This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/m1egacFq57B1935BP-sWTqQiT20.asa
File:                     m1egacFq57B1935BP-sWTqQiT20.asa (raw, json)
Hash identifier:          tdEyXoFuS7NgT46fIpuYRfyuaEE9sqvQF2itFtvP+rM=
Subject key identifier:   9B:57:A0:69:C1:6A:E7:B0:75:F7:7E:41:3F:EB:16:4E:A4:22:4F:6D
Certificate issuer:       /CN=99f6bf0e8c6efc4affaf726288469caff417de66
Certificate serial:       019B27B4A89035900041F35050E15253715F
Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/m1egacFq57B1935BP-sWTqQiT20.asa
Signing time:             Tue 16 Dec 2025 15:08:29 +0000
ASPA not before:          Tue 16 Dec 2025 15:08:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            203662
Providers:                AS: 63473
                          AS: 141409
                          AS: 152900
                          AS: 215467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:b4:a8:90:35:90:00:41:f3:50:50:e1:52:53:71:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66
        Validity
            Not Before: Dec 16 15:08:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9b57a069c16ae7b075f77e413feb164ea4224f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:4d:17:b3:e1:04:50:07:2b:4b:e1:87:80:
                    f2:60:8c:7f:8a:a6:58:d5:93:97:69:3a:ac:6c:bb:
                    8f:9b:76:07:40:48:5e:fd:aa:cd:46:59:9e:7a:07:
                    f9:d5:1d:b4:ba:58:53:1f:63:2c:ae:fb:d0:23:69:
                    a2:0f:21:80:95:72:7e:97:e7:47:9e:b9:12:5e:ce:
                    10:75:b1:4e:92:a8:bb:3a:c7:76:6e:ae:a1:89:51:
                    9a:e1:9b:c3:bb:d9:b5:10:9b:6a:44:b2:45:e3:d1:
                    5a:6d:5a:80:bf:82:b0:b3:aa:3f:2d:c1:b9:e3:aa:
                    03:19:83:03:06:e3:88:c3:2a:8f:82:e3:6b:e2:62:
                    af:76:e6:3c:e6:09:40:99:dd:d3:89:e2:c0:13:ef:
                    4d:df:39:ea:9b:91:af:ac:cf:23:d5:45:e0:be:de:
                    46:fe:df:41:51:67:7e:1c:d8:1c:01:3c:95:1b:e1:
                    46:4a:91:7c:d7:df:67:8f:88:26:f2:c4:4e:e3:8c:
                    47:51:d0:ff:95:d5:1b:1c:d4:7b:4d:18:97:71:0a:
                    5b:15:96:a9:31:80:79:51:0c:3a:17:bf:5a:10:95:
                    62:6c:d7:b8:09:11:ab:70:1b:09:ea:bb:ac:9c:42:
                    2f:d5:25:97:4a:68:a4:d1:08:1a:56:98:87:1c:b5:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:57:A0:69:C1:6A:E7:B0:75:F7:7E:41:3F:EB:16:4E:A4:22:4F:6D
            X509v3 Authority Key Identifier:
                keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/m1egacFq57B1935BP-sWTqQiT20.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203662

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:c8:00:9b:81:e8:61:ac:4a:33:34:a2:dd:c8:1d:bb:cd:
         12:5b:6a:82:c1:32:7c:40:58:a0:cc:d6:48:39:3c:67:c3:95:
         b4:b8:d8:3e:51:c6:8b:cc:fe:6d:cd:39:a6:6a:e4:a2:1c:71:
         42:48:0a:85:51:a6:57:9a:97:e5:ca:e8:25:30:19:8a:a2:1b:
         74:69:3c:bf:2b:01:4c:0e:5c:b6:a1:09:d4:25:e1:65:7b:1f:
         ef:f4:27:24:e0:74:5a:c7:ce:63:bd:55:70:2c:f7:5f:4a:e9:
         d8:75:2b:bc:9c:dd:ac:83:da:37:f2:27:77:17:12:a8:fe:0b:
         5e:ea:43:02:dc:69:81:4d:22:3b:71:d9:7f:f3:a3:1c:e1:31:
         ab:6b:75:a7:4a:3e:ef:29:2c:71:03:7e:d9:6e:2e:6e:65:df:
         b3:7c:24:72:5e:6e:a5:cd:dd:06:92:8a:ef:11:67:67:3b:7d:
         29:a5:ce:bf:4c:8d:d3:9d:b5:e2:08:ef:7a:82:38:57:fa:8d:
         5f:5a:d7:09:52:64:f6:a9:84:4b:0a:10:b3:a7:be:fe:65:32:
         24:fc:be:86:41:b7:c4:7d:e8:aa:86:6f:c7:cf:49:83:72:54:
         5f:9d:81:b1:09:96:6b:2e:3a:36:c7:6c:cf:19:32:8f:76:5d:
         39:aa:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:17:21 2026 by rpki-client