This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/uabbgIxj0UiFw-sKaalHgNYbbqE.asa
File:                     uabbgIxj0UiFw-sKaalHgNYbbqE.asa (raw, json)
Hash identifier:          rjowVIcgGT7/vLjHgFZ9OYyJO7JQ4tlEM2FS6fVbQoY=
Subject key identifier:   B9:A6:DB:80:8C:63:D1:48:85:C3:EB:0A:69:A9:47:80:D6:1B:6E:A1
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019AD0872159D5DB74915B96935792A66489
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/uabbgIxj0UiFw-sKaalHgNYbbqE.asa
Signing time:             Sat 29 Nov 2025 16:51:48 +0000
ASPA not before:          Sat 29 Nov 2025 16:51:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            6424
Providers:                AS: 174
                          AS: 1273
                          AS: 1299
                          AS: 6461
                          AS: 6762
                          AS: 6830
                          AS: 141193
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d0:87:21:59:d5:db:74:91:5b:96:93:57:92:a6:64:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Nov 29 16:51:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b9a6db808c63d14885c3eb0a69a94780d61b6ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:4d:ca:2c:68:d3:bf:2b:17:f9:d1:dc:1d:
                    99:10:b9:d7:54:c2:9c:79:04:0b:0f:14:35:06:d3:
                    7c:65:63:e6:7b:70:4c:51:22:54:87:20:a3:5c:e2:
                    8b:84:aa:8b:1f:9a:e4:c2:0b:79:4f:96:98:5b:dc:
                    88:5e:f4:54:e8:8f:4c:98:df:6c:c6:2d:34:b0:b7:
                    6c:19:3c:69:d2:ef:2a:21:0a:07:52:2c:56:54:96:
                    2c:71:e0:7e:2e:7b:8f:04:3b:83:61:13:71:e9:e5:
                    ef:c1:82:2e:3b:8e:40:31:25:6c:56:02:35:48:9a:
                    df:f5:5f:90:4e:fe:72:97:b9:a5:9f:06:a0:1b:6e:
                    d9:3f:f9:a5:11:c3:43:86:5e:08:8c:8b:68:36:39:
                    e7:c6:34:35:3d:5b:94:38:41:58:6d:46:f2:9d:aa:
                    20:6c:15:dc:55:ac:0b:23:89:3d:f2:7c:a1:c5:b9:
                    ec:93:1e:56:27:92:6d:6d:2f:bb:66:08:66:2e:7a:
                    56:1a:1d:12:c3:87:05:50:e6:95:c8:86:23:89:47:
                    bc:12:83:26:b1:92:4a:b7:e1:fa:3f:31:f2:cb:da:
                    e8:41:b3:b1:8e:4f:47:92:a8:0c:cf:f0:11:d4:18:
                    45:37:ab:31:90:1f:a4:64:50:6f:8e:f0:a7:e2:b1:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A6:DB:80:8C:63:D1:48:85:C3:EB:0A:69:A9:47:80:D6:1B:6E:A1
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/uabbgIxj0UiFw-sKaalHgNYbbqE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6424

    Signature Algorithm: sha256WithRSAEncryption
         46:49:73:5a:5b:2f:42:6a:4c:5d:ed:3b:3d:17:e8:77:f2:88:
         e4:b2:c0:b8:41:32:9e:d9:4b:3c:58:c3:c6:ce:c8:0d:af:0f:
         0e:a3:50:68:d6:00:48:17:85:b5:7a:0a:95:70:04:8c:8b:d3:
         59:90:46:49:bb:48:72:eb:e0:29:84:05:f6:b4:ae:f8:c8:fe:
         73:79:42:83:64:74:2c:53:44:e0:8c:e6:18:ab:dd:4d:e0:c0:
         a9:48:57:b6:ba:a1:8b:a0:45:e3:90:4b:81:3c:c7:7b:f5:0a:
         aa:8d:bf:ae:93:01:ba:4d:56:61:e4:d3:d3:76:ac:c0:40:11:
         4f:b3:56:2e:68:d7:94:c4:dc:31:d1:c8:a0:0e:2a:cd:fe:3f:
         4c:2a:43:bd:c1:9a:21:57:41:e1:d7:89:6a:56:09:02:35:79:
         c8:81:3b:a5:ec:87:2d:4e:22:2f:9a:b2:23:0f:c8:00:7a:b0:
         b3:f8:b9:f2:92:2e:87:cd:ff:4c:41:e1:f4:59:46:d2:c9:74:
         c7:9a:2c:2f:0f:8b:bb:a6:80:b5:85:0d:73:43:32:4a:c5:d1:
         b0:7c:7f:ca:99:45:49:1b:6f:42:0a:3a:4e:e2:3e:65:40:a8:
         fd:6e:60:92:d9:52:33:22:de:a6:0b:49:11:3c:8d:44:cc:78:
         c4:83:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:21 2025 by rpki-client