This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/thQigH6iIZFTzygl3Rx0-Gq-vvI.asa
File:                     thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (raw, json)
Hash identifier:          0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=
Subject key identifier:   B6:14:22:80:7E:A2:21:91:53:CF:28:25:DD:1C:74:F8:6A:BE:BE:F2
Certificate issuer:       /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial:       019C0399B2A55B165005F38E686FCF447940
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/thQigH6iIZFTzygl3Rx0-Gq-vvI.asa
Signing time:             Wed 28 Jan 2026 07:55:30 +0000
ASPA not before:          Wed 28 Jan 2026 07:55:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214909
Providers:                AS: 47272
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 212514
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:03:99:b2:a5:5b:16:50:05:f3:8e:68:6f:cf:44:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
        Validity
            Not Before: Jan 28 07:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b61422807ea2219153cf2825dd1c74f86abebef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:7f:03:d2:75:27:82:72:15:b3:aa:6a:f8:
                    14:65:55:e5:01:00:56:22:2a:88:3c:e9:a3:91:fc:
                    18:f4:ea:38:30:67:99:14:8c:81:9f:59:e2:bc:91:
                    37:6c:ef:b2:f0:4b:98:c4:99:7e:61:4c:5e:d4:81:
                    50:13:f7:b4:39:25:b6:b5:ac:cc:a7:31:9d:46:17:
                    58:65:da:ee:25:e2:3f:0a:51:8f:20:ac:76:73:d2:
                    6e:0e:d2:9c:5d:df:ad:61:dc:68:94:3b:9a:34:cd:
                    e9:e4:3c:b8:d5:39:d7:e4:e2:07:a8:b5:80:63:30:
                    98:e5:bd:3f:7f:24:ef:6f:51:bd:28:9d:cd:39:d1:
                    2f:e8:e1:6f:c0:96:80:66:98:f2:74:f1:bc:1f:b7:
                    8a:6f:fc:80:ac:ef:9a:af:1a:c2:dc:15:65:cd:b1:
                    c3:31:b3:3d:d9:69:be:c9:ed:9f:71:20:3c:6e:f4:
                    d9:f9:ff:88:73:47:9f:d9:57:84:e8:db:68:21:b6:
                    2a:b8:35:42:5c:5d:d8:76:4c:5a:c9:65:dd:d0:56:
                    d6:aa:7d:7b:de:ab:25:dc:18:37:d1:6c:3c:e4:25:
                    db:56:3c:78:51:1a:15:1a:56:1b:0f:d0:32:2d:1f:
                    26:a1:e2:29:96:da:62:1a:20:c9:79:eb:ad:e5:4c:
                    f4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:14:22:80:7E:A2:21:91:53:CF:28:25:DD:1C:74:F8:6A:BE:BE:F2
            X509v3 Authority Key Identifier:
                keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/thQigH6iIZFTzygl3Rx0-Gq-vvI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214909

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:2c:f9:d1:0a:27:cc:aa:b4:11:4c:ad:ec:7d:ca:56:f3:
         48:0d:52:a4:09:be:2a:63:bf:d1:01:3c:06:51:a2:05:33:d8:
         0f:12:62:ae:f9:9e:9d:d4:13:28:60:06:7e:cb:35:3e:03:a4:
         2d:56:87:65:9a:d6:0f:d3:53:ea:0c:4e:3f:6f:21:31:cf:3f:
         3c:41:ac:4b:e0:68:dc:3e:cc:8d:df:c1:ce:7c:cb:a0:e5:2f:
         b6:61:73:ff:42:75:df:4c:f7:1b:3a:e5:f8:cb:54:c0:09:49:
         5b:71:3b:e9:d3:0a:7d:57:d4:be:b0:bb:22:71:21:30:1b:5c:
         f4:dd:a3:95:c5:88:80:07:ce:5f:dc:40:3e:f7:9e:35:78:75:
         95:73:a6:a0:59:12:83:89:da:69:59:5f:b8:d6:9f:af:06:87:
         86:38:51:e1:fb:bb:e9:e6:41:ec:c8:c2:02:c9:dc:03:cd:80:
         33:81:ab:ee:01:ed:68:36:2c:f6:4f:f6:18:2a:e1:a0:34:cb:
         c7:56:6b:c1:5e:a0:b0:1d:e0:4f:1c:84:78:86:ae:08:bd:a1:
         fb:bb:b6:ac:96:a0:12:d6:83:aa:0a:b5:c4:8b:fc:d8:9f:e1:
         45:54:0e:39:c8:8d:f7:c8:4d:0a:d5:83:b2:b1:9f:3e:dc:5c:
         0c:cc:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:56 2026 by rpki-client