This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/2jqEixEfH9W4ryTrv4L_xGNFOKw.asa
File:                     2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (raw, json)
Hash identifier:          hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=
Subject key identifier:   DA:3A:84:8B:11:1F:1F:D5:B8:AF:24:EB:BF:82:FF:C4:63:45:38:AC
Certificate issuer:       /CN=f177817124f20772743bd30594a8853b2bdec6aa
Certificate serial:       019AF87CF305EE6145A318A56709B36C4E67
Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/2jqEixEfH9W4ryTrv4L_xGNFOKw.asa
Signing time:             Sun 07 Dec 2025 11:05:29 +0000
ASPA not before:          Sun 07 Dec 2025 11:05:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            49935
Providers:                AS: 174
                          AS: 702
                          AS: 1273
                          AS: 1299
                          AS: 2602
                          AS: 2611
                          AS: 2906
                          AS: 2914
                          AS: 3257
                          AS: 3303
                          AS: 3356
                          AS: 3491
                          AS: 3856
                          AS: 4455
                          AS: 5432
                          AS: 5511
                          AS: 6453
                          AS: 6461
                          AS: 6641
                          AS: 6661
                          AS: 6696
                          AS: 6762
                          AS: 6774
                          AS: 6848
                          AS: 6939
                          AS: 7018
                          AS: 8075
                          AS: 8218
                          AS: 8220
                          AS: 8368
                          AS: 8632
                          AS: 8674
                          AS: 8708
                          AS: 9002
                          AS: 9008
                          AS: 9009
                          AS: 9031
                          AS: 9208
                          AS: 13002
                          AS: 13150
                          AS: 13335
                          AS: 15965
                          AS: 16276
                          AS: 20940
                          AS: 23764
                          AS: 24611
                          AS: 29467
                          AS: 32934
                          AS: 34019
                          AS: 35219
                          AS: 39686
                          AS: 39923
                          AS: 47377
                          AS: 47957
                          AS: 48152
                          AS: 48185
                          AS: 48408
                          AS: 50083
                          AS: 50309
                          AS: 56665
                          AS: 62044
                          AS: 199095
                          AS: 199524
                          AS: 199670
                          AS: 201205
                          AS: 210834
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f8:7c:f3:05:ee:61:45:a3:18:a5:67:09:b3:6c:4e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa
        Validity
            Not Before: Dec  7 11:05:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=da3a848b111f1fd5b8af24ebbf82ffc4634538ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:8e:15:72:8c:87:b3:20:66:46:50:76:9a:
                    45:5d:09:93:ac:39:c6:09:dd:bd:b3:07:09:c7:29:
                    95:e7:86:af:92:6e:4c:00:43:87:8a:84:b1:f4:5c:
                    bd:69:90:62:b7:04:6b:cb:be:d6:64:a2:ef:7d:2d:
                    8b:af:11:0a:b4:e2:e0:fc:78:c1:35:94:82:82:99:
                    ee:75:da:1b:84:0d:3e:98:ff:ec:58:7a:3a:c0:31:
                    96:59:2e:d4:c9:ce:c9:56:43:52:f0:7b:76:2c:d1:
                    04:e0:c4:a5:88:fe:6b:39:51:ac:41:7b:3a:ea:50:
                    16:fb:82:c4:5e:0f:59:96:85:a6:af:9b:f9:62:dd:
                    26:ab:76:92:b4:31:b3:0a:da:6d:87:eb:d7:f1:69:
                    5b:4f:3a:92:d0:a2:5e:b5:73:5e:fb:8d:57:aa:dc:
                    d3:7d:36:52:36:ad:c6:ad:5f:d0:ae:45:94:92:d2:
                    9d:0d:cc:6a:37:e2:19:da:8f:72:6f:02:d9:02:1a:
                    3d:3d:eb:7b:39:c8:6a:cd:0e:ef:68:61:bf:f9:5f:
                    3b:50:9f:23:9f:90:b1:42:e8:7f:fd:3b:e3:9b:80:
                    51:3d:30:8c:d2:29:6f:57:26:cb:e5:25:a9:68:34:
                    07:13:7c:9f:49:3d:b7:cc:6c:be:fa:72:70:64:92:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:84:8B:11:1F:1F:D5:B8:AF:24:EB:BF:82:FF:C4:63:45:38:AC
            X509v3 Authority Key Identifier:
                keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/2jqEixEfH9W4ryTrv4L_xGNFOKw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49935

    Signature Algorithm: sha256WithRSAEncryption
         48:7e:a4:3b:71:65:56:25:81:1a:ac:c6:72:5e:d4:a2:ca:60:
         b1:66:67:d3:b0:d5:fc:88:f9:05:83:f0:32:ad:9e:d1:23:da:
         2b:81:02:b4:f2:c6:8c:08:1e:e3:77:18:49:e2:39:46:4d:41:
         05:9c:79:0e:c2:cb:05:b2:cb:4d:2a:c1:fa:5f:2c:d9:7a:1e:
         e0:a1:74:dc:d3:c1:24:61:b3:b9:50:9b:34:88:0f:51:b6:d7:
         aa:5e:5f:d8:74:46:01:68:e7:11:54:58:3f:9f:c7:c8:63:5c:
         ea:5d:c8:44:70:83:42:66:da:d2:94:7f:e2:80:33:7c:62:c6:
         46:fe:cc:46:70:03:60:17:0c:ed:bf:9e:75:5e:44:cb:a9:57:
         c8:8f:06:1d:bf:d2:9d:6d:c9:b9:af:30:eb:dd:9c:ab:95:90:
         8d:d4:91:f4:ad:59:e3:f3:d9:a5:07:9c:43:00:5d:c7:1a:69:
         cb:4f:0b:30:a5:e4:c8:a6:7d:09:57:4b:6b:ac:89:9d:f7:28:
         89:f4:f5:d3:28:64:5d:2c:4a:f0:5a:8e:f3:a4:e1:5c:8d:e5:
         38:be:1d:9c:ae:95:2b:69:c9:f8:54:1d:54:cf:96:61:95:af:
         c2:07:44:a4:a9:32:47:fd:d4:45:9b:34:c4:aa:d3:7c:d5:47:
         71:d6:18:a8
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZr4fPMF7mFFoxilZwmzbE5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk
ZWM2YWEwHhcNMjUxMjA3MTEwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTNhODQ4YjExMWYxZmQ1YjhhZjI0ZWJiZjgyZmZjNDYzNDUzOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+OFXKMh7MgZkZQdppFXQmTrDnG
Cd29swcJxymV54avkm5MAEOHioSx9Fy9aZBitwRry77WZKLvfS2LrxEKtOLg/HjB
NZSCgpnuddobhA0+mP/sWHo6wDGWWS7Uyc7JVkNS8Ht2LNEE4MSliP5rOVGsQXs6
6lAW+4LEXg9ZloWmr5v5Yt0mq3aStDGzCtpth+vX8WlbTzqS0KJetXNe+41XqtzT
fTZSNq3GrV/QrkWUktKdDcxqN+IZ2o9ybwLZAho9Pet7OchqzQ7vaGG/+V87UJ8j
n5CxQuh//Tvjm4BRPTCM0ilvVybL5SWpaDQHE3yfST23zGy++nJwZJK4qwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNo6hIsRHx/VuK8k67+C/8RjRTisMB8GA1UdIwQY
MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt
NjI1NDIyMjgyOTFjLzEvMmpxRWl4RWZIOVc0cnlUcnY0TF94R05GT0t3LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj
LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDDzANBgkqhkiG
9w0BAQsFAAOCAQEASH6kO3FlViWBGqzGcl7UospgsWZn07DV/Ij5BYPwMq2e0SPa
K4ECtPLGjAge43cYSeI5Rk1BBZx5DsLLBbLLTSrB+l8s2Xoe4KF03NPBJGGzuVCb
NIgPUbbXql5f2HRGAWjnEVRYP5/HyGNc6l3IRHCDQmba0pR/4oAzfGLGRv7MRnAD
YBcM7b+edV5Ey6lXyI8GHb/SnW3Jua8w692cq5WQjdSR9K1Z4/PZpQecQwBdxxpp
y08LMKXkyKZ9CVdLa6yJnfcoifT10yhkXSxK8FqO86ThXI3lOL4dnK6VK2nJ+FQd
VM+WYZWvwgdEpKkyR/3URZs0xKrTfNVHcdYYqA==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:36 2025 by rpki-client