This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/jfhk4LSasdsv5oNazrLR2L8vp1w.asa
File:                     jfhk4LSasdsv5oNazrLR2L8vp1w.asa (raw, json)
Hash identifier:          iwJqwoB3o+vDtOoN6oPxah7dLq5OzsMri1+uy7aa78A=
Subject key identifier:   8D:F8:64:E0:B4:9A:B1:DB:2F:E6:83:5A:CE:B2:D1:D8:BF:2F:A7:5C
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       019AC1D02916358ABCEDA73B537B0226ECF4
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/jfhk4LSasdsv5oNazrLR2L8vp1w.asa
Signing time:             Wed 26 Nov 2025 20:17:15 +0000
ASPA not before:          Wed 26 Nov 2025 20:17:15 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            213451
Providers:                AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c1:d0:29:16:35:8a:bc:ed:a7:3b:53:7b:02:26:ec:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Nov 26 20:17:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8df864e0b49ab1db2fe6835aceb2d1d8bf2fa75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:87:a8:10:54:35:e3:df:81:77:af:89:63:
                    54:7c:e6:3a:aa:f5:2e:db:bd:09:42:12:7f:81:59:
                    0b:2f:64:f3:4f:4f:b7:97:8a:58:81:e6:10:24:c2:
                    00:e9:7e:ea:81:fb:1a:ce:ff:ce:1e:f3:19:89:ae:
                    f3:6b:89:74:fa:e5:63:89:aa:3f:ec:8d:34:c9:3d:
                    dc:c1:db:6a:0f:c4:b5:d8:29:ea:7a:e2:36:d8:bd:
                    cc:66:37:99:00:fa:61:55:75:58:61:4f:e7:f7:42:
                    51:9a:3b:b3:c6:41:ff:10:84:a4:56:1c:55:1d:bd:
                    78:d5:eb:f2:8a:f6:12:3b:90:a6:fd:70:ba:aa:f5:
                    4d:6a:99:ab:24:d2:9d:ec:f2:bc:56:87:5f:d1:b8:
                    83:a3:34:f7:19:f3:4b:49:0a:4e:8d:af:29:db:6a:
                    94:4c:0c:41:69:16:0b:1c:b4:a4:eb:42:12:84:3e:
                    f8:6f:78:c1:60:ba:fe:d5:93:b6:99:48:3c:1a:52:
                    5e:ee:03:3e:51:e1:af:76:a4:ba:7a:1e:4b:f0:ca:
                    ee:ed:63:8c:0f:74:72:41:63:e5:d9:3c:09:4c:5b:
                    07:ab:58:d9:d9:0e:02:8e:7a:cf:63:bb:3e:ce:98:
                    aa:f4:6d:00:51:b0:53:b2:f9:d7:5f:41:dd:2b:35:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F8:64:E0:B4:9A:B1:DB:2F:E6:83:5A:CE:B2:D1:D8:BF:2F:A7:5C
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/jfhk4LSasdsv5oNazrLR2L8vp1w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213451

    Signature Algorithm: sha256WithRSAEncryption
         37:83:94:1d:26:7c:78:1a:9b:8f:f4:74:a3:9c:fa:66:f8:06:
         b9:cc:7a:cf:32:66:88:d0:dc:77:3e:6c:47:79:5d:e3:b1:3f:
         87:d7:61:8e:ad:72:e2:ec:5d:d3:e8:7f:9d:ea:25:37:a2:de:
         2a:ed:5d:55:69:0d:f0:1f:33:c6:00:41:a5:da:f9:46:74:41:
         01:2a:cd:61:81:90:33:5b:fb:4e:ef:ac:ac:4d:29:58:35:f3:
         63:35:94:9b:70:06:d2:10:d2:60:f8:ab:1d:5b:ed:92:de:5e:
         85:00:82:85:a3:1f:17:a6:ba:8f:22:48:13:65:aa:eb:73:1a:
         dd:c0:0e:91:9d:13:6a:9c:ee:03:15:71:ae:41:67:85:0a:26:
         9f:b6:c9:0c:c7:57:f4:ce:5c:6a:a2:d8:ed:46:7c:36:ff:94:
         c7:4b:79:36:77:b9:da:c6:6c:2d:fb:4d:dd:8d:19:d4:7b:88:
         68:07:fc:bb:12:a8:8c:02:89:0f:52:c0:80:4c:b0:97:96:56:
         d2:f6:0e:be:2b:7e:9c:9a:e8:b1:9d:ff:53:52:c7:19:7e:1c:
         f1:d3:78:df:84:a0:dc:2f:6f:17:cb:e1:a5:35:f0:a9:ed:cf:
         fd:d8:05:f3:90:63:11:22:39:8b:9c:3d:82:4e:c2:34:8f:c2:
         c3:63:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:29 2025 by rpki-client