This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/GrPbowD1xhzEQt0mGonYCE0CqTQ.asa
File:                     GrPbowD1xhzEQt0mGonYCE0CqTQ.asa (raw, json)
Hash identifier:          DOZHKT4cbMp9ZejcaCrBqRpFGvg17kAFTmcg90xNqwM=
Subject key identifier:   1A:B3:DB:A3:00:F5:C6:1C:C4:42:DD:26:1A:89:D8:08:4D:02:A9:34
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       019C0E6C16D5163931C57B747710C3CD1524
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/GrPbowD1xhzEQt0mGonYCE0CqTQ.asa
Signing time:             Fri 30 Jan 2026 10:21:30 +0000
ASPA not before:          Fri 30 Jan 2026 10:21:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            8899
Providers:                AS: 1299
                          AS: 6461
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:6c:16:d5:16:39:31:c5:7b:74:77:10:c3:cd:15:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: Jan 30 10:21:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ab3dba300f5c61cc442dd261a89d8084d02a934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:80:64:06:53:71:fa:a5:dd:bc:ac:1c:7e:
                    1b:73:ee:93:dd:da:5a:31:c0:01:a2:43:c4:85:0e:
                    5f:59:6d:d2:b5:94:3d:aa:98:c8:5c:03:17:b3:92:
                    cc:46:d5:f3:50:eb:d5:96:4a:5a:83:46:59:bb:74:
                    b3:96:f2:bb:c1:e5:19:ed:01:ed:ca:db:da:b4:84:
                    a7:51:a5:0d:8e:61:4f:9b:33:3a:86:8f:01:05:f6:
                    d9:84:e6:52:dc:79:b9:45:39:07:85:9f:de:b6:11:
                    d1:0e:4a:57:bf:fe:28:4a:a6:cc:01:b5:80:52:0a:
                    9e:69:b8:ce:33:a1:e5:0f:8d:c9:be:57:47:f1:cf:
                    4d:a1:10:e4:d9:38:04:c4:f3:f8:42:a1:75:fc:88:
                    f3:a6:6a:29:b7:48:85:a0:45:c7:58:8d:c2:c8:2b:
                    0e:83:57:dc:a4:8a:26:ae:97:65:6a:c7:99:e5:7e:
                    ba:fe:5f:0a:7a:97:7d:e3:94:51:de:65:45:76:8d:
                    4f:b7:c3:4d:a4:4d:2d:21:0e:18:2b:c1:45:ba:ec:
                    d8:e0:61:91:88:6f:1a:9a:03:fc:e8:42:da:2c:4d:
                    de:4e:db:6c:09:94:98:66:58:9f:1d:4b:00:f7:bc:
                    c4:d6:70:f8:c7:3b:3f:4d:1e:a3:4c:ca:b1:f8:f6:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B3:DB:A3:00:F5:C6:1C:C4:42:DD:26:1A:89:D8:08:4D:02:A9:34
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/GrPbowD1xhzEQt0mGonYCE0CqTQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8899

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:cf:aa:42:22:f3:68:22:4d:ce:f8:7b:ca:fc:f5:ef:94:
         8f:ab:50:0b:6b:a4:13:cd:64:60:c1:31:83:ff:c2:2d:4c:7e:
         39:27:a7:b6:e0:d7:b7:d5:f9:06:ed:91:89:c1:93:88:6d:e9:
         2d:30:fc:11:c9:9f:ae:5c:35:87:d5:b8:4a:f9:e3:ce:fa:4e:
         5a:4f:98:82:37:d4:30:c5:30:13:3e:6b:82:7c:76:ed:49:42:
         16:de:72:53:1c:25:81:1f:02:a6:6d:2e:7c:81:6c:29:49:ca:
         b2:39:d0:59:04:1a:09:c2:ac:47:ef:94:b2:e2:72:6b:2e:25:
         2e:a1:9e:0d:4f:44:a0:1a:33:ee:0b:c7:a0:78:61:48:58:75:
         be:5d:69:d5:99:53:aa:ad:72:6f:92:83:95:d9:01:cc:46:69:
         75:88:57:74:2a:e7:6b:73:7f:2b:8c:01:23:21:3c:20:72:01:
         d1:52:8c:fa:1c:57:18:78:77:f2:ac:a7:78:58:65:56:f0:d7:
         0b:e6:f4:ec:48:4b:6a:df:cd:5d:eb:6d:cc:ce:80:dd:70:ad:
         7e:1f:1c:c5:54:e3:fb:7d:11:3c:90:62:24:26:40:e1:b8:71:
         3f:d2:26:ea:d4:be:5e:c7:55:94:12:c0:82:4c:f1:38:f3:09:
         1d:c3:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:57 2026 by rpki-client