This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/QT5YaQtwh10kjLMseFaZ5StOfCw.asa
File:                     QT5YaQtwh10kjLMseFaZ5StOfCw.asa (raw, json)
Hash identifier:          mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=
Subject key identifier:   41:3E:58:69:0B:70:87:5D:24:8C:B3:2C:78:56:99:E5:2B:4E:7C:2C
Certificate issuer:       /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial:       019B7FC0C1C1898749AC4483DB1B6D4E3686
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/QT5YaQtwh10kjLMseFaZ5StOfCw.asa
Signing time:             Fri 02 Jan 2026 17:28:17 +0000
ASPA not before:          Fri 02 Jan 2026 17:28:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47674
Providers:                AS: 174
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:c0:c1:c1:89:87:49:ac:44:83:db:1b:6d:4e:36:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
        Validity
            Not Before: Jan  2 17:28:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=413e58690b70875d248cb32c785699e52b4e7c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:ce:21:04:a1:f0:4a:98:68:71:c1:af:1a:
                    a3:68:c5:dc:56:3d:dd:9d:32:a9:0f:c0:b9:74:ea:
                    8f:cb:49:a2:87:52:68:9b:2d:90:44:89:2e:fb:01:
                    c4:6d:d7:ec:21:ae:2e:89:08:ab:20:c6:31:e6:ce:
                    40:ad:a7:f2:74:c9:45:b1:c4:29:3d:3b:72:75:80:
                    e5:2c:db:0d:1f:28:c5:59:b9:b3:a9:32:77:93:f9:
                    1d:23:9f:8a:01:92:27:fd:ea:78:20:bf:9a:f5:f9:
                    43:0e:bc:f1:6b:ef:3e:49:82:12:14:43:b8:79:2a:
                    d4:d3:97:b2:2f:d0:11:f2:f7:69:e5:8d:0b:d9:43:
                    aa:ba:d8:15:ca:5e:af:8d:f0:6c:cc:62:f5:8c:87:
                    f7:18:56:b0:ff:a7:3b:39:29:57:15:29:10:00:9c:
                    85:3b:62:c5:fd:0b:0c:1b:8d:97:a2:f4:94:70:4d:
                    1d:4c:39:ce:84:31:91:f3:50:0b:1f:77:54:40:76:
                    d5:fb:fb:28:2f:06:71:02:f7:c1:97:a6:29:e9:1e:
                    2d:2c:30:bb:21:8f:a8:dd:e6:e9:ac:1b:ff:be:75:
                    ea:ef:d4:41:73:68:b4:fb:d6:e8:e1:a9:51:9e:e1:
                    cb:c9:59:94:7a:6b:96:d0:5f:9a:4a:24:55:aa:11:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3E:58:69:0B:70:87:5D:24:8C:B3:2C:78:56:99:E5:2B:4E:7C:2C
            X509v3 Authority Key Identifier:
                keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/QT5YaQtwh10kjLMseFaZ5StOfCw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47674

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:37:fa:cd:5f:e5:80:f7:26:0c:d5:e6:d4:bb:3d:68:3e:
         b8:65:dc:32:bf:da:cb:50:ae:d1:5c:51:78:dc:f9:1e:bc:57:
         19:45:02:bf:9b:15:eb:16:66:ce:07:8d:e8:74:4d:8a:31:f8:
         cb:2f:60:6a:a1:87:d7:d4:d5:f8:e3:3e:ec:b6:9d:e5:64:42:
         9a:6e:f2:4d:4f:ab:59:f1:b0:a2:f8:34:3c:d2:b7:f1:3f:5f:
         1a:5f:de:5f:bf:af:44:1b:d3:aa:89:6c:e8:58:ab:35:79:d8:
         0f:b1:a3:a2:12:e5:cd:03:b4:42:df:0b:12:5d:90:8e:16:83:
         ac:98:26:1c:e5:c6:5e:85:a9:4b:e3:f9:18:a4:1a:d5:18:ed:
         e4:76:74:15:eb:b0:b6:27:b8:03:38:42:2f:10:53:36:eb:f6:
         b6:2e:78:6f:ae:c9:46:4b:44:da:c7:73:fa:be:20:b9:fe:73:
         df:4f:78:29:59:42:17:6a:9e:4a:01:54:08:68:8b:43:75:98:
         2f:14:47:37:f6:e5:e4:d4:54:96:91:5b:6d:ce:d1:14:38:a3:
         61:f5:b1:c1:4b:1f:97:b4:1e:d6:27:63:f5:7a:13:9b:4d:97:
         46:d3:62:1f:98:44:59:ae:58:f5:d5:c4:6b:15:76:9d:53:7b:
         fd:02:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:16 2026 by rpki-client