This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/4p-nv4z745RY5TKyxsUJtxM4YA8.asa
File:                     4p-nv4z745RY5TKyxsUJtxM4YA8.asa (raw, json)
Hash identifier:          o078G/TKMraQIFH2Pfyv2bb7MZ+l89fDUFx3WC9tvFk=
Subject key identifier:   E2:9F:A7:BF:8C:FB:E3:94:58:E5:32:B2:C6:C5:09:B7:13:38:60:0F
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019C1A7D12F6725894D97577BBF581AC8FBF
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/4p-nv4z745RY5TKyxsUJtxM4YA8.asa
Signing time:             Sun 01 Feb 2026 18:35:30 +0000
ASPA not before:          Sun 01 Feb 2026 18:35:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213873
Providers:                AS: 47160
                          AS: 62000
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:7d:12:f6:72:58:94:d9:75:77:bb:f5:81:ac:8f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Feb  1 18:35:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e29fa7bf8cfbe39458e532b2c6c509b71338600f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:1b:93:40:1a:68:e5:51:22:bb:4c:7b:a6:
                    42:c8:08:18:26:f7:b1:85:7d:de:43:09:8e:14:81:
                    84:0d:33:27:85:f2:59:fb:91:63:f4:5c:11:38:e2:
                    01:61:b0:79:1d:28:36:47:e5:93:02:0f:3e:12:19:
                    79:ee:da:48:fc:6f:06:f6:90:cf:4f:8e:2d:52:0e:
                    8d:81:e2:92:08:18:1a:40:01:af:28:62:5f:79:10:
                    30:32:ed:03:29:14:63:2d:45:8b:91:8a:82:6f:a2:
                    e5:83:92:b7:d6:e3:a7:31:a2:d3:ab:99:84:87:18:
                    bc:dc:67:9b:30:e1:63:14:5a:1b:15:0d:b7:77:05:
                    a3:67:0b:59:00:53:2f:b3:01:1d:9e:4f:99:df:44:
                    8b:2d:9e:e3:b9:7b:7c:d8:4d:e5:cf:a3:23:f0:3b:
                    9d:3f:16:52:bd:2b:2c:c0:a5:6c:7a:8b:a9:dd:01:
                    e1:b4:74:c6:97:0d:67:a1:2d:b2:d6:e7:d5:4d:fb:
                    e4:74:b3:a1:69:1f:bb:3d:85:e5:9f:0f:b0:94:7c:
                    3e:9a:8c:b6:d6:65:a9:0f:4b:8f:ab:d3:72:a3:f8:
                    11:08:5f:55:2c:ed:a9:57:5a:9f:05:40:a9:a1:ba:
                    0f:09:69:b5:45:b3:05:da:04:77:fc:4d:2e:c2:78:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9F:A7:BF:8C:FB:E3:94:58:E5:32:B2:C6:C5:09:B7:13:38:60:0F
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/4p-nv4z745RY5TKyxsUJtxM4YA8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213873

    Signature Algorithm: sha256WithRSAEncryption
         04:99:8c:63:6f:e4:b1:01:05:c2:9f:24:97:83:f8:70:c9:d8:
         43:4d:65:bf:22:b7:bb:e6:83:53:bc:23:3c:05:50:db:67:8b:
         33:fb:7a:a9:d7:5a:2d:58:5d:bd:4c:cc:84:40:70:a0:72:90:
         fb:65:d2:d2:c2:87:33:39:2f:4a:63:d9:50:73:3a:45:a5:b9:
         a9:a0:a4:cb:fd:b8:70:6e:89:92:90:29:23:8e:c7:9b:7e:fd:
         e0:91:e5:c4:32:1b:41:12:af:a7:f3:bc:99:44:fe:d2:4e:ad:
         85:10:da:25:f5:a2:e4:d7:6f:6a:bb:c1:1d:18:32:60:6d:d4:
         de:27:77:48:95:e8:0a:b0:05:55:4d:93:d4:6e:3c:1d:4c:0d:
         b1:bf:b9:0d:24:72:d0:30:60:c0:92:cc:6b:93:85:88:b4:21:
         4d:75:02:09:8e:85:b1:77:ea:58:c4:05:d1:d2:93:f2:61:4a:
         84:32:d9:49:fd:e0:8f:2f:d3:f6:02:e1:86:dd:38:d6:b4:b4:
         ae:d5:f5:76:9f:85:70:d6:77:83:47:6a:ee:2c:a1:b7:9b:22:
         99:3d:fa:10:0f:02:66:78:1a:6e:20:2b:5f:1b:fe:ad:23:68:
         c7:15:c0:d0:6f:f1:cb:7b:77:6c:b0:02:4e:bd:33:12:98:96:
         d7:4b:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:55 2026 by rpki-client