This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/g5lz44oaHgbAB8tPjhDR8m3VlM0.asa
File:                     g5lz44oaHgbAB8tPjhDR8m3VlM0.asa (raw, json)
Hash identifier:          GFreKE8YNMVh0XaKaq38gtGUXblHDe8NuVM3cQov9gc=
Subject key identifier:   83:99:73:E3:8A:1A:1E:06:C0:07:CB:4F:8E:10:D1:F2:6D:D5:94:CD
Certificate issuer:       /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial:       019BEBA0EB6C78ABC37B3A58BCACC8C735E8
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/g5lz44oaHgbAB8tPjhDR8m3VlM0.asa
Signing time:             Fri 23 Jan 2026 16:12:30 +0000
ASPA not before:          Fri 23 Jan 2026 16:12:30 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202197
Providers:                AS: 48752
                          AS: 213409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:eb:a0:eb:6c:78:ab:c3:7b:3a:58:bc:ac:c8:c7:35:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
        Validity
            Not Before: Jan 23 16:12:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=839973e38a1a1e06c007cb4f8e10d1f26dd594cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:d6:ac:2d:7a:dc:10:7f:81:39:43:78:f3:
                    e5:ea:88:13:91:02:93:53:1a:3e:28:08:98:28:f7:
                    96:f0:ff:fc:54:c7:75:20:9a:4c:9a:27:de:df:d2:
                    2c:2b:a1:ef:47:07:d5:75:e7:d2:05:2d:ac:c9:ff:
                    ab:de:6e:87:48:cb:18:f5:2f:34:70:25:29:72:08:
                    e9:ce:28:87:5f:f9:1e:fe:d0:8f:08:b7:f6:22:2f:
                    6c:86:c9:a8:92:2c:ff:3a:2a:09:66:c6:39:e3:cd:
                    c3:f2:f7:f6:1e:2b:9f:ec:43:06:e3:23:d9:08:17:
                    f8:9d:87:0d:9e:23:aa:fa:19:fe:f7:ad:63:8b:b6:
                    f7:0b:9e:53:83:74:d5:03:08:79:29:d0:f4:bd:a1:
                    b0:0b:59:68:1b:d9:4c:9e:73:2f:f8:88:4c:fc:a5:
                    86:c0:52:ec:5f:af:14:a6:0a:3e:52:c8:3c:a9:d5:
                    d3:e0:04:fb:cc:cf:18:0a:1f:8b:3c:68:c1:72:2e:
                    65:94:b2:a6:c7:7b:9d:91:0e:80:00:7a:6a:eb:e1:
                    93:cc:f0:0f:c8:94:9f:9b:e4:fa:dc:14:eb:b3:8e:
                    53:1a:0a:21:cb:f5:57:80:a9:75:c2:29:5d:6a:19:
                    83:b2:ab:f7:70:2c:15:ae:33:3e:00:29:24:49:00:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:73:E3:8A:1A:1E:06:C0:07:CB:4F:8E:10:D1:F2:6D:D5:94:CD
            X509v3 Authority Key Identifier:
                keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/g5lz44oaHgbAB8tPjhDR8m3VlM0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202197

    Signature Algorithm: sha256WithRSAEncryption
         36:15:89:e9:69:22:2a:b7:3c:11:cd:65:b0:8d:38:51:f4:54:
         be:e1:8a:a6:12:1f:83:cb:29:05:27:fa:c3:18:a1:a6:6c:29:
         10:fe:6c:2c:79:34:d8:a1:c7:97:e2:71:cf:8e:fc:d0:51:9a:
         1c:d8:2b:dc:41:76:db:38:26:67:78:05:30:67:ba:e9:7f:5d:
         a9:b4:35:81:05:17:24:23:d6:37:97:83:7b:e5:c5:30:5b:a9:
         5c:cc:f7:b1:96:52:55:9c:b8:40:29:04:18:07:61:00:fc:dd:
         6c:41:d6:11:de:ca:58:9a:c1:ed:b1:f8:7f:72:54:98:07:39:
         c9:8c:66:5f:f6:00:f5:07:e4:5c:69:f9:9e:c2:36:90:51:f3:
         bc:bf:ce:f3:31:36:19:63:ec:74:2e:bd:80:24:d3:d7:66:4f:
         86:92:eb:a4:69:86:37:ca:92:4d:b6:5c:5d:ef:0f:18:0f:35:
         54:4c:12:a3:b8:c9:10:e5:f9:5c:d6:ea:6f:3d:5f:c6:02:d8:
         3a:1e:e2:a6:1f:a5:44:9e:c9:f7:07:2a:28:16:80:d5:14:21:
         de:b2:32:73:a9:54:52:c1:35:08:c3:db:fe:c8:19:18:d6:6f:
         89:d8:cc:ed:97:56:76:84:dc:19:9a:c2:e7:0d:4e:dc:fe:51:
         1d:6f:31:58
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvroOtseKvDezpYvKzIxzXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2E1MjYxMGM3N2MyNDA2OWM2YTY1OWY1Zjc1ODYyNDQ0
ZDIxZDEwHhcNMjYwMTIzMTYxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mzk5NzNlMzhhMWExZTA2YzAwN2NiNGY4ZTEwZDFmMjZkZDU5NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm//WrC163BB/gTlDePPl6ogTkQKT
Uxo+KAiYKPeW8P/8VMd1IJpMmife39IsK6HvRwfVdefSBS2syf+r3m6HSMsY9S80
cCUpcgjpziiHX/ke/tCPCLf2Ii9shsmokiz/OioJZsY5483D8vf2Hiuf7EMG4yPZ
CBf4nYcNniOq+hn+961ji7b3C55Tg3TVAwh5KdD0vaGwC1loG9lMnnMv+IhM/KWG
wFLsX68Upgo+Usg8qdXT4AT7zM8YCh+LPGjBci5llLKmx3udkQ6AAHpq6+GTzPAP
yJSfm+T63BTrs45TGgohy/VXgKl1wildahmDsqv3cCwVrjM+ACkkSQBDCQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFIOZc+OKGh4GwAfLT44Q0fJt1ZTNMB8GA1UdIwQY
MBaAFEzKUmEMd8JAacamWfX3WGJETSHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQt
MWIwM2U1ODk0ZTA1LzEvZzVsejQ0b2FIZ2JBQjh0UGpoRFI4bTNWbE0wLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80OTIxZjAtNWM1Yy00MDE0LThjZWQtMWIwM2U1ODk0ZTA1
LzEvVE1wU1lReDN3a0JweHFaWjlmZFlZa1JOSWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMV1TANBgkqhkiG
9w0BAQsFAAOCAQEANhWJ6WkiKrc8Ec1lsI04UfRUvuGKphIfg8spBSf6wxihpmwp
EP5sLHk02KHHl+Jxz4780FGaHNgr3EF22zgmZ3gFMGe66X9dqbQ1gQUXJCPWN5eD
e+XFMFupXMz3sZZSVZy4QCkEGAdhAPzdbEHWEd7KWJrB7bH4f3JUmAc5yYxmX/YA
9QfkXGn5nsI2kFHzvL/O8zE2GWPsdC69gCTT12ZPhpLrpGmGN8qSTbZcXe8PGA81
VEwSo7jJEOX5XNbqbz1fxgLYOh7iph+lRJ7J9wcqKBaA1RQh3rIyc6lUUsE1CMPb
/sgZGNZvidjM7ZdWdoTcGZrC5w1O3P5RHW8xWA==
-----END CERTIFICATE-----