This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/QECGfDIoCSj4LzjLQQdwmXlbEmA.asa
File:                     QECGfDIoCSj4LzjLQQdwmXlbEmA.asa (raw, json)
Hash identifier:          LuusKMGlqqCvWP9T1nZZglFPg7/PbxCRvBMErVfFg/E=
Subject key identifier:   40:40:86:7C:32:28:09:28:F8:2F:38:CB:41:07:70:99:79:5B:12:60
Certificate issuer:       /CN=372373e7a84406ceab5f7aa915234c93d8b88e91
Certificate serial:       019BFADEE5A98CAF889ED9CB3B2D1D74E3B3
Authority key identifier: 37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/QECGfDIoCSj4LzjLQQdwmXlbEmA.asa
Signing time:             Mon 26 Jan 2026 15:14:30 +0000
ASPA not before:          Mon 26 Jan 2026 15:14:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51214
Providers:                AS: 6789
                          AS: 28761
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:de:e5:a9:8c:af:88:9e:d9:cb:3b:2d:1d:74:e3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372373e7a84406ceab5f7aa915234c93d8b88e91
        Validity
            Not Before: Jan 26 15:14:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4040867c32280928f82f38cb41077099795b1260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:96:26:ae:ee:56:50:63:6e:29:57:6f:93:
                    03:20:65:ec:d5:0f:4e:7a:3f:41:be:a2:d9:e9:c9:
                    74:92:50:dc:6d:9a:0a:dd:0f:e8:51:7d:20:e0:86:
                    61:3d:ed:df:bc:ed:ce:23:52:87:e1:98:ef:d8:5a:
                    2e:2b:3b:ec:7e:e7:2b:1e:23:7f:8a:ac:8f:7c:cc:
                    ad:34:15:5f:ba:39:6f:d2:a8:37:86:09:71:9c:53:
                    9c:ec:26:e1:e2:25:58:3a:2b:89:58:e2:a5:ef:8c:
                    0a:7a:9d:b0:d3:79:27:ca:75:a1:7b:18:45:3d:eb:
                    ec:2c:b5:0c:40:79:4a:e8:c3:5d:54:86:b2:6e:64:
                    28:e3:ad:83:69:30:cd:38:37:27:5e:48:04:bb:10:
                    5f:ce:dd:3d:f9:97:c5:2b:33:6f:38:c4:3c:cd:eb:
                    c9:e8:72:80:5b:fd:8c:74:38:a6:81:86:1a:47:75:
                    03:f6:3c:62:14:83:63:70:e0:c9:f7:b4:2d:af:80:
                    8e:fc:17:6d:73:b3:00:32:93:de:5c:bc:5a:3d:c9:
                    40:a4:9c:5e:63:71:ef:a1:8b:0e:a5:56:b2:43:92:
                    48:9b:b8:fc:5e:4d:fc:8a:a0:4b:af:fc:bf:11:27:
                    96:25:4b:8a:87:3d:ee:92:44:ec:ec:e4:38:d5:61:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:40:86:7C:32:28:09:28:F8:2F:38:CB:41:07:70:99:79:5B:12:60
            X509v3 Authority Key Identifier:
                keyid:37:23:73:E7:A8:44:06:CE:AB:5F:7A:A9:15:23:4C:93:D8:B8:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyNz56hEBs6rX3qpFSNMk9i4jpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/QECGfDIoCSj4LzjLQQdwmXlbEmA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b3a4c6-0ce1-4954-b936-7a1ec5d49d33/1/NyNz56hEBs6rX3qpFSNMk9i4jpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51214

    Signature Algorithm: sha256WithRSAEncryption
         47:df:59:84:d2:40:9e:44:95:54:ca:3c:90:10:3f:4d:11:00:
         07:ae:c9:ff:e7:08:48:5e:08:c3:99:6b:55:e6:71:50:68:06:
         d9:4c:5f:ac:1e:11:54:f8:68:db:ba:37:54:45:1f:99:ec:6b:
         83:d2:b2:60:ce:aa:4c:08:46:3a:bc:cf:1f:d6:3d:e5:99:38:
         71:58:20:2c:56:30:49:77:8b:a2:e7:96:b9:48:8a:a8:47:e3:
         d9:b3:fd:66:ea:35:72:3f:9e:46:81:44:d4:7b:53:5f:28:98:
         1a:77:5a:9f:e4:d4:2c:40:27:56:5e:82:00:e3:7f:e2:30:22:
         2e:fd:09:0c:52:2c:14:b4:5b:64:fd:91:0b:21:b2:68:db:7b:
         ff:7e:f5:5a:f7:ee:ed:c1:3d:13:82:f9:71:fb:69:03:2f:6e:
         13:52:88:69:dd:ca:bb:8f:f3:49:4d:e4:60:31:c6:26:14:cf:
         de:7d:64:6f:09:14:68:e0:01:3e:26:a8:71:d6:fc:01:67:70:
         ed:16:b6:de:be:52:f5:a7:4b:84:ee:64:ac:79:01:db:74:de:
         0e:0f:0e:71:aa:b8:01:da:5f:2c:94:ed:da:98:84:b2:0e:60:
         74:f7:c2:0c:8f:6a:0c:43:a2:e2:dd:68:e4:5f:05:a5:dd:75:
         a2:0d:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:50 2026 by rpki-client