This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/sySDvKNNenjKTqJVkF08wLomsjM.asa
File:                     sySDvKNNenjKTqJVkF08wLomsjM.asa (raw, json)
Hash identifier:          +kidr1/LWB3zdQ+Hae9NW1Zctl0LMXwwKKQuCxYbKjM=
Subject key identifier:   B3:24:83:BC:A3:4D:7A:78:CA:4E:A2:55:90:5D:3C:C0:BA:26:B2:33
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       019B0CE408DEDA460BC9798983D0FDFB1595
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/sySDvKNNenjKTqJVkF08wLomsjM.asa
Signing time:             Thu 11 Dec 2025 10:10:29 +0000
ASPA not before:          Thu 11 Dec 2025 10:10:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            49028
Providers:                AS: 1299
                          AS: 35280
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0c:e4:08:de:da:46:0b:c9:79:89:83:d0:fd:fb:15:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: Dec 11 10:10:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b32483bca34d7a78ca4ea255905d3cc0ba26b233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:a0:80:1c:32:be:65:cc:a2:67:14:35:4c:
                    46:84:cc:5f:f7:c2:d0:72:ea:2a:09:59:29:0c:05:
                    c7:8b:78:b1:42:d5:a0:45:a3:1c:eb:04:d8:2c:35:
                    9e:14:12:09:d4:cc:c3:ee:e1:59:13:51:9b:d4:f0:
                    3c:ee:d4:98:c4:64:22:46:7b:99:73:38:f2:00:78:
                    bb:40:40:7e:9c:39:dd:bb:2d:33:7a:f5:18:8f:ce:
                    56:b5:97:3b:8b:bb:d4:7b:12:1a:84:6b:53:16:62:
                    32:ff:e5:3b:65:3c:15:74:8d:4b:51:01:7f:f6:64:
                    11:e3:e7:8d:6d:25:7d:61:31:ed:6c:18:5e:35:1a:
                    03:3c:c5:b5:29:80:44:cd:c3:0c:3c:0b:9d:72:0e:
                    7a:29:83:d0:5c:82:5a:00:d4:08:27:15:c6:d3:b8:
                    83:7d:fe:fe:dd:08:03:c3:83:46:82:0a:94:85:60:
                    12:da:16:d2:10:0d:56:41:50:2f:f8:77:6c:fd:08:
                    24:f2:b5:70:52:4c:53:a8:5c:ca:77:d4:2f:37:3b:
                    b7:a0:1e:3e:ff:71:a4:7f:78:46:ed:cc:76:b9:a9:
                    a0:df:e7:47:a1:a8:ac:21:4f:c8:33:08:e6:a6:b0:
                    a6:b3:67:7b:72:bd:6e:e0:99:bf:e9:12:05:a3:6f:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:83:BC:A3:4D:7A:78:CA:4E:A2:55:90:5D:3C:C0:BA:26:B2:33
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/sySDvKNNenjKTqJVkF08wLomsjM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49028

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:36:c9:37:78:02:e0:0d:87:f5:ae:af:17:f8:f7:34:95:
         59:38:43:55:42:36:1b:b4:0d:83:38:88:61:bc:53:5c:63:ac:
         98:2c:4d:7c:e6:37:98:5d:74:b8:a7:e2:d5:a5:dc:aa:34:8e:
         8f:44:1e:07:af:63:68:c7:f0:b8:4d:00:73:23:5f:76:39:75:
         14:e3:39:77:5e:6f:5e:6a:a5:52:8e:3b:d3:38:3b:42:e3:d5:
         ee:bc:ee:23:d8:4a:9e:05:22:f2:d7:40:e0:ed:0c:27:7c:6c:
         66:ca:66:d8:68:4f:97:f3:05:7b:01:1b:0a:c9:7f:61:d0:fb:
         fb:5b:45:4a:9e:7a:77:3d:1a:89:19:4e:d0:91:70:1b:f8:e2:
         f8:36:bf:18:7c:78:64:3a:e6:f0:32:ab:93:76:a1:c8:9f:c7:
         fd:3c:3b:07:a2:93:af:f8:59:e0:ec:ee:4b:6a:24:00:5a:6a:
         64:f2:fb:9d:f9:f9:20:9e:b7:de:7a:aa:6e:54:09:a7:9b:b9:
         31:99:66:fa:e6:41:b8:21:53:d4:db:71:c4:02:b3:56:4f:ed:
         c4:2d:40:34:41:60:9a:64:15:44:2f:f2:5b:5e:87:40:2d:63:
         99:16:9f:6b:64:58:c4:f3:f6:6e:c5:ca:4c:26:25:99:3a:89:
         5a:7c:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:35 2025 by rpki-client