This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/qSRvXrdptD4XaBcPuWnB0wy-xHE.asa
File:                     qSRvXrdptD4XaBcPuWnB0wy-xHE.asa (raw, json)
Hash identifier:          LBd4BHNIXy8q3KkJ/pwL33B6PZyMCIS5FmTlLkB/4dY=
Subject key identifier:   A9:24:6F:5E:B7:69:B4:3E:17:68:17:0F:B9:69:C1:D3:0C:BE:C4:71
Certificate issuer:       /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial:       019BEA4E2DBCDB70603E77A1C3335CF6BEE8
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/qSRvXrdptD4XaBcPuWnB0wy-xHE.asa
Signing time:             Fri 23 Jan 2026 10:02:30 +0000
ASPA not before:          Fri 23 Jan 2026 10:02:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210320
Providers:                AS: 8283
                          AS: 41051
                          AS: 200132
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ea:4e:2d:bc:db:70:60:3e:77:a1:c3:33:5c:f6:be:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
        Validity
            Not Before: Jan 23 10:02:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a9246f5eb769b43e1768170fb969c1d30cbec471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:45:20:d6:42:a0:a6:d8:1b:35:47:38:bb:
                    51:29:77:e3:31:35:fa:49:34:a1:88:41:4b:82:42:
                    63:df:d4:c5:bf:54:6d:85:43:30:c0:f4:4e:40:23:
                    51:1f:74:72:21:11:cd:2b:f6:f4:57:d5:7f:a1:1e:
                    5c:6b:de:78:fb:c1:19:41:30:75:1a:ef:ee:d1:bc:
                    c9:85:06:c4:f9:52:df:24:11:e5:4f:0c:f7:84:c7:
                    1a:b7:82:ac:69:6b:5a:11:e4:b2:4a:3d:0a:b1:a0:
                    ce:6e:ec:56:ad:34:25:9d:ad:45:7a:c1:aa:88:27:
                    e5:7d:85:35:74:eb:c0:07:8a:55:c1:94:c3:52:99:
                    6b:1b:78:87:d5:40:24:fc:7b:b5:32:be:85:31:d4:
                    4c:85:1b:49:f7:f6:a8:e0:fb:21:d2:dc:36:b8:6a:
                    9e:bc:1c:67:06:2e:7c:0e:0b:4d:06:d5:ee:c9:ab:
                    b8:41:61:9a:9a:10:c1:0d:95:07:a4:25:52:74:9a:
                    80:62:17:1d:c0:c9:d8:91:d3:b9:e2:18:f1:a1:c4:
                    74:12:8c:2f:f2:25:d8:8c:7f:c7:a7:6a:3a:17:9e:
                    19:5a:59:ba:91:aa:33:1b:64:4c:72:f1:b1:a3:c8:
                    d7:0f:58:99:91:9a:a7:2f:10:9e:5e:a1:f3:8e:14:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:6F:5E:B7:69:B4:3E:17:68:17:0F:B9:69:C1:D3:0C:BE:C4:71
            X509v3 Authority Key Identifier:
                keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/qSRvXrdptD4XaBcPuWnB0wy-xHE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210320

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:5d:db:6a:33:e3:30:cf:05:09:90:9f:75:9f:5b:ed:02:
         77:bd:14:34:0b:ee:62:f3:f4:8d:0c:36:a4:09:bf:c2:87:bc:
         fb:2f:96:11:d8:e9:cf:1f:15:9d:4f:9e:ed:34:d6:b8:ce:54:
         9e:58:d8:30:31:c0:ef:74:4c:83:fc:ce:11:48:bc:3a:16:38:
         a5:b6:2f:d6:d2:14:c3:e7:35:2b:4d:5c:cc:6d:21:e5:a1:23:
         78:d9:ca:ad:de:52:99:0a:0f:12:17:11:32:aa:9b:7e:86:18:
         17:23:fa:71:c6:0e:f4:ae:97:07:e8:68:d2:cd:19:ef:45:0f:
         90:85:99:d2:01:aa:cc:8d:4f:5b:e7:72:a3:e9:e7:e3:a7:21:
         aa:98:b9:bc:b8:15:12:f7:45:ae:03:d9:c5:0e:c7:bd:34:03:
         21:4b:53:24:12:5c:3b:2e:a9:13:a8:d0:57:9c:99:5f:ba:bf:
         2b:3d:78:ae:69:0f:da:0b:17:62:c3:70:03:1a:96:0d:72:a5:
         60:76:63:5c:55:8e:a4:c4:d9:55:3a:a3:e2:c0:63:c5:05:96:
         05:cc:99:e7:a8:26:5f:e7:d5:1a:1c:f3:25:53:d1:10:79:a5:
         e2:6a:51:82:91:32:86:12:89:84:5f:4e:55:5c:32:18:1c:f3:
         8d:07:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:45 2026 by rpki-client