This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa
File:                     e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (raw, json)
Hash identifier:          ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=
Subject key identifier:   7B:B2:EF:CF:B1:2E:18:3B:26:34:52:21:45:BC:2F:CA:78:FD:C5:36
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       019BFAEBB6F8ACB253FFDBC0F824DF5D6AAD
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa
Signing time:             Mon 26 Jan 2026 15:28:30 +0000
ASPA not before:          Mon 26 Jan 2026 15:28:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203898
Providers:                AS: 1273
                          AS: 2860
                          AS: 8220
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:eb:b6:f8:ac:b2:53:ff:db:c0:f8:24:df:5d:6a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jan 26 15:28:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bb2efcfb12e183b2634522145bc2fca78fdc536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:00:99:38:ff:d6:c5:ee:6f:4c:40:2f:46:
                    7d:6e:19:8a:78:f7:90:ff:d3:ad:be:40:83:b4:1f:
                    d2:2a:a4:ef:78:f4:16:78:46:ee:f6:d7:57:1b:bc:
                    41:fe:3e:dc:68:09:6c:cb:f7:01:40:93:12:9d:4f:
                    2c:fa:01:f8:93:02:a6:9c:6a:42:58:55:8e:b4:6d:
                    65:02:c8:fc:43:3d:40:12:dd:fd:9e:98:a9:23:46:
                    f6:71:81:0f:fb:ac:cc:35:15:6e:32:a6:27:67:30:
                    35:e9:bc:d1:f6:cf:15:78:99:d7:19:01:27:f2:3c:
                    68:d4:0d:80:a1:9a:50:02:61:b2:13:65:7f:89:54:
                    c1:31:99:a2:67:64:a1:32:f7:ca:ef:a6:77:10:9e:
                    f3:d0:64:e8:af:ec:39:7c:92:af:a0:95:29:1d:20:
                    9c:01:6b:7d:84:2f:a0:e6:74:c1:c8:76:d2:e9:cd:
                    d2:0a:ff:df:51:9d:ea:5d:c0:6c:9b:8c:c2:c5:18:
                    ea:ba:83:d6:01:cb:87:e0:a4:05:be:e7:37:d0:78:
                    a7:52:ca:a4:57:72:2e:c9:b8:9c:65:98:bb:09:cd:
                    a1:9f:2f:76:f2:af:ea:e7:ca:06:12:51:48:68:35:
                    19:72:e2:d9:a4:cf:41:5b:1b:9f:02:a0:8a:8e:eb:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:EF:CF:B1:2E:18:3B:26:34:52:21:45:BC:2F:CA:78:FD:C5:36
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203898

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:1f:a2:6a:95:1f:d0:e4:03:81:af:75:3c:de:3c:79:75:
         e3:06:54:0c:65:e8:a0:10:42:3d:5c:c2:3b:de:ad:39:13:08:
         9f:b2:d1:ae:44:ea:69:38:67:0f:fa:58:f5:ac:ab:fe:e2:c6:
         c2:58:a9:ee:82:9a:da:69:3a:23:0a:b6:85:63:96:bc:0d:dd:
         3f:59:7b:6d:8d:46:c8:45:3d:a5:eb:d7:6f:3f:6e:ab:7b:b6:
         ff:f6:c9:4b:3d:e9:f4:dc:40:35:e2:04:41:21:75:b3:2f:4f:
         d9:88:85:66:97:8c:e0:b6:d7:a8:4a:b7:ab:8f:7a:56:78:62:
         75:e2:84:a4:5a:cd:80:1c:7b:20:c2:e9:0e:c4:95:a4:ce:40:
         39:b9:9a:af:25:89:4e:c9:cc:8f:df:c0:cc:70:f1:8b:53:f1:
         46:a0:a2:f3:d9:d0:e5:32:03:4c:c0:cc:01:5f:e3:c0:73:81:
         52:69:06:05:fe:42:07:0f:f2:07:4a:73:51:34:4c:a8:47:66:
         00:c5:a7:4b:9f:ee:38:64:e9:15:7e:40:75:3c:9c:31:d7:16:
         1c:22:6c:89:a3:e2:50:13:fa:77:bc:37:92:e6:5a:69:64:d2:
         7f:52:d2:f2:64:58:44:e1:ed:dd:16:f2:94:9c:bb:bc:6c:92:
         93:fd:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:57 2026 by rpki-client