This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/6m1Zr_a79xM5w_A5UxoM7pPydiY.asa
File:                     6m1Zr_a79xM5w_A5UxoM7pPydiY.asa (raw, json)
Hash identifier:          mwruC/EYleNBqGOjKp7xRfqBPuAa14ybRpQxed0X5Uo=
Subject key identifier:   EA:6D:59:AF:F6:BB:F7:13:39:C3:F0:39:53:1A:0C:EE:93:F2:76:26
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       019B0415179B08C2FEBC6A480D6CE17D0F25
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/6m1Zr_a79xM5w_A5UxoM7pPydiY.asa
Signing time:             Tue 09 Dec 2025 17:07:29 +0000
ASPA not before:          Tue 09 Dec 2025 17:07:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            1200
Providers:                AS: 1103
                          AS: 4455
                          AS: 6830
                          AS: 12859
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:04:15:17:9b:08:c2:fe:bc:6a:48:0d:6c:e1:7d:0f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: Dec  9 17:07:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea6d59aff6bbf71339c3f039531a0cee93f27626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:64:c2:36:77:cb:b6:8e:e3:c3:3f:47:88:
                    08:74:be:ac:3f:54:d3:ca:4b:9b:2d:d6:45:a8:a7:
                    06:39:fd:cf:0a:6a:90:71:da:a2:4a:72:fb:b3:9e:
                    d3:ee:e9:b6:c7:16:c7:73:4e:16:12:39:21:b5:e1:
                    6a:2e:e2:a7:a5:d9:7b:bb:fd:18:ab:17:d7:80:36:
                    20:a6:69:e1:ce:67:a7:60:c0:b5:b8:d3:51:7e:1d:
                    78:73:53:72:7b:50:2e:df:59:e4:91:09:12:20:5d:
                    02:c1:9f:ec:0f:22:85:04:56:29:e5:2a:77:3c:fd:
                    14:da:41:81:cb:17:a2:83:b6:a3:83:0a:0c:47:d1:
                    56:3f:e2:b7:fa:ec:b6:ce:8b:6e:c6:b6:5b:8c:a0:
                    bc:ca:81:40:34:99:eb:9a:4e:21:e0:b7:a9:d4:3a:
                    58:94:6b:2c:63:dd:c3:ac:99:0e:14:97:29:6d:a2:
                    e9:99:b0:83:9b:74:e0:68:0e:01:b4:64:1c:33:87:
                    da:f6:87:90:21:89:24:1c:0c:20:01:1a:20:11:81:
                    76:3a:af:94:8f:11:27:b7:01:3e:8c:94:be:cd:7c:
                    96:af:c2:c0:75:d8:f4:b2:57:31:69:fa:7d:04:e0:
                    44:31:63:79:24:e4:ea:75:77:bd:5a:1a:0d:3f:b3:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6D:59:AF:F6:BB:F7:13:39:C3:F0:39:53:1A:0C:EE:93:F2:76:26
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/6m1Zr_a79xM5w_A5UxoM7pPydiY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1200

    Signature Algorithm: sha256WithRSAEncryption
         8f:fa:2b:b7:1e:8c:d5:ab:4d:25:7b:b7:06:ef:6b:f4:09:37:
         44:0e:ac:c7:f9:e7:21:14:99:33:03:71:7a:bc:c6:a4:fa:58:
         b6:62:38:f7:16:31:4f:7e:fb:53:e5:6f:e0:a0:bd:fc:4d:fb:
         74:58:49:56:45:a9:21:e1:1a:fb:fc:b7:47:bc:90:60:32:0f:
         3d:2e:ef:83:c6:e3:57:ee:27:9f:f0:ab:f6:80:11:ea:4a:b0:
         0e:e4:1d:2a:90:85:45:41:95:0d:f1:6b:b0:94:f3:5f:80:3d:
         b8:00:ab:61:d0:c3:33:8a:d3:c7:77:68:cd:7d:e2:e8:8a:93:
         1e:10:e1:d6:89:e9:e1:1b:8d:0f:9d:bf:6d:cc:58:68:d8:cc:
         b0:f9:8e:a5:a6:05:2b:bc:13:16:c7:4e:59:aa:49:d0:87:2f:
         b1:a2:8f:7b:c9:ca:37:a7:b3:a2:5b:49:13:62:ae:86:5b:45:
         0f:e9:72:e4:35:41:63:d2:ff:29:1b:6c:e5:63:25:56:25:86:
         38:80:7c:41:ae:64:2a:6c:d6:55:32:85:08:86:3c:86:85:d7:
         a8:fc:4a:2a:65:b5:3d:99:c9:05:9d:21:30:4c:38:c0:0c:24:
         63:ea:fd:7b:19:a8:57:0a:87:f4:3f:e0:89:d3:93:bc:5b:4f:
         9d:d7:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:50 2025 by rpki-client