This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/dKUSVy6IdXXRjgtpigNGU0J9jeU.asa
File:                     dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (raw, json)
Hash identifier:          CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=
Subject key identifier:   74:A5:12:57:2E:88:75:75:D1:8E:0B:69:8A:03:46:53:42:7D:8D:E5
Certificate issuer:       /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial:       019B2DA64378A8AFB5BD59532B2AD9132473
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/dKUSVy6IdXXRjgtpigNGU0J9jeU.asa
Signing time:             Wed 17 Dec 2025 18:50:29 +0000
ASPA not before:          Wed 17 Dec 2025 18:50:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            198275
Providers:                AS: 205235
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:a6:43:78:a8:af:b5:bd:59:53:2b:2a:d9:13:24:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
        Validity
            Not Before: Dec 17 18:50:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=74a512572e887575d18e0b698a034653427d8de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6e:d0:e6:95:d7:a0:2f:d1:06:41:ad:e2:27:
                    77:b5:d9:f4:77:fe:ab:2c:11:46:fa:ba:e2:9f:6e:
                    fb:b4:48:a0:6c:83:35:20:8a:e1:f7:1a:e1:45:68:
                    df:1e:89:7c:43:90:c8:9b:93:29:10:7a:52:ed:a8:
                    9f:cb:db:ae:02:2d:f2:9b:38:72:f4:d8:fa:ab:76:
                    36:ae:68:dd:ff:2f:48:a1:b2:42:c6:04:3e:9b:2d:
                    98:b6:63:b2:86:a0:7f:61:f4:aa:55:57:5e:49:08:
                    1f:88:8a:eb:4d:1f:7e:8e:25:f8:12:c5:43:fb:cb:
                    41:5a:b2:5c:3b:ec:63:8c:80:f4:25:38:13:24:76:
                    d7:1d:28:4b:9d:cf:00:01:1b:a4:ac:ac:fd:79:6e:
                    2b:06:d6:75:03:aa:b1:e3:ba:96:78:52:25:f4:07:
                    5e:d8:dc:9b:9b:b9:a7:3c:27:61:5f:54:12:c3:e7:
                    11:e9:67:8d:ff:e4:86:fb:23:d9:f8:23:97:3f:1d:
                    a0:2f:f0:b9:86:26:6e:e7:0b:02:e0:db:be:8f:6d:
                    ca:22:3d:fe:73:46:79:3c:b6:9f:10:c8:49:b5:77:
                    aa:2d:98:a7:cb:93:53:a7:14:b7:88:5f:cc:4f:49:
                    80:07:dd:ac:66:d5:a9:e8:a7:28:fc:ab:33:9f:23:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A5:12:57:2E:88:75:75:D1:8E:0B:69:8A:03:46:53:42:7D:8D:E5
            X509v3 Authority Key Identifier:
                keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/dKUSVy6IdXXRjgtpigNGU0J9jeU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198275

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:47:93:c1:d6:c7:27:2c:9b:ee:ca:ce:61:d1:53:80:11:
         84:b5:b8:e3:66:1e:a9:dc:96:fa:79:0c:6c:86:9c:81:5d:e0:
         fc:f4:e1:da:7d:32:69:3d:1e:3e:6c:7a:05:b3:1c:9e:96:f6:
         22:9d:37:f1:b5:2e:2a:95:53:e0:94:53:93:d2:5a:16:69:86:
         96:46:d2:85:20:c2:59:69:46:65:11:a6:5c:76:33:08:1b:a9:
         cf:89:9e:cd:4f:b3:58:15:c9:d5:cb:28:a9:4a:40:75:c2:33:
         6d:df:be:74:68:0f:7c:ab:8b:d2:ef:29:d7:e7:e4:85:81:61:
         06:6f:87:8b:5d:cd:40:19:4a:1a:3b:2f:db:b4:4f:56:e5:68:
         a2:de:e1:c3:c1:50:bb:2c:82:0d:6b:c9:2d:1f:a2:7a:ae:2c:
         9d:24:2b:1e:65:64:1a:68:bd:c4:24:c9:76:b9:6f:1c:c1:89:
         03:0f:ec:9c:39:fa:f2:36:a3:35:79:cb:10:1b:59:28:bb:44:
         3a:5d:65:58:e5:47:df:16:5b:8b:4c:c5:64:3d:77:b6:8c:ca:
         03:9f:2b:f1:b7:6b:dc:9d:e4:f0:bf:b6:45:83:88:5f:7e:4e:
         f3:97:4a:6f:b1:20:8b:2b:51:93:42:0d:48:20:dc:76:e2:b0:
         5c:a2:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:03:12 2025 by rpki-client