This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/MS76_2ntYKUzBFCdqt8Qshd8Nn0.asa
File:                     MS76_2ntYKUzBFCdqt8Qshd8Nn0.asa (raw, json)
Hash identifier:          ZwV+fZBud2t/cbTI3ChOB9UJvo4rUQVyyHgDI4t5J4U=
Subject key identifier:   31:2E:FA:FF:69:ED:60:A5:33:04:50:9D:AA:DF:10:B2:17:7C:36:7D
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       019B8C02449004A6674C9846A8D2D5B58657
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/MS76_2ntYKUzBFCdqt8Qshd8Nn0.asa
Signing time:             Mon 05 Jan 2026 02:35:17 +0000
ASPA not before:          Mon 05 Jan 2026 02:35:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207113
Providers:                AS: 6939
                          AS: 37739
                          AS: 328475
                          AS: 328578
                          AS: 328858
                          AS: 328977
                          AS: 329101
                          AS: 329183
                          AS: 329535
                          AS: 329539
                          AS: 329552
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:8c:02:44:90:04:a6:67:4c:98:46:a8:d2:d5:b5:86:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Jan  5 02:35:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=312efaff69ed60a53304509daadf10b2177c367d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:a3:2d:7d:9e:4d:6a:f3:8e:29:d8:d7:3d:
                    e7:49:a0:01:98:ee:b1:8d:b7:57:2f:44:df:64:27:
                    ce:72:97:54:86:b3:90:45:bd:f3:a1:c4:d4:07:b3:
                    42:58:ed:9f:a4:67:a8:28:00:01:c3:9e:53:82:d1:
                    0b:d8:5d:e8:86:46:f7:53:6c:f0:ff:8c:d0:04:de:
                    af:ef:4e:e3:45:4d:13:7d:35:d1:c0:84:19:66:e7:
                    f9:57:08:96:e0:a3:96:ec:74:0e:97:63:60:f6:61:
                    0e:9b:d1:0f:5e:3d:94:de:cc:70:32:da:cc:4d:c1:
                    81:30:02:ad:0e:5f:78:19:0a:ec:ed:64:e9:ff:ef:
                    53:80:4a:14:c6:d3:55:91:ad:c0:06:14:81:9f:ec:
                    19:36:34:3c:41:1f:53:75:c0:48:c0:b8:93:92:d2:
                    4d:da:df:fa:ac:06:e5:e1:22:4c:a8:82:2a:72:f6:
                    e5:0b:b9:70:14:4b:33:1d:cb:cb:24:e9:f7:66:98:
                    8c:6d:ca:b3:6f:ab:b1:d7:6f:a2:b2:67:de:8e:2a:
                    9b:81:38:b3:97:29:d0:fe:c0:40:9c:3a:5d:1c:36:
                    7a:92:42:77:5b:05:1e:58:c9:f1:f2:e9:92:8b:6f:
                    26:a7:87:97:6c:f5:cb:73:94:8f:7f:12:3d:d2:33:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:FA:FF:69:ED:60:A5:33:04:50:9D:AA:DF:10:B2:17:7C:36:7D
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/MS76_2ntYKUzBFCdqt8Qshd8Nn0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207113

    Signature Algorithm: sha256WithRSAEncryption
         22:28:71:60:f3:15:e6:77:ec:39:b0:05:1e:ec:0f:04:0f:b2:
         a1:52:0f:cb:2e:f3:bc:57:17:41:6f:f8:88:2c:be:da:e8:5d:
         b6:8e:b4:c2:63:16:3a:4e:a1:7f:bc:46:25:cd:f2:03:31:00:
         be:30:d0:5a:42:09:93:ad:d3:ff:b9:15:12:d2:0c:c1:33:40:
         3d:e8:b3:a2:a3:45:ea:35:e0:25:86:1b:c0:4e:9b:1e:cf:bb:
         1a:53:bb:4d:1b:8f:79:d7:a9:98:0d:7c:7c:dd:29:a7:00:e1:
         7b:45:75:2e:6a:ed:06:1a:a3:6e:22:f3:38:a2:a3:d8:ab:9c:
         71:33:5c:c2:27:95:0e:17:db:92:1e:7a:26:fe:9a:b5:d3:8a:
         90:85:c6:40:77:2b:9d:3f:58:4a:59:52:a9:91:ac:4c:fb:39:
         5c:7b:22:55:f2:86:43:e7:25:d2:24:41:27:12:69:c2:be:d7:
         d6:74:60:20:4c:28:6c:27:0d:00:88:d8:14:5e:3d:68:89:2a:
         50:1f:a4:37:29:fe:38:2c:89:e1:cd:21:e5:e7:63:ac:75:3d:
         e5:6a:d4:da:1d:46:af:89:c7:db:0b:b2:e5:e4:98:97:16:e2:
         44:21:6b:25:02:58:92:d6:66:a7:a7:71:70:c6:0c:b7:05:2c:
         0e:5a:f5:94
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZuMAkSQBKZnTJhGqNLVtYZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWE1MTZjMDZkMTIwZDM3NmU1NzUxMTMxMzRmNDRmZjYy
NWQ4ZTcwHhcNMjYwMTA1MDIzNTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTJlZmFmZjY5ZWQ2MGE1MzMwNDUwOWRhYWRmMTBiMjE3N2MzNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAujLX2eTWrzjinY1z3nSaABmO6x
jbdXL0TfZCfOcpdUhrOQRb3zocTUB7NCWO2fpGeoKAABw55TgtEL2F3ohkb3U2zw
/4zQBN6v707jRU0TfTXRwIQZZuf5VwiW4KOW7HQOl2Ng9mEOm9EPXj2U3sxwMtrM
TcGBMAKtDl94GQrs7WTp/+9TgEoUxtNVka3ABhSBn+wZNjQ8QR9TdcBIwLiTktJN
2t/6rAbl4SJMqIIqcvblC7lwFEszHcvLJOn3ZpiMbcqzb6ux12+ismfejiqbgTiz
lynQ/sBAnDpdHDZ6kkJ3WwUeWMnx8umSi28mp4eXbPXLc5SPfxI90jOZ8wIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFDEu+v9p7WClMwRQnarfELIXfDZ9MB8GA1UdIwQY
MBaAFPeqUWwG0SDTduV1ETE09E/2JdjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgt
MDA2ZDQxNDg3YzQ5LzEvTVM3Nl8ybnRZS1V6QkZDZHF0OFFzaGQ4Tm4wLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgtMDA2ZDQxNDg3YzQ5
LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMpCTANBgkqhkiG
9w0BAQsFAAOCAQEAIihxYPMV5nfsObAFHuwPBA+yoVIPyy7zvFcXQW/4iCy+2uhd
to60wmMWOk6hf7xGJc3yAzEAvjDQWkIJk63T/7kVEtIMwTNAPeizoqNF6jXgJYYb
wE6bHs+7GlO7TRuPedepmA18fN0ppwDhe0V1LmrtBhqjbiLzOKKj2KuccTNcwieV
Dhfbkh56Jv6atdOKkIXGQHcrnT9YSllSqZGsTPs5XHsiVfKGQ+cl0iRBJxJpwr7X
1nRgIEwobCcNAIjYFF49aIkqUB+kNyn+OCyJ4c0h5edjrHU95WrU2h1Gr4nH2wuy
5eSYlxbiRCFrJQJYktZmp6dxcMYMtwUsDlr1lA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:41 2026 by rpki-client