This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/faebMvBKgNAhcALx7bgmvRqtTSU.asa
File:                     faebMvBKgNAhcALx7bgmvRqtTSU.asa (raw, json)
Hash identifier:          3/Gz5gkhRQIs39smIrzuVZyy8NlVTqFUelM9l0g73UM=
Subject key identifier:   7D:A7:9B:32:F0:4A:80:D0:21:70:02:F1:ED:B8:26:BD:1A:AD:4D:25
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       019C19E519276B5A8959D9FBF01621F87F70
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/faebMvBKgNAhcALx7bgmvRqtTSU.asa
Signing time:             Sun 01 Feb 2026 15:49:30 +0000
ASPA not before:          Sun 01 Feb 2026 15:49:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48014
Providers:                AS: 49581
                          AS: 58212
                          AS: 60068
                          AS: 197071
                          AS: 201814
                          AS: 213683
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:19:e5:19:27:6b:5a:89:59:d9:fb:f0:16:21:f8:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Feb  1 15:49:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7da79b32f04a80d0217002f1edb826bd1aad4d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:22:67:73:f2:8c:c2:b6:e0:ec:19:86:5c:a5:
                    9c:f2:1e:74:c9:ac:07:99:cd:4d:fd:28:ec:1a:34:
                    09:9b:82:dd:cc:99:40:fc:bc:42:9f:bb:6a:81:c9:
                    eb:33:30:03:f7:d8:e5:10:8b:52:03:77:32:d6:bb:
                    b2:ac:dd:46:b8:5f:83:42:c4:f5:3e:a0:f6:5f:ca:
                    56:eb:90:0b:86:7d:39:7a:36:11:33:16:5a:ab:48:
                    f5:0d:20:a9:42:18:9b:7f:e1:81:8d:af:13:ab:ec:
                    93:26:fb:2d:6a:b0:4c:fb:60:cd:42:4c:21:f7:0d:
                    08:a7:90:73:59:ef:df:d3:84:ad:87:f5:d1:f6:c8:
                    64:dd:6e:c7:04:14:d7:4c:38:2f:c7:ce:af:02:dc:
                    d4:d1:f0:c1:bc:7b:90:3a:eb:10:a9:86:f5:ec:3a:
                    60:14:e3:0e:63:09:c6:cb:f4:ba:03:90:54:fb:d4:
                    cf:0b:fa:a3:87:6c:fb:b2:71:78:8f:72:74:64:70:
                    a1:3e:37:86:54:40:f7:d1:12:ad:d6:c7:c5:4d:4f:
                    10:9b:05:55:97:d6:9c:b8:45:32:7b:d2:a5:b5:c3:
                    13:73:df:fa:74:47:45:30:5a:b1:95:46:11:62:5c:
                    55:b4:55:13:5c:9e:b7:a1:59:7c:a5:61:ce:5b:c6:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A7:9B:32:F0:4A:80:D0:21:70:02:F1:ED:B8:26:BD:1A:AD:4D:25
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/faebMvBKgNAhcALx7bgmvRqtTSU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48014

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:16:ae:09:6c:8e:60:c0:d8:2b:31:02:95:3a:7e:a7:40:
         93:d3:ff:77:58:db:ef:15:3d:ee:ca:38:94:ed:82:25:4f:c6:
         88:11:01:ac:11:6d:08:41:e6:20:34:9e:e5:9a:02:3f:29:83:
         d7:ee:28:b2:9e:33:2e:2f:cb:a2:d1:fe:7d:4f:6e:4a:d8:74:
         6d:29:05:4c:32:be:b1:25:07:22:0b:fa:89:ec:17:3b:e6:d0:
         19:77:22:36:14:ac:49:c5:a9:80:e7:1a:fe:d3:ca:7e:c8:fc:
         7c:2c:b9:dd:f4:02:da:2e:84:e0:29:91:8c:93:ae:f0:13:40:
         49:1b:61:bb:fd:4a:0a:c5:c0:16:70:c4:5e:7f:51:d1:ff:98:
         6c:6f:d7:d4:c1:42:f5:1d:ae:2e:2e:f9:35:bd:7d:82:40:78:
         32:6e:f7:13:9e:29:71:a3:30:16:d2:63:40:b1:03:98:1a:0a:
         f2:40:48:98:68:bc:bb:a2:94:e1:68:e6:15:1b:a7:32:f8:c1:
         d8:68:24:be:74:6c:17:f4:8e:16:46:71:66:ab:bc:96:e4:4e:
         d5:a3:17:6e:e2:74:aa:ab:dc:41:98:95:18:48:1b:c4:ee:fc:
         45:e8:7d:7b:36:57:5f:54:92:b9:9e:58:f0:c8:70:ff:bd:d0:
         eb:18:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:51 2026 by rpki-client