466e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:c7:bc:64:79:a2:23:09:2d:56:17:6e:60:
                    9b:7a:25:f8:b0:b5:cd:7d:98:21:4a:8b:8a:e8:10:
                    ce:b0:bc:21:98:69:d6:ac:2f:e1:05:95:1a:a5:91:
                    51:21:be:7f:67:73:33:78:5f:ff:d3:44:9f:34:cf:
                    a1:2f:cf:ed:f1:8a:79:45:62:fb:e3:a8:2c:ea:28:
                    d7:e9:76:1e:b4:21:38:19:e4:0a:31:ca:a7:49:2a:
                    cd:45:5f:d9:d6:00:cc:1e:f8:93:40:e6:ab:39:db:
                    a7:77:8b:ba:29:66:b7:2e:a4:c8:fe:2b:2d:61:e1:
                    71:29:58:16:ed:68:d4:07:f7:1a:78:a3:48:eb:56:
                    63:50:bc:bd:ca:65:33:af:bd:83:ce:cf:98:58:62:
                    18:2e:23:02:2c:5c:dc:c5:b6:3d:78:1b:86:47:38:
                    5a:00:e2:9f:2a:ea:f7:35:b9:f5:16:1b:3b:7f:7e:
                    0d:1e:78:2d:5c:11:c6:50:de:78:e6:6d:48:79:54:
                    12:15:b4:f8:9e:33:27:9c:3f:95:ac:b0:d3:a3:d6:
                    d8:62:25:6c:bf:f1:f7:ce:12:0d:13:93:19:96:f2:
                    32:9e:e4:8f:99:a8:f3:90:d3:3d:7a:85:45:78:6c:
                    b1:1a:b0:12:0a:5d:fe:02:21:1d:fa:9a:da:6b:f6:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AF:41:19:A9:AA:3F:DF:D6:A0:D9:CC:09:D9:ED:D5:B9:B4:66:E9
            X509v3 Authority Key Identifier:
                keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39719

    Signature Algorithm: sha256WithRSAEncryption
         b1:cc:99:ed:57:68:d7:b1:80:9a:0f:0a:f1:31:87:b8:61:75:
         1e:60:04:82:6e:e0:70:65:81:27:d0:2d:3b:a9:ca:b0:37:f5:
         63:38:30:48:e5:59:84:72:c4:c6:6f:bd:28:43:31:16:45:4e:
         be:d8:70:50:d6:02:f6:e2:ed:3e:df:8a:95:8d:e6:64:20:3c:
         97:4e:f4:9a:1a:fd:89:ed:04:07:3f:2b:ad:88:32:54:8d:a5:
         49:db:01:f2:be:b7:49:98:e4:1b:1d:f1:e0:84:3e:3d:b0:90:
         9d:a2:e3:98:e8:58:5c:1a:16:3c:5c:91:4f:86:ba:6d:7c:27:
         22:7d:ee:b1:a7:1a:53:d2:74:73:20:af:1d:64:30:a1:1c:9c:
         54:0f:f6:9f:39:51:b1:42:ab:55:4d:bd:c0:04:31:4f:92:7b:
         c5:a1:96:26:01:e6:66:d4:df:5e:00:0e:93:34:03:bc:cc:9f:
         1b:c2:22:16:35:6d:0f:22:b0:50:ae:f6:76:50:3a:1e:aa:e9:
         66:b3:7c:52:e3:af:94:e6:8a:ec:b3:80:5c:71:b5:c0:ed:5d:
         bd:76:81:e7:69:a7:7b:97:83:e2:a5:f7:ae:44:db:cb:b8:f1:
         34:e9:aa:56:88:44:e9:1a:81:e6:14:65:b6:4f:c2:93:a9:58:
         d6:85:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:03 2026 by rpki-client