This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/sJ4fBRlYkaW2DfbwT41aefbNZtc.asa
File:                     sJ4fBRlYkaW2DfbwT41aefbNZtc.asa (raw, json)
Hash identifier:          KPvz8H9YcmTAaol7AmPzK6hmkkiOVVm9HlZufolZpd4=
Subject key identifier:   B0:9E:1F:05:19:58:91:A5:B6:0D:F6:F0:4F:8D:5A:79:F6:CD:66:D7
Certificate issuer:       /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial:       019B64F30FCB1340A76C164EAE72E7764490
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/sJ4fBRlYkaW2DfbwT41aefbNZtc.asa
Signing time:             Sun 28 Dec 2025 12:33:29 +0000
ASPA not before:          Sun 28 Dec 2025 12:33:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            197421
Providers:                AS: 208570
                          AS: 212330
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:64:f3:0f:cb:13:40:a7:6c:16:4e:ae:72:e7:76:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
        Validity
            Not Before: Dec 28 12:33:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b09e1f05195891a5b60df6f04f8d5a79f6cd66d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:86:23:37:f9:eb:da:58:bd:e5:b6:90:d5:
                    b4:84:5d:d4:ab:50:28:8e:61:4b:40:35:6b:cb:75:
                    dd:c3:2b:8e:66:bb:e2:b9:32:1a:6c:08:f4:be:2f:
                    0d:57:f8:6e:5b:fe:c9:5d:49:f8:5a:0a:9b:43:7e:
                    e6:57:28:04:44:78:da:b9:30:1e:7a:ec:3c:cc:54:
                    fd:fd:c4:5d:e9:66:33:fb:b6:13:c6:27:ee:77:60:
                    e1:4d:37:3e:0a:ed:9a:d4:65:77:1d:da:be:5f:f3:
                    1d:7c:3c:5a:42:b5:d1:5e:5a:e1:87:6f:10:8a:af:
                    44:8a:9b:f2:2b:7d:9b:a4:f3:23:8d:80:04:c4:b0:
                    99:33:ca:4b:8a:4b:bd:cc:56:ea:6d:d7:3e:0d:07:
                    7f:ee:bf:2a:b4:ee:fe:84:f9:af:62:b0:ba:10:99:
                    87:9c:c0:16:2b:a8:e4:70:13:85:42:ed:df:49:83:
                    bd:68:3a:db:cb:ff:6d:84:5c:50:c6:82:5a:f7:16:
                    92:66:aa:b5:6c:08:e8:a7:f2:9f:76:c3:03:d0:20:
                    a4:60:1e:c8:12:f4:02:6e:e0:4e:1a:3c:b0:6e:46:
                    b2:0b:29:b1:22:42:af:48:3f:2e:2d:c2:58:84:66:
                    45:97:df:b1:c8:f4:16:39:12:3d:9f:1a:a9:6b:41:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9E:1F:05:19:58:91:A5:B6:0D:F6:F0:4F:8D:5A:79:F6:CD:66:D7
            X509v3 Authority Key Identifier:
                keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/sJ4fBRlYkaW2DfbwT41aefbNZtc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197421

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:c1:76:7b:bc:48:3a:93:2d:12:81:3c:68:ea:ea:6c:78:
         da:6b:e5:6e:e0:bb:50:5f:5b:f1:74:a4:9c:19:69:f1:db:f5:
         6b:0a:75:1c:0d:79:6c:86:ca:ec:b3:be:4b:9d:06:23:58:44:
         ba:70:34:41:79:bc:5f:7a:63:c5:c0:67:f5:61:c2:27:56:2c:
         c4:7a:a8:a2:10:2f:6d:93:d9:85:f7:62:e2:2e:b8:ae:3d:38:
         0e:00:60:62:8d:2d:b1:fe:00:33:76:1e:f2:dc:21:8e:28:2c:
         7a:e2:56:95:3c:86:89:e6:7d:21:65:00:d9:66:a6:e6:92:f8:
         ff:59:02:f9:19:8e:ac:e4:79:e0:0d:17:4d:d8:ac:04:7f:d4:
         31:3c:15:9b:e9:9d:30:34:af:6d:31:71:01:0f:38:64:6e:9d:
         57:34:a0:27:49:f1:6f:ac:54:7f:70:61:96:bf:eb:83:4e:ce:
         52:24:60:f5:54:33:ec:34:54:db:46:b0:21:61:0c:65:0b:21:
         c6:8b:ee:61:76:83:10:e3:3d:d1:88:27:cb:43:bf:fe:0e:f7:
         b6:80:3d:5f:b8:eb:4e:d5:66:9f:33:df:e1:0f:ae:79:65:92:
         2d:1d:fd:29:0f:1a:8f:dd:27:ae:45:79:ca:15:32:b5:99:94:
         cd:bf:d4:72
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZtk8w/LE0CnbBZOrnLndkSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjUxMjI4MTIzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDllMWYwNTE5NTg5MWE1YjYwZGY2ZjA0ZjhkNWE3OWY2Y2Q2NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqCGIzf569pYveW2kNW0hF3Uq1Ao
jmFLQDVry3XdwyuOZrviuTIabAj0vi8NV/huW/7JXUn4WgqbQ37mVygERHjauTAe
euw8zFT9/cRd6WYz+7YTxifud2DhTTc+Cu2a1GV3Hdq+X/MdfDxaQrXRXlrhh28Q
iq9EipvyK32bpPMjjYAExLCZM8pLiku9zFbqbdc+DQd/7r8qtO7+hPmvYrC6EJmH
nMAWK6jkcBOFQu3fSYO9aDrby/9thFxQxoJa9xaSZqq1bAjop/KfdsMD0CCkYB7I
EvQCbuBOGjywbkayCymxIkKvSD8uLcJYhGZFl9+xyPQWORI9nxqpa0FWKQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLCeHwUZWJGltg328E+NWnn2zWbXMB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEvc0o0ZkJSbFlrYVcyRGZid1Q0MWFlZmJOWnRjLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDLTANBgkqhkiG
9w0BAQsFAAOCAQEARovBdnu8SDqTLRKBPGjq6mx42mvlbuC7UF9b8XSknBlp8dv1
awp1HA15bIbK7LO+S50GI1hEunA0QXm8X3pjxcBn9WHCJ1YsxHqoohAvbZPZhfdi
4i64rj04DgBgYo0tsf4AM3Ye8twhjigseuJWlTyGieZ9IWUA2Wam5pL4/1kC+RmO
rOR54A0XTdisBH/UMTwVm+mdMDSvbTFxAQ84ZG6dVzSgJ0nxb6xUf3Bhlr/rg07O
UiRg9VQz7DRU20awIWEMZQshxovuYXaDEOM90Ygny0O//g73toA9X7jrTtVmnzPf
4Q+ueWWSLR39KQ8aj90nrkV5yhUytZmUzb/Ucg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:04 2026 by rpki-client