This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/HqQ6xbwqnG9mT0EefJObAdnuv-Q.asa
File:                     HqQ6xbwqnG9mT0EefJObAdnuv-Q.asa (raw, json)
Hash identifier:          2GZJV0vGx0Jo/PRbmmD5QB1FtkJu+p8v3EZ1ENHyo2I=
Subject key identifier:   1E:A4:3A:C5:BC:2A:9C:6F:66:4F:41:1E:7C:93:9B:01:D9:EE:BF:E4
Certificate issuer:       /CN=55d25170750c4dbc2717b0c1771c8d8e45472318
Certificate serial:       019BF869EDF4ED4440DF1772B14C4EE78CF4
Authority key identifier: 55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/HqQ6xbwqnG9mT0EefJObAdnuv-Q.asa
Signing time:             Mon 26 Jan 2026 03:47:30 +0000
ASPA not before:          Mon 26 Jan 2026 03:47:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203168
Providers:                AS: 151194
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:69:ed:f4:ed:44:40:df:17:72:b1:4c:4e:e7:8c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d25170750c4dbc2717b0c1771c8d8e45472318
        Validity
            Not Before: Jan 26 03:47:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ea43ac5bc2a9c6f664f411e7c939b01d9eebfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:da:df:d0:fc:96:58:d0:e0:ae:ff:09:66:
                    ea:88:40:75:86:c6:a9:27:0d:0f:73:45:81:45:37:
                    d2:a5:6e:1b:c5:6c:cf:52:af:78:89:dd:8d:b5:a8:
                    d0:85:89:98:92:66:08:86:77:0e:2d:68:97:b2:bc:
                    b5:da:fa:8c:85:ec:77:78:1f:72:ee:ba:77:4a:b2:
                    a5:f2:2f:1e:1d:9a:b6:a0:bf:e3:0c:7f:1e:69:cf:
                    c6:ed:67:f1:6b:21:e4:2b:94:e7:26:ca:07:a4:f1:
                    d1:f7:a9:1c:fb:01:23:d6:76:b3:8f:f6:7b:f9:63:
                    e0:46:d7:b3:67:c0:f1:73:a2:b2:bd:af:c5:52:38:
                    e3:bc:c0:4e:cf:09:57:11:da:aa:7d:1c:71:29:91:
                    66:6f:38:f4:76:df:42:7d:8a:26:e0:d5:d6:05:fc:
                    f6:9e:b6:a7:37:1d:89:69:8c:48:73:28:65:11:1d:
                    46:d1:f8:74:e8:25:0c:86:be:b2:84:a1:1f:f6:c9:
                    69:51:45:5b:ef:48:78:a8:fd:5b:45:e0:17:01:67:
                    ff:5b:e0:4c:3d:b8:a9:d0:f7:24:cc:04:61:68:56:
                    e4:8b:30:51:4e:8b:24:ac:d0:0f:31:e3:54:81:a4:
                    b9:09:ab:ca:d6:b5:ae:75:3b:e2:71:ca:c4:f5:30:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A4:3A:C5:BC:2A:9C:6F:66:4F:41:1E:7C:93:9B:01:D9:EE:BF:E4
            X509v3 Authority Key Identifier:
                keyid:55:D2:51:70:75:0C:4D:BC:27:17:B0:C1:77:1C:8D:8E:45:47:23:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdJRcHUMTbwnF7DBdxyNjkVHIxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/HqQ6xbwqnG9mT0EefJObAdnuv-Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f04885-7b2f-4117-bed8-6cfeb5eebf31/1/VdJRcHUMTbwnF7DBdxyNjkVHIxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203168

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:16:01:72:9c:12:02:91:4b:0a:2c:fa:46:72:1e:c3:7b:
         66:2c:93:ed:c6:36:3e:53:5a:8f:fa:dc:88:ad:08:56:0a:4e:
         89:59:e3:83:46:f4:3f:26:3a:10:82:3f:9b:4d:76:7b:63:25:
         07:b8:28:20:a9:71:9e:bc:80:dc:c2:cb:2d:f9:d6:87:ad:7d:
         c7:6b:72:b7:76:9d:71:29:5f:2f:1e:4c:d8:e3:69:0c:f1:ff:
         63:d9:cb:98:90:e2:d4:14:77:cb:ba:55:10:21:a6:0b:5d:df:
         c3:61:43:a8:9c:43:7e:4c:53:16:18:b6:f0:f7:4f:50:3d:98:
         aa:f3:65:e1:06:a9:76:1c:60:91:1e:4f:62:8c:f3:a8:d7:7a:
         ff:03:2c:35:cd:c0:c3:32:f0:a4:5d:2f:d8:33:07:3c:1f:8a:
         84:ff:a4:f6:c8:fc:8b:36:55:c6:91:51:b0:43:8e:70:15:4d:
         ca:ff:c2:1a:82:9c:da:91:06:1f:c2:a1:77:c5:4f:6f:41:4a:
         f8:36:be:e8:51:c7:8a:1e:92:d4:a4:ad:66:c6:2b:9f:28:32:
         47:e8:11:f0:d1:fb:ca:04:3e:cc:e0:f5:88:81:7a:78:0f:ae:
         e1:4b:3a:e8:6e:7d:77:44:5d:ab:2c:d6:3d:6c:b0:90:6d:49:
         36:9a:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:41:45 2026 by rpki-client