This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa
File:                     sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa (raw, json)
Hash identifier:          zJTKqjeO7h7C95S8GlHsLV4A/G2qaaF0osBDhe62kaY=
Subject key identifier:   B2:A2:2A:6C:6E:7E:9C:6D:5E:F7:37:C2:79:0B:BF:A3:90:AF:87:A8
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       019AC982DDC0C54C2EA1B3AAF924DC682C05
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa
Signing time:             Fri 28 Nov 2025 08:09:48 +0000
ASPA not before:          Fri 28 Nov 2025 08:09:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            47597
Providers:                AS: 16276
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c9:82:dd:c0:c5:4c:2e:a1:b3:aa:f9:24:dc:68:2c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: Nov 28 08:09:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b2a22a6c6e7e9c6d5ef737c2790bbfa390af87a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:5c:fb:1c:83:ef:6d:bb:4a:3b:47:99:ba:
                    59:39:16:ba:d5:9b:2e:62:8b:ce:2c:77:a0:63:1a:
                    3d:da:cc:79:e0:09:43:d1:c8:ae:e1:61:11:1a:ee:
                    01:6f:14:9d:fe:da:8b:7a:3f:cf:15:e9:c5:60:59:
                    07:a6:fe:45:7e:a9:18:a1:b8:dd:67:42:37:2c:c8:
                    42:da:ec:b7:62:ca:af:3a:f8:e0:45:db:0f:b1:e0:
                    8f:a4:86:c9:b8:60:38:ea:0c:ca:48:2e:76:6c:24:
                    0c:2b:ab:e6:bf:ab:53:e4:a9:c1:a9:25:f2:a1:bb:
                    a2:0f:6e:bb:43:8c:0a:54:64:59:21:e6:39:5f:81:
                    39:9e:b5:48:50:51:18:f7:96:11:59:77:77:e8:3b:
                    ec:8c:76:69:69:aa:77:f6:e7:0f:08:d2:11:70:46:
                    57:12:d6:a7:62:f9:4a:e5:02:7d:10:77:e5:4e:03:
                    cb:47:28:06:a6:62:ec:94:86:d2:0f:6f:03:c7:53:
                    bc:e5:0f:42:92:21:8d:6a:38:c4:8f:ce:40:a3:6a:
                    2e:e7:6b:53:e0:a0:15:6e:b2:3a:11:4f:2e:96:af:
                    64:86:ad:64:f9:a3:9b:35:7c:ef:a7:60:b4:1d:89:
                    c8:3a:e3:a2:e6:eb:90:de:22:b9:99:89:b5:85:94:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A2:2A:6C:6E:7E:9C:6D:5E:F7:37:C2:79:0B:BF:A3:90:AF:87:A8
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/sqIqbG5-nG1e9zfCeQu_o5Cvh6g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47597

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:82:d1:38:77:da:76:91:1f:17:98:ac:54:94:23:29:87:
         9e:f5:73:64:dd:83:7b:05:62:13:cb:e2:c1:55:cf:9d:e9:8f:
         85:d2:04:e2:8b:38:17:5a:05:e7:c7:c9:0f:10:34:87:99:fd:
         77:fc:76:b0:28:31:e1:49:a0:94:63:94:d3:5d:8f:28:80:44:
         70:ef:0c:36:8d:48:56:2d:59:30:52:7c:44:ab:0c:62:ae:da:
         bd:89:71:c6:18:ea:1e:58:cf:a8:61:ae:0b:66:a6:b6:fb:bd:
         a1:b9:83:e5:2a:31:2a:ae:5b:e7:7b:01:6d:26:b8:89:2f:77:
         24:1f:f0:7e:bb:b5:88:d5:7e:bc:25:80:a4:64:22:47:00:0a:
         9c:29:a4:6b:82:be:74:27:1d:12:6e:aa:22:c3:cb:19:16:c3:
         b1:91:ce:91:0d:da:ed:42:c0:c9:22:0a:7f:52:45:5f:f4:22:
         5b:42:16:d7:a0:71:a2:3b:a8:ff:20:76:8b:8c:90:85:0f:9b:
         53:22:0c:9b:5a:d5:6b:7b:83:56:13:57:bd:a4:a3:74:ca:5c:
         67:f8:de:c1:6c:ab:ba:95:eb:fc:cc:ce:43:fd:12:8f:37:5e:
         60:d8:2f:9c:56:ea:2d:d4:5a:96:6f:49:35:ab:01:8d:f0:ab:
         8c:a4:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:41 2025 by rpki-client