This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa
File:                     6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa (raw, json)
Hash identifier:          k9XIzZz2YS/IqcKj1MEO/9AD4eBMuTTQ1lkoUK4El4A=
Subject key identifier:   E8:D4:39:C0:85:C1:34:C0:AE:0E:68:46:1D:4A:D5:E3:37:20:22:59
Certificate issuer:       /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
Certificate serial:       019BC80B40559BA707C4C518150B2A57B697
Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa
Signing time:             Fri 16 Jan 2026 18:22:19 +0000
ASPA not before:          Fri 16 Jan 2026 18:22:19 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210951
Providers:                AS: 6939
                          AS: 34927
                          AS: 56655
                          AS: 202297
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c8:0b:40:55:9b:a7:07:c4:c5:18:15:0b:2a:57:b6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7
        Validity
            Not Before: Jan 16 18:22:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8d439c085c134c0ae0e68461d4ad5e337202259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:b7:cf:58:7f:34:c7:9d:98:1d:2c:ff:fe:
                    49:44:de:1e:ef:12:c7:a4:19:b3:60:18:84:37:f3:
                    74:a5:aa:47:c9:f3:36:7e:f2:5a:3c:d4:ef:85:1b:
                    74:7c:cb:25:a1:25:50:64:76:c1:ef:11:48:6a:36:
                    72:58:1c:c1:9b:7f:dd:c5:b1:76:61:a6:a7:70:2d:
                    98:cd:70:b9:5d:5a:28:c2:ed:d9:86:85:a4:90:94:
                    60:16:9a:ae:b2:a4:da:0e:ba:b4:73:2d:8b:1d:c2:
                    6b:bb:49:fd:27:ec:62:20:7e:68:6f:b3:31:a3:a0:
                    64:4f:79:e4:1f:2d:0e:3e:0e:c0:1f:88:44:67:f6:
                    cd:a4:e8:a6:92:83:d7:a1:dc:c5:9a:3d:c9:d0:aa:
                    1f:ac:27:a5:55:d6:10:38:18:3f:3e:42:e0:57:ff:
                    f2:45:ed:67:c8:fc:88:22:87:22:aa:30:89:8e:01:
                    86:d2:46:82:a0:ed:5e:f7:e2:df:76:52:a7:04:1f:
                    87:01:8b:ff:9b:f7:44:48:f7:2d:1a:58:11:2d:34:
                    f9:b4:dc:4a:b8:79:06:14:0d:e3:58:50:a3:47:95:
                    cc:ab:01:3c:84:b9:9a:0e:91:1b:db:d2:6b:98:83:
                    e9:f9:14:19:ce:a5:b2:94:6e:7e:f1:fc:57:44:ab:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:39:C0:85:C1:34:C0:AE:0E:68:46:1D:4A:D5:E3:37:20:22:59
            X509v3 Authority Key Identifier:
                keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210951

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:df:19:40:b0:1e:44:1b:80:52:04:51:70:69:9c:7a:eb:
         10:0f:3e:6a:c4:87:c4:b2:95:3f:b6:eb:21:cf:af:b1:49:3f:
         1c:ec:5f:00:df:a7:88:cc:e5:aa:7d:6f:4e:cb:7f:a5:36:57:
         53:4c:3c:36:68:09:73:9f:5c:6a:43:14:16:b9:3a:75:ea:3d:
         8c:23:b2:bc:f6:ec:2b:41:d9:c1:a9:cf:6d:69:03:19:38:e2:
         ad:77:2b:7e:ab:26:09:eb:c7:80:b3:55:85:b4:14:f9:bf:94:
         b2:fb:d6:d4:d5:49:75:bb:92:d8:20:30:5c:93:68:dc:ae:da:
         77:ea:f8:91:8f:15:d7:4a:65:d9:1d:30:2b:61:36:16:66:20:
         35:a0:b8:14:61:af:b9:e8:24:ec:23:a9:d7:a4:85:23:25:75:
         a7:d9:34:d0:b3:63:8f:b8:68:e0:0d:17:3d:e9:33:f5:02:aa:
         7a:98:9d:4f:85:e6:34:42:54:18:16:2d:b5:db:77:26:74:1d:
         37:21:07:7a:02:fb:cf:15:46:4f:1b:91:0b:42:ff:2b:95:be:
         5c:10:e4:2b:75:74:fb:56:26:7f:b9:24:dd:0b:b5:f2:57:27:
         18:57:7a:b9:54:40:36:68:8a:00:d4:21:62:a3:e4:ea:96:f9:
         61:e6:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:49:13 2026 by rpki-client