This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/R3kq7Tu6gRsTs905XA3OIx0hnx8.asa
File:                     R3kq7Tu6gRsTs905XA3OIx0hnx8.asa (raw, json)
Hash identifier:          i0v0le2V8KgOYY+tMlhW7yajuhdDrHP/SvNGEb/LiEQ=
Subject key identifier:   47:79:2A:ED:3B:BA:81:1B:13:B3:DD:39:5C:0D:CE:23:1D:21:9F:1F
Certificate issuer:       /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial:       019BD6E4DD3D2ED39018E502EB447CD7C4E8
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/R3kq7Tu6gRsTs905XA3OIx0hnx8.asa
Signing time:             Mon 19 Jan 2026 15:34:41 +0000
ASPA not before:          Mon 19 Jan 2026 15:34:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211757
Providers:                AS: 174
                          AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 3356
                          AS: 3491
                          AS: 6453
                          AS: 6461
                          AS: 6677
                          AS: 6762
                          AS: 6939
                          AS: 20473
                          AS: 35133
                          AS: 39392
                          AS: 44735
                          AS: 60068
                          AS: 214215
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:e4:dd:3d:2e:d3:90:18:e5:02:eb:44:7c:d7:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
        Validity
            Not Before: Jan 19 15:34:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47792aed3bba811b13b3dd395c0dce231d219f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:5d:d9:0a:2c:17:c8:0b:be:8c:c3:4f:f0:
                    f3:43:30:c0:c5:c1:ac:7b:03:1e:4c:e4:11:4a:71:
                    0c:45:e2:79:8e:86:a8:2d:0b:a3:c0:d7:46:8c:67:
                    1f:6c:df:e3:5e:46:36:70:51:20:e8:e8:3d:56:f1:
                    e9:eb:f9:38:86:69:ae:60:8a:ad:10:2f:c5:67:33:
                    ba:c1:70:2d:8b:a6:57:95:31:c5:5f:80:1b:64:d6:
                    b5:27:d5:23:e2:f9:84:9b:c7:02:5c:25:96:19:4a:
                    3a:28:54:4a:23:9e:7d:b9:b4:35:c8:27:a5:a7:4b:
                    d8:59:53:cd:62:d8:f5:29:52:6d:31:53:c9:21:d8:
                    72:2b:c9:35:81:11:9b:46:08:51:94:07:1e:c7:62:
                    14:eb:0c:11:95:26:d6:1d:21:28:9f:90:82:7a:d9:
                    45:2f:f0:8b:8d:22:af:6d:ad:ad:aa:db:db:7e:b7:
                    bc:96:80:cf:5f:7c:d0:d3:7b:0e:f5:38:04:03:07:
                    b7:0e:2b:b9:4e:5a:50:20:3a:a9:d7:b0:2e:1a:30:
                    85:47:cd:d7:59:d6:2b:54:d0:b8:02:cc:14:89:79:
                    c7:94:11:7e:91:27:b8:2b:e3:2f:65:df:40:80:ff:
                    86:21:d1:e6:17:a2:3d:83:ff:8a:4b:a5:e7:6d:43:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:79:2A:ED:3B:BA:81:1B:13:B3:DD:39:5C:0D:CE:23:1D:21:9F:1F
            X509v3 Authority Key Identifier:
                keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/R3kq7Tu6gRsTs905XA3OIx0hnx8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211757

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:88:89:8e:cf:7e:d1:f4:c7:82:a4:c1:90:a2:ee:2b:c5:
         6c:9a:a0:2d:72:9f:4c:30:bd:4b:c7:4f:3c:aa:9a:01:5b:a5:
         f5:5c:ff:cf:41:b4:2f:e0:5b:61:5b:21:13:1a:82:37:b3:32:
         1f:25:24:26:88:ea:17:25:51:69:7f:c5:ed:69:ae:fe:55:9b:
         08:2c:59:de:58:94:ee:f2:61:ab:cf:49:c6:54:a1:7e:20:45:
         92:86:e4:b5:10:15:19:51:0c:f0:fb:e3:39:82:55:64:c5:73:
         da:36:0e:e6:37:5d:84:c0:9b:9f:fc:cd:61:3e:12:a6:6d:f2:
         71:d4:41:d4:21:a2:88:ec:d5:ee:6b:0c:a0:ec:3b:f7:a6:a3:
         8e:e8:1e:72:8e:a5:0f:8c:a8:f4:2b:9f:8c:8d:3a:9c:c4:a1:
         02:da:5b:26:2f:3a:12:2f:86:5e:ed:27:28:60:27:93:87:c6:
         98:5f:38:6f:6b:b9:59:e0:86:84:a2:be:5d:9b:f3:33:ca:b5:
         a6:74:f8:aa:a6:5d:40:10:06:8a:d3:8d:87:b0:fc:c8:57:cc:
         67:f1:ea:2f:3a:20:2f:9c:ca:c2:85:bd:35:10:4e:70:6d:60:
         30:01:2e:62:f5:63:31:b1:53:dd:0b:c6:8d:ae:e5:af:fa:bf:
         0c:58:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:53 2026 by rpki-client