This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/SGTfk5RPZJW3hTGfHsKKtMd3MoQ.asa
File:                     SGTfk5RPZJW3hTGfHsKKtMd3MoQ.asa (raw, json)
Hash identifier:          6L5TAjX3FzF9MErfoA0fYw7TfgZgbsqd4eDxXEUCEwM=
Subject key identifier:   48:64:DF:93:94:4F:64:95:B7:85:31:9F:1E:C2:8A:B4:C7:77:32:84
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019C425B1B72D59421DF84910ED92AB7EF9D
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/SGTfk5RPZJW3hTGfHsKKtMd3MoQ.asa
Signing time:             Mon 09 Feb 2026 12:23:12 +0000
ASPA not before:          Mon 09 Feb 2026 12:23:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 11967
                          AS: 41051
                          AS: 212895
                          AS: 214809
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:5b:1b:72:d5:94:21:df:84:91:0e:d9:2a:b7:ef:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Feb  9 12:23:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4864df93944f6495b785319f1ec28ab4c7773284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:60:62:39:87:1d:74:9c:a9:74:91:50:a5:
                    bc:98:91:0a:f1:a5:cf:90:9d:05:08:eb:6b:7d:5e:
                    70:f5:b7:77:20:6c:40:a9:04:7a:1f:f0:e5:c0:f3:
                    98:bd:a0:95:66:d2:0f:4c:b4:26:3a:03:fd:b4:c6:
                    fe:07:d8:b0:1c:1e:e7:39:8d:87:62:47:93:eb:76:
                    45:b9:84:f5:17:c5:bb:2c:36:05:26:db:65:8c:06:
                    da:89:dc:85:82:cb:36:6f:7b:bc:da:20:e4:2b:36:
                    5a:e4:8b:ed:fa:07:cb:5b:e0:eb:c0:b0:3b:24:30:
                    05:8e:cd:3f:2d:24:ea:a6:3b:c8:72:10:02:e1:98:
                    3b:b3:df:6c:74:b9:d0:f1:52:6a:45:0f:88:ad:27:
                    3f:e6:e0:aa:c4:4f:71:59:71:e1:62:30:56:59:69:
                    34:be:b1:2d:51:86:54:bc:c8:90:23:d7:b0:b3:99:
                    73:ef:58:f8:98:f9:56:04:27:ae:eb:d4:3a:b8:a0:
                    1b:76:40:01:d7:2d:3f:bf:1e:f9:85:fc:68:e2:55:
                    01:f1:8e:7b:fe:b7:c4:8e:82:1c:d1:6e:ba:81:04:
                    72:b9:13:fa:2d:1c:9d:38:5a:64:51:55:d9:32:3b:
                    c9:fd:ca:c4:02:6e:23:e3:8b:80:dd:bf:7e:b5:c5:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:DF:93:94:4F:64:95:B7:85:31:9F:1E:C2:8A:B4:C7:77:32:84
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/SGTfk5RPZJW3hTGfHsKKtMd3MoQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         b8:43:08:8a:cb:a1:ca:54:20:e3:7e:8e:1f:52:a1:16:22:fa:
         67:47:01:70:1a:a7:49:23:9c:99:75:f5:fe:a8:bd:13:2d:9f:
         6d:ce:a7:d2:0b:a3:e7:5e:8e:c0:95:cc:24:de:e1:e3:51:f3:
         82:ea:4c:8b:23:21:0b:4a:6f:da:cf:07:73:cb:a7:aa:e0:cf:
         87:f1:42:e1:6d:41:1e:2d:0d:0e:34:bb:d3:fa:a5:3a:e0:4b:
         fb:b3:5f:7f:7a:bf:18:f2:aa:7b:fc:64:4a:f5:1f:f2:11:b9:
         c9:04:09:a0:2d:3c:1e:06:d0:c6:85:85:3d:1d:03:84:88:71:
         65:20:cc:a0:86:5b:c2:e9:bf:f2:96:c7:94:08:c5:f2:52:e4:
         e2:67:fd:cc:28:c9:54:f7:67:c7:48:89:6c:d7:fc:bc:57:01:
         2e:12:a5:83:2d:99:85:df:d7:e6:45:e5:2e:4e:c2:b5:73:97:
         2f:4e:a4:58:aa:34:ab:29:0f:d5:55:b8:4d:f0:5c:02:3f:71:
         f3:ab:bb:85:ba:a3:64:79:95:d5:ba:08:32:99:28:f9:ee:5c:
         fa:f1:29:4f:be:61:6b:2c:41:3e:fd:74:67:b3:20:06:25:fe:
         e7:a3:a5:44:66:2a:35:5f:e9:e7:27:2e:90:99:7c:07:30:52:
         d6:86:be:1a
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAZxCWxty1ZQh34SRDtkqt++dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw
YjUxMjIwHhcNMjYwMjA5MTIyMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY0ZGY5Mzk0NGY2NDk1Yjc4NTMxOWYxZWMyOGFiNGM3NzczMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJgYjmHHXScqXSRUKW8mJEK8aXP
kJ0FCOtrfV5w9bd3IGxAqQR6H/DlwPOYvaCVZtIPTLQmOgP9tMb+B9iwHB7nOY2H
YkeT63ZFuYT1F8W7LDYFJttljAbaidyFgss2b3u82iDkKzZa5Ivt+gfLW+DrwLA7
JDAFjs0/LSTqpjvIchAC4Zg7s99sdLnQ8VJqRQ+IrSc/5uCqxE9xWXHhYjBWWWk0
vrEtUYZUvMiQI9ews5lz71j4mPlWBCeu69Q6uKAbdkAB1y0/vx75hfxo4lUB8Y57
/rfEjoIc0W66gQRyuRP6LRydOFpkUVXZMjvJ/crEAm4j44uA3b9+tcWtlQIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFEhk35OUT2SVt4Uxnx7CirTHdzKEMB8GA1UdIwQY
MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2
LWM4NjE1YTU0MGNkZC8xL1NHVGZrNVJQWkpXM2hUR2ZIc0tLdE1kM01vUS5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2LWM4NjE1YTU0MGNk
ZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxNFMA0GCSqG
SIb3DQEBCwUAA4IBAQC4QwiKy6HKVCDjfo4fUqEWIvpnRwFwGqdJI5yZdfX+qL0T
LZ9tzqfSC6PnXo7Alcwk3uHjUfOC6kyLIyELSm/azwdzy6eq4M+H8ULhbUEeLQ0O
NLvT+qU64Ev7s19/er8Y8qp7/GRK9R/yEbnJBAmgLTweBtDGhYU9HQOEiHFlIMyg
hlvC6b/ylseUCMXyUuTiZ/3MKMlU92fHSIls1/y8VwEuEqWDLZmF39fmReUuTsK1
c5cvTqRYqjSrKQ/VVbhN8FwCP3Hzq7uFuqNkeZXVuggymSj57lz68SlPvmFrLEE+
/XRnsyAGJf7no6VEZio1X+nnJy6QmXwHMFLWhr4a
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:32 2026 by rpki-client