This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/FSxkv144AbC5PzM8dG4BNoPhaic.asa
File:                     FSxkv144AbC5PzM8dG4BNoPhaic.asa (raw, json)
Hash identifier:          03r5BEM2yZSr1vAPxFAZ56oxX+2rQMHlRynV2W59QMA=
Subject key identifier:   15:2C:64:BF:5E:38:01:B0:B9:3F:33:3C:74:6E:01:36:83:E1:6A:27
Certificate issuer:       /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial:       019B2751C7EA0AE43F392CB24243DB7B9FB4
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/FSxkv144AbC5PzM8dG4BNoPhaic.asa
Signing time:             Tue 16 Dec 2025 13:20:29 +0000
ASPA not before:          Tue 16 Dec 2025 13:20:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            43397
Providers:                AS: 42184
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:51:c7:ea:0a:e4:3f:39:2c:b2:42:43:db:7b:9f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
        Validity
            Not Before: Dec 16 13:20:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=152c64bf5e3801b0b93f333c746e013683e16a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:2f:41:32:16:de:59:3e:41:97:b9:67:63:
                    95:ca:f3:aa:24:b9:53:bf:9e:4b:54:97:f5:bc:c9:
                    eb:f5:31:f4:e5:94:04:cb:d5:01:ff:02:01:33:c9:
                    e3:64:3a:12:58:e2:f0:a5:97:f6:d3:6e:8c:9a:bc:
                    9b:d8:bb:58:ed:51:a6:45:93:c3:92:66:9f:67:06:
                    32:a7:9b:f9:5c:06:c9:da:7e:5a:22:b2:a4:72:dd:
                    e1:21:2e:74:4e:50:ba:00:30:04:16:36:44:ee:67:
                    86:57:76:b6:ee:b8:e2:0a:63:18:20:9d:e1:a7:3d:
                    02:f0:03:c6:07:ce:f0:96:f3:99:16:d1:96:fa:c7:
                    0b:87:b3:32:0d:08:75:16:25:34:10:8d:86:3b:cd:
                    4d:bf:d3:a5:3a:00:37:f1:c7:22:ef:48:01:a3:f6:
                    c5:10:f5:e0:d6:35:5d:00:60:35:11:81:35:f2:e2:
                    53:53:83:c8:c9:fc:83:43:53:4b:d0:27:65:b3:07:
                    7f:eb:65:89:be:7b:96:8a:cf:09:ca:2d:3e:9a:3d:
                    f2:a1:c0:2d:52:ca:72:fe:77:ea:56:9e:60:82:a7:
                    ed:53:02:2c:9a:fd:f3:16:01:3a:26:9f:6b:46:b8:
                    aa:7c:c5:c7:38:be:3f:17:d8:fd:44:57:9c:ce:0f:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2C:64:BF:5E:38:01:B0:B9:3F:33:3C:74:6E:01:36:83:E1:6A:27
            X509v3 Authority Key Identifier:
                keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/FSxkv144AbC5PzM8dG4BNoPhaic.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43397

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:fd:54:c9:0e:7f:c3:75:49:9c:37:4d:21:1f:f0:4d:21:
         9c:32:81:53:83:9d:a3:cf:a9:67:34:e3:cf:94:16:9c:a4:1d:
         15:87:c9:7e:1d:50:38:20:c5:53:40:b1:07:fc:34:ba:2b:fe:
         dc:c0:ee:3c:38:91:9d:fa:30:31:10:73:ea:75:7a:f3:c0:fe:
         00:ee:a1:bb:c0:c7:59:02:e5:57:1e:f0:b2:e1:ba:66:30:2b:
         45:24:e5:ca:72:6e:26:29:4c:10:cf:ba:47:4f:5d:b9:c4:10:
         b4:68:65:58:0b:86:2e:fd:62:99:fe:bd:22:7f:9a:7a:8b:b6:
         da:54:9c:15:7c:5a:b6:57:6a:ed:04:98:74:1f:96:fb:c3:1d:
         ef:14:72:80:3a:46:0e:eb:2f:72:66:a1:42:6f:7b:55:d1:44:
         ed:4f:bc:5a:04:d7:92:5d:e4:3e:8c:7d:07:d1:c0:f2:ff:68:
         78:1c:a3:fe:4d:1c:6e:f6:db:89:f2:c6:01:e6:74:ee:77:58:
         b8:01:07:0d:de:14:21:36:90:1e:f3:bd:e1:5e:98:28:0e:fc:
         ea:a3:7f:72:f6:f8:1d:6c:12:ec:ab:a2:b2:3d:d9:a5:42:ab:
         d1:13:49:50:0b:a4:d7:92:9a:68:42:93:47:24:a2:5d:c3:d9:
         af:fd:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:45:06 2025 by rpki-client