This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/wqXxgKLtEKW7BSlepVMRDTpNWM0.asa
File:                     wqXxgKLtEKW7BSlepVMRDTpNWM0.asa (raw, json)
Hash identifier:          hQjKffOZktpgqNZU9Z705S9+cY/2MAGq57iVWSoX52s=
Subject key identifier:   C2:A5:F1:80:A2:ED:10:A5:BB:05:29:5E:A5:53:11:0D:3A:4D:58:CD
Certificate issuer:       /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial:       019BC139564801400D39EBDE50419E48DE1B
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/wqXxgKLtEKW7BSlepVMRDTpNWM0.asa
Signing time:             Thu 15 Jan 2026 10:35:18 +0000
ASPA not before:          Thu 15 Jan 2026 10:35:18 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215153
Providers:                AS: 8772
                          AS: 29632
                          AS: 41051
                          AS: 202673
                          AS: 214809
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c1:39:56:48:01:40:0d:39:eb:de:50:41:9e:48:de:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
        Validity
            Not Before: Jan 15 10:35:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c2a5f180a2ed10a5bb05295ea553110d3a4d58cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:7e:5a:c3:35:10:93:e9:41:ba:c9:2d:cf:
                    be:25:e3:99:b3:e5:ea:f2:65:68:74:49:5b:fc:df:
                    c1:40:0f:2a:ac:b7:da:94:30:1b:89:ba:cb:92:4e:
                    db:8e:53:26:3a:2e:d2:67:fb:d1:b2:fb:f3:d0:36:
                    48:57:f2:c7:73:c3:29:75:f2:6b:39:11:a4:1f:a7:
                    cc:22:ae:b3:aa:09:8b:5b:f6:61:53:0f:5c:41:38:
                    75:72:7c:5e:87:c3:d4:8f:71:0c:43:f5:b3:33:f4:
                    89:eb:8b:a1:d4:e2:d4:97:4f:85:1f:6a:b8:2e:25:
                    7d:c7:67:a1:cc:bb:c6:c8:33:47:aa:a4:e1:f1:23:
                    47:50:cf:60:e1:e4:25:10:e1:6f:3a:67:39:c4:4f:
                    d4:4c:18:06:b9:60:cf:5d:8c:ba:b7:61:07:7c:dc:
                    31:4c:07:33:c7:35:29:53:9d:20:20:fe:35:db:37:
                    cf:83:26:fe:c7:88:76:d1:6b:b8:55:2b:1e:65:75:
                    34:f1:38:1e:8c:57:ea:84:d4:62:f7:fc:a7:cd:cf:
                    bf:e4:50:23:27:01:d8:60:8e:1f:38:93:4f:6c:99:
                    45:93:d9:f6:f6:f2:71:7e:b4:d1:8c:59:6b:a4:ff:
                    9c:50:8a:0d:a5:48:0a:5b:00:2a:ef:f1:05:53:2f:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A5:F1:80:A2:ED:10:A5:BB:05:29:5E:A5:53:11:0D:3A:4D:58:CD
            X509v3 Authority Key Identifier:
                keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/wqXxgKLtEKW7BSlepVMRDTpNWM0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215153

    Signature Algorithm: sha256WithRSAEncryption
         59:08:9e:b8:d4:00:74:ed:28:ee:70:93:24:57:e6:36:0d:63:
         ba:b1:37:98:c7:ed:99:e6:ac:27:0d:84:1d:c7:71:f6:0e:af:
         3b:47:c1:d2:05:53:2e:69:71:dc:28:99:c9:89:87:dd:29:74:
         03:b2:e0:3f:3d:6e:ea:c4:82:66:5f:9f:0e:49:e9:03:17:d7:
         28:45:8f:1e:79:99:8a:c4:10:3c:83:11:34:41:5d:ce:c1:65:
         ec:eb:a2:f4:4f:ae:eb:37:e5:bc:e6:e3:af:00:f6:6c:48:90:
         ac:38:77:3a:e2:8f:8a:cd:d0:ef:34:e5:7b:52:6c:25:be:6a:
         de:c4:ab:d7:df:15:4e:3c:e3:76:61:69:c5:9c:bd:db:f6:05:
         e4:49:5b:7e:0b:67:fc:de:98:8c:d9:3d:f1:89:35:e0:7e:ad:
         63:36:b0:41:a3:66:8f:06:3d:df:15:a8:79:89:51:73:1e:91:
         38:22:02:39:c4:f2:80:50:94:db:07:12:70:59:c8:85:34:0d:
         a6:9c:95:0e:8c:30:a0:c4:5f:2a:3d:4b:a5:d5:cb:00:19:53:
         0e:ce:ec:fb:71:b6:d8:31:66:db:31:93:0b:44:49:c7:16:6c:
         d2:3e:51:89:9e:2f:82:8c:92:09:74:22:03:1c:38:0a:cc:b5:
         b8:08:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:05 2026 by rpki-client