This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/SGu81fH83a4fFDwRpua7wHVhFss.asa
File:                     SGu81fH83a4fFDwRpua7wHVhFss.asa (raw, json)
Hash identifier:          B831/IgiOq8ulfxYCKZSvT6C3gOL+b/4KMi6pZwM8zY=
Subject key identifier:   48:6B:BC:D5:F1:FC:DD:AE:1F:14:3C:11:A6:E6:BB:C0:75:61:16:CB
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019C1A7C29004C6DBA27B82987524C5E868C
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/SGu81fH83a4fFDwRpua7wHVhFss.asa
Signing time:             Sun 01 Feb 2026 18:34:30 +0000
ASPA not before:          Sun 01 Feb 2026 18:34:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203698
Providers:                AS: 30781
                          AS: 47160
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:7c:29:00:4c:6d:ba:27:b8:29:87:52:4c:5e:86:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Feb  1 18:34:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=486bbcd5f1fcddae1f143c11a6e6bbc0756116cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7c:94:a9:1d:d8:93:52:d0:ba:c3:f5:0d:95:
                    92:93:f8:20:01:31:4d:ac:b5:e6:75:e5:bc:f6:a5:
                    ca:4e:5e:13:94:d7:40:89:60:08:dd:7c:00:5b:69:
                    7b:e6:54:c2:4b:d3:94:a0:3a:57:99:64:d8:3b:18:
                    a9:15:aa:fb:22:34:bc:c0:a4:dc:10:89:33:13:f7:
                    b4:6c:eb:44:ce:e3:cb:85:c5:a3:93:84:82:b8:de:
                    0d:36:20:c0:86:6c:07:3c:80:dc:f1:9a:2c:ae:c8:
                    c5:62:45:05:d6:5d:86:8e:09:f0:d1:0e:27:81:f3:
                    44:93:19:f5:78:24:4b:6f:7a:77:19:b4:c5:58:93:
                    69:8c:39:95:da:40:81:b6:78:56:e8:91:46:c8:68:
                    6a:fe:8b:0f:d5:b3:54:5d:33:d1:96:05:aa:1a:3f:
                    e3:63:c8:d5:b6:76:c1:bd:72:03:1e:83:4f:e6:5f:
                    0e:d6:5f:05:e0:9b:80:d9:b0:60:99:48:12:30:f9:
                    99:69:d2:28:78:9d:45:b5:b9:6f:8d:c8:58:31:c0:
                    58:17:49:4f:35:4b:64:5d:c5:98:61:dd:8a:24:9b:
                    17:08:5b:96:c8:a8:71:58:07:d3:a1:14:1b:31:ec:
                    a8:75:16:e0:b8:72:15:ce:a8:be:a6:05:ed:64:d8:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6B:BC:D5:F1:FC:DD:AE:1F:14:3C:11:A6:E6:BB:C0:75:61:16:CB
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/SGu81fH83a4fFDwRpua7wHVhFss.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203698

    Signature Algorithm: sha256WithRSAEncryption
         bf:41:e0:99:a4:15:b2:cc:16:b6:c6:20:82:af:9a:4b:b3:de:
         67:91:a0:34:12:b6:d3:04:49:e0:41:50:e9:ef:62:9e:1b:f9:
         40:87:13:87:69:c1:b5:54:b7:01:29:e9:0e:43:88:f6:05:5f:
         90:7f:d3:f2:be:3a:0d:4a:44:93:d5:2b:d9:7c:c0:09:35:1f:
         87:72:00:8e:5b:58:54:77:90:8e:8c:d4:57:99:c1:23:5d:07:
         d5:56:49:19:a5:a0:f3:5c:d9:e3:d5:ce:67:f3:24:16:4c:7c:
         5e:d6:78:88:31:02:82:90:5c:03:2a:67:d6:28:ff:53:c3:2a:
         8f:1e:e4:db:c3:58:70:2a:e4:43:97:0b:64:da:d9:b4:76:03:
         0e:35:72:ef:de:50:15:ca:0d:9d:25:a2:db:a8:e3:3d:84:67:
         9d:7d:f8:62:6d:bf:ca:ec:a5:81:1c:5f:2a:0a:c1:b5:bf:4f:
         0f:4a:5d:0b:72:14:ca:39:86:d2:d4:23:2e:ac:e0:d3:32:cf:
         9d:47:bf:b2:f4:00:2b:73:75:b5:86:66:ca:43:81:6f:04:d3:
         20:ee:26:de:d0:a6:44:ec:46:96:2f:4a:82:2e:86:32:e2:2a:
         3f:54:70:74:53:20:f6:4b:0f:34:4a:47:2a:c3:5b:15:e5:a0:
         81:a3:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:50 2026 by rpki-client