This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/7La-XtrD4ICECjNRbJUhIiiRnLs.asa
File:                     7La-XtrD4ICECjNRbJUhIiiRnLs.asa (raw, json)
Hash identifier:          wZ15akcqN9GVHDKumXc8j8JGV1U6ZmvopBISyG0HrcI=
Subject key identifier:   EC:B6:BE:5E:DA:C3:E0:80:84:0A:33:51:6C:95:21:22:28:91:9C:BB
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       019ADECDEAA53B5CAAC525A218E4033F5332
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/7La-XtrD4ICECjNRbJUhIiiRnLs.asa
Signing time:             Tue 02 Dec 2025 11:23:48 +0000
ASPA not before:          Tue 02 Dec 2025 11:23:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            200712
Providers:                AS: 1257
                          AS: 1299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:de:cd:ea:a5:3b:5c:aa:c5:25:a2:18:e4:03:3f:53:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Dec  2 11:23:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ecb6be5edac3e080840a33516c95212228919cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:09:b9:d0:8c:8a:bf:4b:7c:1b:4a:c6:1a:
                    15:81:1c:7c:ae:fb:2b:1b:5f:87:85:77:ca:54:1d:
                    ad:6b:73:0b:e3:f0:7d:06:fb:5d:9a:fb:c0:26:f7:
                    e6:89:eb:4e:fa:1c:96:e8:ed:5c:d2:5d:29:5e:2c:
                    ce:04:2c:cd:b2:52:9e:61:60:60:a4:2c:e6:6a:2f:
                    32:5f:a0:3b:a8:c2:87:61:6a:1e:12:2c:86:7a:6a:
                    6b:14:85:b6:a5:15:dc:90:e2:95:bd:23:be:81:cf:
                    43:eb:4e:e5:ca:dd:5d:c3:31:e3:12:58:16:d9:c1:
                    01:d3:23:13:e5:eb:6c:87:fd:b5:c6:af:64:3e:12:
                    f8:36:f6:86:39:3b:07:85:45:ef:3d:50:52:91:ac:
                    c3:fc:d2:6b:45:d6:87:fe:d7:fe:e0:51:61:07:4e:
                    ab:98:11:78:da:73:72:c9:85:94:87:c5:09:4c:07:
                    06:b0:ac:e0:9f:9a:b3:c3:01:9e:3b:56:39:38:8e:
                    42:2b:3f:f7:04:df:35:de:8e:b1:4a:97:55:19:5f:
                    a9:0f:28:91:eb:43:d4:7f:bb:76:91:74:49:cc:2d:
                    97:15:2a:a3:f7:74:10:6c:8a:29:cb:f6:f0:15:7e:
                    aa:e1:d8:f1:95:d6:32:d3:68:27:d7:21:30:5c:cd:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:BE:5E:DA:C3:E0:80:84:0A:33:51:6C:95:21:22:28:91:9C:BB
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/7La-XtrD4ICECjNRbJUhIiiRnLs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200712

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:de:d3:26:1d:80:e4:93:d5:e3:f9:4d:a9:d2:ea:25:fa:
         3f:9d:25:77:56:ea:88:0e:3f:32:d1:80:45:c5:cf:ff:72:61:
         f4:54:b6:e0:01:4e:e9:b8:9b:4c:72:a2:d0:17:b2:9e:45:c2:
         40:7f:4c:16:5f:21:d1:75:f4:25:4d:0c:fe:02:79:02:7e:f9:
         af:64:cf:5e:b9:8f:c3:50:16:be:27:57:f6:ce:cd:bb:ea:6c:
         53:da:15:2c:75:90:fe:c5:cb:c7:39:c4:96:61:cb:97:26:27:
         7c:09:f7:e3:40:c9:46:8f:aa:1c:41:1e:13:23:b7:df:46:68:
         fb:fc:98:6d:3e:4c:6d:35:04:9a:20:6a:39:a9:d5:07:c3:27:
         14:05:31:9d:70:cd:22:73:29:5a:85:d3:4f:8d:62:a2:99:c3:
         89:31:0d:43:33:a6:5c:68:97:cf:fc:f9:fb:44:32:30:26:23:
         f2:3e:d7:83:bf:e3:36:74:6a:d5:59:8f:9b:40:08:21:5a:d1:
         65:92:52:0d:b5:12:18:14:eb:56:e3:2f:cb:14:92:c4:c7:37:
         85:a5:63:fd:21:b4:c7:da:23:11:59:76:18:01:aa:10:3b:79:
         76:1c:7b:d9:1b:76:a7:33:e0:cf:b6:eb:81:d4:f9:51:e6:57:
         a8:56:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:43 2025 by rpki-client