This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/UPAqxfh3DVJwxpUXjiM9M8UNI6A.asa
File:                     UPAqxfh3DVJwxpUXjiM9M8UNI6A.asa (raw, json)
Hash identifier:          c42wwDGvS0oacLlYOE62P909TTqbzLeL8jdw4PO42z0=
Subject key identifier:   50:F0:2A:C5:F8:77:0D:52:70:C6:95:17:8E:23:3D:33:C5:0D:23:A0
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       019BFEDACAE16C35D5FF5AA5B7B0C0FA1CA0
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/UPAqxfh3DVJwxpUXjiM9M8UNI6A.asa
Signing time:             Tue 27 Jan 2026 09:48:30 +0000
ASPA not before:          Tue 27 Jan 2026 09:48:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44439
Providers:                AS: 39704
                          AS: 43366
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:da:ca:e1:6c:35:d5:ff:5a:a5:b7:b0:c0:fa:1c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Jan 27 09:48:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=50f02ac5f8770d5270c695178e233d33c50d23a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:00:b6:5c:32:a7:ff:67:7a:6a:ad:22:01:
                    d4:70:1b:e9:5b:f3:ed:ea:05:16:b4:0b:39:a1:8d:
                    d1:e8:2d:78:22:9e:4a:42:d7:3c:44:04:7d:3f:54:
                    76:41:c9:a9:d3:27:10:40:13:f7:1e:06:4a:93:84:
                    14:23:a3:85:8a:30:9e:e2:58:15:f6:ec:ba:a0:fe:
                    40:90:dd:b5:21:68:24:a7:33:e4:48:6a:94:d3:78:
                    70:f9:04:a3:1f:fa:c9:1e:c4:0a:87:49:9c:5a:93:
                    a3:01:b2:05:31:d8:8d:fb:1d:aa:7e:b7:cb:53:29:
                    78:64:49:01:17:9f:98:9e:fd:b4:9a:cb:2c:11:1a:
                    90:7e:bf:0f:be:18:d5:85:fb:4a:fc:1f:42:92:f0:
                    21:41:ee:16:37:68:ee:4b:77:f3:09:f9:d6:18:a4:
                    e6:8a:11:a3:73:cd:93:1c:8f:54:62:4a:d8:73:1f:
                    0a:7b:bb:9a:db:ea:5c:30:47:55:74:9b:16:c3:83:
                    55:3b:ae:30:1f:20:b5:38:2c:55:08:0b:86:44:e1:
                    09:77:0c:e2:21:a9:1e:24:b7:87:7a:2e:ec:cc:54:
                    1d:7e:5d:55:5a:a8:ed:f1:e6:a2:0a:69:55:d6:dc:
                    8f:7b:b9:d6:13:d2:cb:f4:ed:83:b6:73:ba:1f:8c:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:2A:C5:F8:77:0D:52:70:C6:95:17:8E:23:3D:33:C5:0D:23:A0
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/UPAqxfh3DVJwxpUXjiM9M8UNI6A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44439

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:ef:f4:ba:84:19:1f:56:a0:2b:63:86:95:ec:b2:70:71:
         ee:1a:70:6f:94:2e:87:ff:b7:43:68:fe:d9:57:ac:36:05:bc:
         4c:66:04:66:f3:d6:44:9d:de:85:ff:5e:1c:43:e9:e8:b0:57:
         c6:cf:35:ad:f0:27:a4:95:d8:27:2d:7b:f0:9a:fc:d0:b3:c7:
         b5:5b:9a:6f:dd:43:c1:2c:fb:35:de:d3:e6:cc:b4:e5:db:59:
         11:58:1f:77:54:e6:d6:09:30:7e:a0:dc:26:1b:e8:fb:45:30:
         dd:70:b8:7d:1f:bf:46:1b:7b:27:da:06:36:84:f9:39:c8:ed:
         30:f8:05:72:b8:78:d1:f3:c0:90:a8:3e:f0:87:95:9c:e8:9f:
         42:63:ce:00:d4:00:3e:a0:70:00:9c:32:8c:5e:07:56:5f:36:
         4b:3a:fd:ca:14:57:e9:c4:dc:ea:1e:b6:68:0e:e9:85:79:82:
         c7:d2:82:3b:c5:62:fc:62:ac:d3:44:6a:33:b9:d6:c4:ce:f3:
         0a:54:6d:32:43:29:c7:f2:38:bb:74:13:dd:70:dc:22:34:d9:
         d5:55:92:d9:90:78:6a:a5:70:8a:6e:bf:94:02:00:c7:c9:a4:
         ce:5b:c5:97:52:da:26:10:44:58:ae:75:12:01:93:9d:f1:c5:
         ad:4d:3a:e0
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZv+2srhbDXV/1qlt7DA+hygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5
ZTViM2UwHhcNMjYwMTI3MDk0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGYwMmFjNWY4NzcwZDUyNzBjNjk1MTc4ZTIzM2QzM2M1MGQyM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3EAtlwyp/9nemqtIgHUcBvpW/Pt
6gUWtAs5oY3R6C14Ip5KQtc8RAR9P1R2Qcmp0ycQQBP3HgZKk4QUI6OFijCe4lgV
9uy6oP5AkN21IWgkpzPkSGqU03hw+QSjH/rJHsQKh0mcWpOjAbIFMdiN+x2qfrfL
Uyl4ZEkBF5+Ynv20msssERqQfr8PvhjVhftK/B9CkvAhQe4WN2juS3fzCfnWGKTm
ihGjc82THI9UYkrYcx8Ke7ua2+pcMEdVdJsWw4NVO64wHyC1OCxVCAuGROEJdwzi
IakeJLeHei7szFQdfl1VWqjt8eaiCmlV1tyPe7nWE9LL9O2DtnO6H4zlNwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFDwKsX4dw1ScMaVF44jPTPFDSOgMB8GA1UdIwQY
MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt
ZWFmNjhiNTllNTk5LzEvVVBBcXhmaDNEVkp3eHBVWGppTTlNOFVOSTZBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5
LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCtlzANBgkqhkiG
9w0BAQsFAAOCAQEAMP/v9LqEGR9WoCtjhpXssnBx7hpwb5Quh/+3Q2j+2VesNgW8
TGYEZvPWRJ3ehf9eHEPp6LBXxs81rfAnpJXYJy178Jr80LPHtVuab91DwSz7Nd7T
5sy05dtZEVgfd1Tm1gkwfqDcJhvo+0Uw3XC4fR+/Rht7J9oGNoT5OcjtMPgFcrh4
0fPAkKg+8IeVnOifQmPOANQAPqBwAJwyjF4HVl82Szr9yhRX6cTc6h62aA7phXmC
x9KCO8Vi/GKs00RqM7nWxM7zClRtMkMpx/I4u3QT3XDcIjTZ1VWS2ZB4aqVwim6/
lAIAx8mkzlvFl1LaJhBEWK51EgGTnfHFrU064A==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:06 2026 by rpki-client