This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/imF4wei3VYAK80rKiCVnGVqTsQY.asa
File:                     imF4wei3VYAK80rKiCVnGVqTsQY.asa (raw, json)
Hash identifier:          r7Y2whnc0DLP2YwUgkaafI2jXFzY3hsEkj4/9p9L4O8=
Subject key identifier:   8A:61:78:C1:E8:B7:55:80:0A:F3:4A:CA:88:25:67:19:5A:93:B1:06
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       019BE4CE17BDAD3AA1648A1441B944FF7D3C
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/imF4wei3VYAK80rKiCVnGVqTsQY.asa
Signing time:             Thu 22 Jan 2026 08:24:30 +0000
ASPA not before:          Thu 22 Jan 2026 08:24:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12859
Providers:                AS: 1299
                          AS: 2914
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e4:ce:17:bd:ad:3a:a1:64:8a:14:41:b9:44:ff:7d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: Jan 22 08:24:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a6178c1e8b755800af34aca882567195a93b106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:86:c2:4e:47:50:85:18:be:5b:50:aa:75:
                    e2:42:c2:31:41:1c:98:cc:0a:31:c0:2e:10:15:4f:
                    a2:8a:17:9c:89:92:e5:d8:a8:59:f5:93:0c:31:69:
                    6e:91:6d:9a:89:98:67:86:03:7b:3b:79:21:f9:9a:
                    43:f6:cf:8e:c5:78:ed:68:d5:93:6e:b2:e0:89:c8:
                    ce:ad:b8:6e:2a:1e:54:14:7e:82:ee:ea:50:d9:b9:
                    48:c5:48:4c:7f:b6:32:29:7a:d4:55:12:f4:da:df:
                    4a:05:c8:2a:c6:60:40:22:fd:7c:40:d7:a8:1b:3c:
                    bf:f6:96:f2:bb:c2:1a:85:7a:10:e6:ba:ed:c1:79:
                    32:2e:6d:70:8d:13:04:49:a1:8a:12:70:dd:c1:02:
                    5f:f6:5c:f3:cf:f1:25:94:30:57:8a:b7:d7:db:a2:
                    e0:51:93:85:12:86:16:b0:55:8e:42:b2:a4:a9:19:
                    7d:a0:91:93:63:5f:2d:b5:71:c1:41:99:11:0b:55:
                    5b:3b:b1:8b:e7:8d:0c:d8:c8:b3:65:44:a8:67:fc:
                    aa:38:e5:6f:ae:a9:7d:c7:99:b9:b8:6a:1f:09:7f:
                    32:67:2f:6a:f3:46:c5:48:d1:f1:82:c7:26:4f:b7:
                    38:12:28:b1:cf:5c:90:60:3d:64:87:70:1b:9b:d4:
                    09:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:61:78:C1:E8:B7:55:80:0A:F3:4A:CA:88:25:67:19:5A:93:B1:06
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/imF4wei3VYAK80rKiCVnGVqTsQY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12859

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:d7:30:cf:0a:98:72:14:89:1b:9d:5c:20:b2:e6:22:48:
         54:32:39:e1:f2:94:6b:b9:a7:22:31:d5:2f:5f:6d:c8:19:bb:
         e7:3b:64:a8:2e:60:1f:59:9e:2b:44:f7:65:24:4f:23:a3:38:
         2b:5b:4b:d8:f8:f9:2e:08:e2:f5:a5:46:02:b1:9c:5c:5e:f7:
         4b:fc:da:cb:65:05:42:0d:ce:80:6d:e1:a5:36:fd:14:c0:e5:
         68:52:dd:3b:40:d8:7e:09:10:b3:a8:03:5a:18:64:c0:85:1b:
         99:fe:1e:15:7d:ea:4a:c7:44:ca:b1:f5:a1:38:53:6e:85:4f:
         52:86:a3:c0:51:63:1e:aa:5b:bb:96:65:d1:bb:d9:0a:e6:23:
         6d:35:ba:63:e5:f4:6e:57:cf:9a:2b:f5:a4:9d:6e:eb:cd:4f:
         f5:6e:f0:33:64:56:f9:e9:94:71:2d:63:60:7f:1f:b8:a4:cc:
         c9:ab:eb:97:27:4b:75:71:b7:2e:09:30:a2:d2:69:68:ac:5d:
         60:2e:61:84:c3:dc:90:d9:a6:cb:79:6c:d1:04:72:2e:be:de:
         0c:6d:7d:fd:d1:42:a5:3f:f0:b1:3e:ab:96:bb:7f:ff:0e:e5:
         f6:9a:ca:df:d8:14:53:7a:01:2b:e6:2e:c9:3b:9b:0a:7b:e9:
         0c:1e:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:39:24 2026 by rpki-client