This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/RatTcANG4U3IM7MOV2hXua2pFMs.asa
File:                     RatTcANG4U3IM7MOV2hXua2pFMs.asa (raw, json)
Hash identifier:          USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=
Subject key identifier:   45:AB:53:70:03:46:E1:4D:C8:33:B3:0E:57:68:57:B9:AD:A9:14:CB
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019AD088F7A96DEA305F8058502B62181237
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/RatTcANG4U3IM7MOV2hXua2pFMs.asa
Signing time:             Sat 29 Nov 2025 16:53:48 +0000
ASPA not before:          Sat 29 Nov 2025 16:53:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            61290
Providers:                AS: 6424
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d0:88:f7:a9:6d:ea:30:5f:80:58:50:2b:62:18:12:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Nov 29 16:53:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=45ab53700346e14dc833b30e576857b9ada914cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:42:c9:29:f5:21:45:29:09:1f:93:e7:8c:
                    62:aa:07:dd:d5:db:c6:26:6c:68:b8:16:88:9e:50:
                    8f:80:0f:21:43:f7:fb:d4:26:15:f6:15:2c:7e:b9:
                    88:7e:7a:6f:ac:d8:d1:db:3b:b5:c9:61:30:73:8a:
                    5f:86:3e:cb:c6:be:35:b0:c9:08:be:89:5d:d3:81:
                    95:ed:46:53:74:26:15:44:12:91:27:a4:66:10:60:
                    e9:28:1b:1a:0d:e6:d1:1f:72:8e:1b:25:8b:be:52:
                    09:1d:a5:3f:14:c1:cb:ce:e8:2d:11:fe:98:4e:f2:
                    79:1f:41:cd:0d:6b:38:ef:96:62:c9:70:ef:c4:21:
                    5a:64:83:35:8b:3e:8d:ee:6b:33:0a:76:4f:81:1a:
                    b4:0b:0f:32:a0:82:22:41:15:30:54:d4:af:26:f6:
                    9e:6a:1d:fb:11:30:36:08:cf:3d:27:b6:3d:ca:df:
                    65:3d:c1:11:f7:c9:46:8b:e0:d3:ef:24:02:fe:8c:
                    24:ef:cf:70:97:6a:27:93:5b:71:24:d2:52:e3:28:
                    43:b7:8d:e9:2f:2c:03:e5:ea:49:9e:eb:9c:db:4e:
                    a9:aa:18:c0:8a:f7:26:81:0d:78:d5:73:86:93:1a:
                    6c:8d:7b:1a:a5:ac:06:8b:77:1f:40:ad:c9:f6:98:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:53:70:03:46:E1:4D:C8:33:B3:0E:57:68:57:B9:AD:A9:14:CB
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/RatTcANG4U3IM7MOV2hXua2pFMs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61290

    Signature Algorithm: sha256WithRSAEncryption
         5b:47:ff:cb:5c:1b:f7:39:f5:d6:a5:1a:fe:26:61:1c:89:8c:
         ab:11:fc:a3:20:9b:73:05:aa:7f:3c:25:66:a9:99:38:b7:f7:
         ab:bd:44:67:16:70:3c:a1:50:a0:8d:f5:eb:af:73:52:0b:f4:
         d6:ff:bb:92:05:15:39:56:99:f6:3f:63:8d:b5:14:e6:22:13:
         40:87:f3:e3:95:b8:e0:f3:60:61:9e:11:82:22:a3:a8:b8:d8:
         f1:1f:9c:fc:a9:28:f8:43:03:14:a0:5d:ef:f4:f8:cd:ed:02:
         3a:b1:cc:01:d8:d5:a5:90:c8:ca:a2:99:76:cf:0f:9a:71:c9:
         b4:8e:0c:49:d7:bf:0e:10:19:49:43:e3:67:07:e7:18:3d:6d:
         91:26:03:9e:2c:e3:65:75:8a:9a:68:0c:36:0d:62:af:58:c0:
         b7:b5:aa:9e:df:a6:e2:5b:92:38:86:67:c0:94:40:5f:83:05:
         e2:6d:44:a7:f8:17:c9:a7:42:73:02:76:47:69:4d:c3:d1:d9:
         94:00:fd:84:68:f3:72:2a:d2:0d:94:ad:c7:bc:9f:1a:f2:9e:
         8f:00:d6:42:09:77:21:31:bb:82:38:d0:da:ab:0b:10:30:89:
         ad:9a:96:89:4a:3d:47:e3:cb:60:7b:e2:a7:c7:ff:fe:20:6d:
         bf:94:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:45 2025 by rpki-client