This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/4SK6T1joxEKD3qcJIw_toyLw7Cg.asa
File:                     4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (raw, json)
Hash identifier:          S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=
Subject key identifier:   E1:22:BA:4F:58:E8:C4:42:83:DE:A7:09:23:0F:ED:A3:22:F0:EC:28
Certificate issuer:       /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial:       019BD1BFFE1F2D90862DD977BB175DBCCCD2
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/4SK6T1joxEKD3qcJIw_toyLw7Cg.asa
Signing time:             Sun 18 Jan 2026 15:36:19 +0000
ASPA not before:          Sun 18 Jan 2026 15:36:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202142
Providers:                AS: 174
                          AS: 701
                          AS: 1299
                          AS: 2914
                          AS: 3257
                          AS: 3320
                          AS: 3356
                          AS: 3491
                          AS: 5511
                          AS: 6453
                          AS: 6461
                          AS: 6762
                          AS: 6830
                          AS: 6939
                          AS: 7018
                          AS: 12956
                          AS: 137409
                          AS: 215467
                          AS: 399486
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d1:bf:fe:1f:2d:90:86:2d:d9:77:bb:17:5d:bc:cc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
        Validity
            Not Before: Jan 18 15:36:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e122ba4f58e8c44283dea709230feda322f0ec28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:b0:df:b8:81:9b:45:a5:dc:7c:25:ba:67:
                    72:b3:74:df:bf:e9:5f:03:f4:4a:f1:1f:4a:db:0d:
                    d9:9d:79:fe:76:ca:c6:8a:e0:a4:ab:1f:65:84:b8:
                    11:56:bc:7b:4f:9f:0e:55:6d:ea:17:22:56:ea:ff:
                    9d:01:3e:59:52:ce:f6:79:98:fb:4f:ec:3d:a6:51:
                    35:5c:a4:51:4e:5e:f3:c7:13:e3:90:64:23:12:45:
                    bb:dc:72:ac:2f:b7:09:24:c6:53:10:f4:26:8c:16:
                    3f:c3:63:b7:30:30:1d:c5:e1:03:61:61:74:49:5e:
                    21:d8:7b:65:72:cc:6b:b2:3a:a9:07:e8:c3:cd:50:
                    9d:4e:48:59:f1:ae:9e:8b:d2:3b:05:4e:d3:61:21:
                    ef:3d:23:5c:a0:5c:21:44:f0:ec:3d:44:b7:8d:a2:
                    d8:42:e5:a5:79:80:8b:c6:aa:2a:c7:c2:78:ce:1f:
                    58:2d:bf:b9:96:cc:ad:71:74:81:d8:bd:dc:49:d1:
                    aa:07:a1:1f:8a:1e:d2:d5:36:4d:6a:c6:e8:e6:87:
                    38:a4:64:92:3d:4d:fd:55:20:c1:d3:bb:97:ce:14:
                    9e:9e:eb:15:0a:fe:ab:0c:02:0c:db:62:62:07:ee:
                    b3:04:b5:c2:63:46:b1:8c:83:92:b7:d1:8f:4a:da:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:BA:4F:58:E8:C4:42:83:DE:A7:09:23:0F:ED:A3:22:F0:EC:28
            X509v3 Authority Key Identifier:
                keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/4SK6T1joxEKD3qcJIw_toyLw7Cg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202142

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:fe:e5:fe:6a:d0:80:2b:0a:b4:25:02:68:1c:d8:34:f0:
         dd:17:55:ab:29:d3:9d:9f:85:58:fc:9a:45:5c:6b:f9:bc:14:
         a6:b7:7f:6d:34:01:3d:07:a1:d0:2e:46:27:36:ba:f6:af:a6:
         8d:bd:39:fa:67:e9:14:90:c6:e5:83:77:7f:8f:93:f9:e3:e3:
         1d:7a:07:4b:94:09:d8:f7:b9:3c:e7:bc:f4:ed:35:ce:b5:f6:
         2b:a6:1f:2c:4f:1d:99:fd:ef:e7:6e:e4:58:ac:ce:bd:fb:92:
         5c:0e:1f:44:df:62:1b:74:17:bf:d9:14:bf:1e:bf:3d:46:b7:
         7f:46:fd:72:a0:5e:ae:1d:82:2b:46:e0:65:50:68:94:f2:4f:
         87:f9:09:e5:44:eb:62:f2:e3:55:17:77:66:23:57:bd:0a:ef:
         27:fe:ec:eb:bd:71:be:35:ed:67:71:2e:a0:32:50:5c:df:82:
         ab:34:f3:db:de:66:62:28:42:43:9e:28:26:06:ee:fe:de:6a:
         e3:43:3c:58:b1:dd:fe:f0:06:ee:2c:f0:3b:7c:59:19:3a:3d:
         56:69:72:90:c4:47:80:eb:9b:8b:ed:e3:46:2d:7a:3c:fe:8c:
         c3:1c:ea:f4:95:46:a8:89:fd:d3:45:1b:67:cb:c1:e4:e4:c7:
         dc:42:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:14 2026 by rpki-client