This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/SbS8mmNslh-rWLs0ojFfHWzQpoY.asa
File:                     SbS8mmNslh-rWLs0ojFfHWzQpoY.asa (raw, json)
Hash identifier:          ZSdsZsIyvD25lf4oTn6JdmcR96mot+WcSyDusNxTMqs=
Subject key identifier:   49:B4:BC:9A:63:6C:96:1F:AB:58:BB:34:A2:31:5F:1D:6C:D0:A6:86
Certificate issuer:       /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial:       019C1A7C28AE3CB000F6EFBC527B75A79367
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/SbS8mmNslh-rWLs0ojFfHWzQpoY.asa
Signing time:             Sun 01 Feb 2026 18:34:30 +0000
ASPA not before:          Sun 01 Feb 2026 18:34:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47160
Providers:                AS: 174
                          AS: 3257
                          AS: 6453
                          AS: 6461
                          AS: 9002
                          AS: 62000
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:7c:28:ae:3c:b0:00:f6:ef:bc:52:7b:75:a7:93:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
        Validity
            Not Before: Feb  1 18:34:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=49b4bc9a636c961fab58bb34a2315f1d6cd0a686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:ef:f4:f0:44:29:a7:1f:23:2d:91:b9:7f:
                    1f:84:a7:f1:62:7c:cd:72:cd:a4:57:84:61:9d:f8:
                    92:41:16:3b:34:f9:bf:7c:6a:fb:0d:65:02:07:03:
                    ba:1c:9d:44:a5:d0:00:68:7f:ec:3e:46:c9:b1:cb:
                    72:36:4d:47:35:ad:76:97:2e:08:2c:33:89:d7:20:
                    30:9e:3b:9a:75:9d:73:86:5f:c6:b1:1e:8c:b6:9a:
                    16:58:c8:d4:01:2a:a5:f5:95:e9:db:f8:5b:0d:b2:
                    ea:4e:73:31:45:ba:90:dc:b9:9f:96:f2:c3:ca:4f:
                    a1:a5:8f:6f:34:89:82:61:39:9e:10:46:fb:29:27:
                    75:cf:1a:f8:f1:57:5d:0c:6f:e3:95:f9:c4:9b:04:
                    3c:67:6c:40:e4:09:32:f8:ff:21:cf:b5:73:6f:09:
                    3f:27:44:4f:03:fa:5f:f4:7a:df:a2:11:b2:f8:06:
                    fb:39:ca:2f:01:9b:8a:d1:87:92:b7:f6:e3:28:2e:
                    66:b6:08:32:9d:05:85:92:ad:6e:71:35:29:73:6e:
                    2f:f1:3a:62:9c:ff:17:df:10:7c:b5:9e:6d:5f:2e:
                    a2:60:56:97:54:97:98:6c:bb:82:12:08:91:22:63:
                    91:28:8b:ed:94:fa:e9:05:43:a1:64:25:93:b9:d8:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:BC:9A:63:6C:96:1F:AB:58:BB:34:A2:31:5F:1D:6C:D0:A6:86
            X509v3 Authority Key Identifier:
                keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/SbS8mmNslh-rWLs0ojFfHWzQpoY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47160

    Signature Algorithm: sha256WithRSAEncryption
         64:ed:8a:22:aa:97:b9:4d:7f:7e:d8:50:00:16:0a:cf:09:17:
         0e:fe:ba:b2:6f:d9:36:31:47:33:cc:44:65:d9:9c:9b:28:0d:
         c4:c3:0a:cc:46:37:d7:d5:26:db:be:42:ff:38:e1:68:d9:f4:
         47:35:b5:32:95:8b:d7:72:72:d8:ec:d4:95:2a:8e:e1:99:bf:
         3a:c2:d4:32:d6:a0:dc:58:51:31:3a:56:23:1f:2a:d8:93:ab:
         2e:1f:2e:ad:9c:3b:b2:0f:ea:ff:e3:c3:39:65:5b:cf:48:bb:
         0e:c7:89:22:70:cb:9d:83:2c:83:be:80:5a:4e:43:87:35:fc:
         6f:89:13:3f:c2:5c:10:af:26:b3:da:8d:95:8c:e9:99:da:34:
         c2:7e:e9:6f:e9:25:36:6d:15:b2:ab:f7:d7:c2:2c:a1:90:78:
         86:ad:fa:7a:2e:21:e7:95:e4:b4:38:f0:31:2c:7d:ae:11:8f:
         be:33:36:3a:f0:22:5e:9f:30:e7:62:6d:91:bd:2f:c3:17:2c:
         4f:0d:84:6d:8f:5d:1d:18:56:2d:cd:61:53:67:77:b9:a2:ab:
         cc:97:3c:53:41:12:fc:61:68:56:e1:42:10:dc:e5:aa:2f:ce:
         5e:30:5c:4e:89:de:b9:50:1e:40:3c:df:ef:d7:29:34:e9:b3:
         4b:2c:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:57 2026 by rpki-client