This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/rMUucMZwyHqVe68VNeoN6D-FuLA.asa
File:                     rMUucMZwyHqVe68VNeoN6D-FuLA.asa (raw, json)
Hash identifier:          nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=
Subject key identifier:   AC:C5:2E:70:C6:70:C8:7A:95:7B:AF:15:35:EA:0D:E8:3F:85:B8:B0
Certificate issuer:       /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial:       019AEDE816702B351685B7CB32099F54D3FF
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/rMUucMZwyHqVe68VNeoN6D-FuLA.asa
Signing time:             Fri 05 Dec 2025 09:46:41 +0000
ASPA not before:          Fri 05 Dec 2025 09:46:41 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            209807
Providers:                AS: 6939
                          AS: 34927
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ed:e8:16:70:2b:35:16:85:b7:cb:32:09:9f:54:d3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
        Validity
            Not Before: Dec  5 09:46:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=acc52e70c670c87a957baf1535ea0de83f85b8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:f2:53:a6:d5:cd:fd:05:26:46:bf:4c:93:
                    c2:e7:98:d9:8f:5b:4b:8a:01:21:6b:6d:11:ea:c8:
                    50:ce:d1:5f:3b:9d:ae:c5:de:2c:c8:22:f9:f8:55:
                    47:71:6f:79:7f:fe:d6:00:3f:d7:70:57:88:48:16:
                    7b:32:c0:17:7f:9b:60:99:d4:e3:a3:aa:b8:bc:41:
                    27:e5:dc:38:8b:b6:d8:62:22:c1:79:99:b3:83:55:
                    76:0a:74:ce:5c:d8:40:82:5e:26:88:ae:24:67:db:
                    e8:96:50:0b:42:6e:27:fd:af:41:c9:44:81:fa:cf:
                    ab:3d:8b:69:a1:98:ea:2f:aa:52:61:20:6e:04:14:
                    0e:e2:24:1f:e0:ef:87:c2:b5:0e:79:50:6f:21:09:
                    f1:78:ea:bf:f6:7f:24:62:5d:43:82:ac:a2:67:a9:
                    5f:a3:1b:db:7f:a8:e4:02:c1:67:0e:9e:75:6e:00:
                    b2:4f:da:98:aa:e5:9c:f5:8e:5d:89:4e:5e:0d:14:
                    4c:c9:d9:c4:e0:ea:9e:08:57:87:25:3f:45:d2:07:
                    30:fd:3c:19:3f:12:7b:da:14:20:87:64:ad:58:2d:
                    7d:f4:63:8b:32:23:97:d7:04:67:1b:cb:d2:7d:ac:
                    f7:59:07:3d:d2:b0:47:29:a1:ac:65:b9:7d:89:48:
                    6b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C5:2E:70:C6:70:C8:7A:95:7B:AF:15:35:EA:0D:E8:3F:85:B8:B0
            X509v3 Authority Key Identifier:
                keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/rMUucMZwyHqVe68VNeoN6D-FuLA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209807

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:86:a5:d4:a3:3d:b9:be:2a:f5:fc:39:9e:0e:8b:3e:61:
         e5:a2:84:01:10:27:6a:ab:4a:4e:eb:b3:1d:85:41:d4:3d:b2:
         f3:09:24:65:be:37:68:b6:ba:f0:8f:f6:dd:be:f0:43:2b:98:
         79:06:d3:f6:cc:7f:dc:13:7a:5d:a6:40:5a:5b:8a:4d:d7:fa:
         82:6b:c2:6b:80:68:bb:f8:69:da:93:6d:fb:c5:48:45:ed:5f:
         f6:af:5e:1e:7b:99:bc:35:be:78:90:8f:1b:bc:14:e2:a3:69:
         51:46:af:9f:7c:74:bc:7c:fe:80:13:2a:e2:a5:fe:dd:3e:e7:
         bb:0f:a1:f2:ea:21:ac:b1:6a:50:fe:7c:f7:a3:37:fe:8d:f8:
         7e:10:31:3b:d9:52:8a:9d:ee:a7:c0:79:ff:f6:7a:33:08:be:
         4c:ec:e9:c1:2d:12:82:b8:3b:2f:9f:ee:6c:8b:97:80:6f:ca:
         d3:d2:82:2d:a9:c8:d3:84:dc:68:0a:c7:e8:f9:81:95:d7:ac:
         aa:b0:7f:22:8b:e3:84:6b:10:53:45:be:f8:20:3b:d6:17:b8:
         06:31:ee:8c:54:cd:e9:ca:a2:28:24:13:72:bf:ed:72:54:6d:
         57:7c:5b:b8:48:1f:a8:63:dd:16:78:18:7f:f4:de:6c:d8:88:
         7d:88:e2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:25 2025 by rpki-client