This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/se4S9YxFwCEpWHZ2vpCV4ToJjdI.asa
File:                     se4S9YxFwCEpWHZ2vpCV4ToJjdI.asa (raw, json)
Hash identifier:          BYRkYl+G8DvP61IrHvjd0vDZAOoEN+QSTpQImOz8dG8=
Subject key identifier:   B1:EE:12:F5:8C:45:C0:21:29:58:76:76:BE:90:95:E1:3A:09:8D:D2
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       019B89632423EFA23807424553FBC261949B
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/se4S9YxFwCEpWHZ2vpCV4ToJjdI.asa
Signing time:             Sun 04 Jan 2026 14:22:14 +0000
ASPA not before:          Sun 04 Jan 2026 14:22:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207067
Providers:                AS: 59595
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:89:63:24:23:ef:a2:38:07:42:45:53:fb:c2:61:94:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: Jan  4 14:22:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1ee12f58c45c02129587676be9095e13a098dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:2d:f1:e5:f8:22:d6:06:71:3d:d5:4d:85:
                    64:ee:99:d6:7f:03:12:ed:9a:3d:31:7c:1b:d1:61:
                    fa:7a:e7:86:34:d3:96:6b:44:7f:6c:f6:de:f6:d8:
                    f8:44:1f:98:25:ad:69:af:f9:c0:69:73:db:53:25:
                    1e:96:6e:10:80:50:85:f5:c6:b2:29:53:9e:37:6c:
                    f1:26:1f:3d:57:db:e8:93:ff:03:f6:c0:29:13:d1:
                    b1:dd:a8:fd:ed:2f:25:75:44:5e:ba:12:66:63:05:
                    c6:6c:1f:09:f7:3c:a2:ca:1a:71:75:72:c6:7f:ce:
                    87:32:2b:4f:59:52:6e:17:17:9d:41:fa:da:2c:51:
                    79:d8:bd:c3:c1:7c:48:b0:86:1e:02:35:6c:c8:58:
                    33:05:54:34:08:7d:1b:56:ce:d0:01:20:32:35:52:
                    b8:f4:ed:5e:00:d2:7b:45:55:8e:93:35:b3:9b:2f:
                    81:59:f4:9b:ff:d9:52:db:62:5f:04:52:8d:16:4f:
                    25:9e:50:f6:0e:3b:ec:37:db:98:db:c9:19:b4:35:
                    7d:f2:52:5b:3f:ed:d5:39:e0:1f:99:6d:52:aa:a4:
                    b0:73:39:08:b5:8f:3c:bf:98:52:d0:f7:12:f4:80:
                    89:07:48:9e:0e:67:f9:40:7e:d5:32:af:9d:5a:36:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:12:F5:8C:45:C0:21:29:58:76:76:BE:90:95:E1:3A:09:8D:D2
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/se4S9YxFwCEpWHZ2vpCV4ToJjdI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207067

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:be:7f:19:6d:57:ed:3f:16:66:19:ec:a3:34:23:d6:df:
         9f:4e:9f:61:3a:4e:8a:f1:20:ae:2a:8b:01:b8:18:d6:02:e9:
         92:6e:e2:f1:0e:b1:ae:bc:e1:d7:00:c0:1f:d4:5c:92:4a:fe:
         0f:33:56:4e:2c:32:5c:cd:dd:be:25:f0:49:80:e4:4f:f6:04:
         27:b9:36:a5:c3:f2:c4:8d:5a:d8:ca:43:45:9d:d6:0b:c3:7a:
         36:c7:5e:d9:4b:77:17:ef:04:52:d1:e8:94:a8:a0:22:80:ca:
         7b:ee:83:f7:c2:cd:2b:82:00:be:21:75:9e:18:58:d3:b6:3d:
         41:32:6e:ae:97:7f:8e:f8:43:ab:97:31:19:a9:29:3e:6e:52:
         e4:dc:40:65:25:58:fd:0e:18:e5:f1:cf:78:ab:a2:11:35:4e:
         c5:50:79:f9:c1:a7:0f:bc:6b:a4:26:f5:f4:33:72:db:f0:58:
         c5:c1:97:15:4e:e1:e1:b9:c5:9c:f9:ce:f0:2b:1f:6f:81:e9:
         0b:25:b3:44:0f:dc:ae:c6:d4:0d:68:04:dc:c7:d7:65:1b:dd:
         05:da:c2:d6:f3:00:02:f5:4b:79:b0:bd:bb:b1:ae:ee:8a:93:
         e4:95:b2:10:06:82:7b:7d:7a:6d:3b:32:4e:e4:c4:fc:6c:06:
         dc:c7:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:23:46 2026 by rpki-client