This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/WQHG1u9PCPjDbr0POILKlVvCtIo.asa
File:                     WQHG1u9PCPjDbr0POILKlVvCtIo.asa (raw, json)
Hash identifier:          BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=
Subject key identifier:   59:01:C6:D6:EF:4F:08:F8:C3:6E:BD:0F:38:82:CA:95:5B:C2:B4:8A
Certificate issuer:       /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial:       019C0FC0A9A26D4C78478AA3860263A77E14
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/WQHG1u9PCPjDbr0POILKlVvCtIo.asa
Signing time:             Fri 30 Jan 2026 16:33:30 +0000
ASPA not before:          Fri 30 Jan 2026 16:33:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207234
Providers:                AS: 174
                          AS: 2914
                          AS: 6695
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:c0:a9:a2:6d:4c:78:47:8a:a3:86:02:63:a7:7e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
        Validity
            Not Before: Jan 30 16:33:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5901c6d6ef4f08f8c36ebd0f3882ca955bc2b48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:ff:41:bc:fd:d4:bb:de:cc:ef:1f:56:bf:
                    17:61:9d:4c:fa:df:54:d5:2e:a5:4a:60:97:39:fb:
                    22:38:f1:ed:27:a9:95:f9:6f:c8:05:9a:e4:1f:2a:
                    9e:d8:c2:50:22:d3:ac:a8:12:67:ba:15:9a:a7:70:
                    06:eb:46:29:26:77:2d:95:0b:4e:2d:ac:af:9c:8c:
                    1f:66:2e:ce:e8:20:86:a4:42:85:88:e5:77:33:e7:
                    57:f0:58:6f:58:05:eb:88:a0:e0:24:41:33:38:7d:
                    1c:b0:c2:74:d9:ea:ca:d6:00:0f:64:25:a9:83:24:
                    7f:44:0a:12:c5:0b:6c:a0:2a:23:d9:52:a2:4a:38:
                    87:31:65:92:ab:aa:b1:8b:66:3c:8c:25:b0:ad:82:
                    67:1e:d1:4a:fe:39:08:60:40:9a:2c:81:dc:34:69:
                    c0:99:96:2f:d2:2f:a7:17:f2:61:75:87:55:e9:c7:
                    d5:8f:dc:95:f3:48:63:fd:71:fe:ef:91:01:05:6a:
                    01:45:f6:db:22:c8:fc:3d:2d:3c:e1:e8:f4:22:b9:
                    fa:f5:d4:46:ff:5d:e7:cb:1b:d3:e6:e6:ce:b1:09:
                    7d:77:c9:78:7d:4e:71:18:d1:28:a8:9d:fa:8d:30:
                    97:6c:6d:5c:68:a7:87:bf:91:a1:8f:8f:a4:22:6c:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:01:C6:D6:EF:4F:08:F8:C3:6E:BD:0F:38:82:CA:95:5B:C2:B4:8A
            X509v3 Authority Key Identifier:
                keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/WQHG1u9PCPjDbr0POILKlVvCtIo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207234

    Signature Algorithm: sha256WithRSAEncryption
         49:25:63:7c:99:52:b9:9c:3d:d9:e5:e9:07:0d:37:88:29:11:
         17:6c:83:94:e8:73:cf:1e:51:de:d6:60:09:b3:33:f3:38:e9:
         14:f8:1c:ac:dd:98:4e:73:df:ea:7a:27:d6:c8:46:18:fd:74:
         29:ee:b8:59:a2:cd:ae:62:be:9c:ce:c1:e1:0e:ff:29:dd:b3:
         91:a5:71:57:82:69:6a:cd:8c:1c:c5:8e:36:67:e6:e5:4b:c2:
         64:ef:59:3e:a6:48:0a:7d:d5:da:b0:ac:60:5b:f8:cd:f1:63:
         b6:7c:53:79:f1:a5:90:09:24:5d:72:ea:25:df:d5:de:32:f4:
         3c:0a:35:e5:7b:59:ae:1d:af:d5:bf:13:2c:cf:e7:df:c7:a1:
         42:65:8c:bb:fb:ed:10:fa:96:1a:2e:b9:61:f7:03:1d:6b:56:
         6b:f4:e3:e3:f4:90:45:70:e2:4f:55:25:d5:80:0f:d1:28:0a:
         03:5f:44:03:fe:09:ec:48:53:95:42:6a:48:b3:ef:53:de:25:
         ff:0c:4d:55:55:6a:f8:1a:f9:98:4c:f8:3a:d3:07:c3:7a:ab:
         e8:fb:d7:91:3a:dc:f6:ee:c2:8f:d2:c5:dd:c5:d2:17:de:f8:
         52:92:be:9e:30:95:37:3c:2e:9f:4f:dd:7d:e6:c4:97:32:ee:
         04:7f:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:40:49 2026 by rpki-client