This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/tGJHUWGPAj2sNRvmRAxAOhgR5fs.asa
File:                     tGJHUWGPAj2sNRvmRAxAOhgR5fs.asa (raw, json)
Hash identifier:          YRhN0en4GGOE8GeJocO8zzFp1vDVFkOXxMJ7moWGXLc=
Subject key identifier:   B4:62:47:51:61:8F:02:3D:AC:35:1B:E6:44:0C:40:3A:18:11:E5:FB
Certificate issuer:       /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial:       019AEEDE7C6070933EE5D9729D072219870D
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/tGJHUWGPAj2sNRvmRAxAOhgR5fs.asa
Signing time:             Fri 05 Dec 2025 14:15:49 +0000
ASPA not before:          Fri 05 Dec 2025 14:15:49 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            214380
Providers:                AS: 1101
                          AS: 6939
                          AS: 8283
                          AS: 50869
                          AS: 200132
                          AS: 212635
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:de:7c:60:70:93:3e:e5:d9:72:9d:07:22:19:87:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
        Validity
            Not Before: Dec  5 14:15:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b4624751618f023dac351be6440c403a1811e5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:48:4c:3c:56:47:70:a3:17:b3:3f:61:70:
                    fa:8e:9b:27:f4:a6:ad:c0:03:11:e1:e3:7e:84:8c:
                    c6:e9:1c:0c:b6:bb:9e:f9:9c:fc:dc:48:af:44:e8:
                    89:2e:c6:0d:68:33:cb:cf:1a:ac:da:ce:fd:90:de:
                    66:e6:4c:63:3c:68:fe:11:93:d7:e4:7f:fd:05:69:
                    51:71:6d:88:71:99:94:bd:55:ed:05:f1:1c:85:1b:
                    d5:6b:fc:67:4a:44:51:8d:56:ee:11:71:9e:f9:e8:
                    5c:01:52:01:c9:e2:40:3c:f4:72:7d:e9:28:36:2a:
                    87:bc:88:89:66:6f:71:81:36:6a:87:52:35:0e:e1:
                    a8:c1:8a:06:6c:8c:cb:37:e1:7b:ae:1d:bd:05:3f:
                    64:78:62:30:0b:8a:8e:86:8e:1c:64:65:81:56:ff:
                    08:99:f5:4f:97:d1:08:6b:a8:54:86:b3:27:2e:e9:
                    63:04:9c:9f:5e:b8:7e:32:d4:c0:ce:f2:8e:8e:bc:
                    3a:6b:e5:92:37:df:cc:a1:49:c1:b1:b5:7c:c8:f3:
                    45:d6:68:66:9b:b1:ca:b2:d7:a8:3a:40:51:8b:dd:
                    e5:d9:f0:1c:94:6d:6a:b7:84:88:6c:ae:a5:20:de:
                    cd:f5:6f:08:7b:f9:71:e1:37:c0:29:02:72:0b:ac:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:62:47:51:61:8F:02:3D:AC:35:1B:E6:44:0C:40:3A:18:11:E5:FB
            X509v3 Authority Key Identifier:
                keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/tGJHUWGPAj2sNRvmRAxAOhgR5fs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214380

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:5c:6f:68:91:9f:cc:e4:96:75:f5:fd:5e:9b:c6:43:f4:
         b8:b8:d8:7c:b5:f1:84:fc:24:7b:8b:04:e5:84:6d:db:7e:62:
         36:e9:b2:0c:c5:20:09:21:1a:30:15:d7:90:99:30:1b:b8:b7:
         54:a4:27:e9:68:a3:7a:f1:e9:42:84:1a:7f:29:4c:2d:a4:ab:
         4d:e4:38:21:d3:62:30:cb:f4:58:23:e8:f0:f5:bf:10:fa:e0:
         94:b1:51:8f:32:c5:7a:d2:a5:8c:5b:03:d9:2b:2b:a7:25:d1:
         a8:85:ba:ad:d3:2b:63:ba:31:2b:6f:82:1f:e7:7c:9e:bd:7c:
         6f:35:81:1a:eb:5d:9a:ed:53:21:73:f7:df:81:74:0d:00:cc:
         fd:fd:ee:54:30:48:ac:06:0a:70:b8:2b:85:48:15:20:85:65:
         c7:44:66:5a:eb:fd:99:88:b7:84:5b:3c:d8:6e:37:25:c9:62:
         05:f7:0e:c9:c9:12:cc:5b:f2:14:da:7e:bc:b5:28:2a:d3:5d:
         87:9d:38:f9:89:a8:b0:2d:39:42:be:ac:27:5c:76:94:74:75:
         10:b9:0a:65:39:85:02:68:62:4b:be:50:b2:f3:5b:a6:83:42:
         8b:3e:a4:40:ad:6f:0e:b5:43:ef:f6:cc:59:bc:1c:7b:1e:4f:
         01:5e:2f:ff
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZru3nxgcJM+5dlynQciGYcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWY3ODA4MmMwNzI5MmFhYWUyNDBmNmVjZmQzYWZkYmE3
OGI4Y2EwHhcNMjUxMjA1MTQxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDYyNDc1MTYxOGYwMjNkYWMzNTFiZTY0NDBjNDAzYTE4MTFlNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2BITDxWR3CjF7M/YXD6jpsn9Kat
wAMR4eN+hIzG6RwMtrue+Zz83EivROiJLsYNaDPLzxqs2s79kN5m5kxjPGj+EZPX
5H/9BWlRcW2IcZmUvVXtBfEchRvVa/xnSkRRjVbuEXGe+ehcAVIByeJAPPRyfeko
NiqHvIiJZm9xgTZqh1I1DuGowYoGbIzLN+F7rh29BT9keGIwC4qOho4cZGWBVv8I
mfVPl9EIa6hUhrMnLuljBJyfXrh+MtTAzvKOjrw6a+WSN9/MoUnBsbV8yPNF1mhm
m7HKsteoOkBRi93l2fAclG1qt4SIbK6lIN7N9W8Ie/lx4TfAKQJyC6w1RwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFLRiR1FhjwI9rDUb5kQMQDoYEeX7MB8GA1UdIwQY
MBaAFEzveAgsBykqquJA9uz9Ov26eLjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEt
ODgzYjkwY2QxMzRhLzEvdEdKSFVXR1BBajJzTlJ2bVJBeEFPaGdSNWZzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNmZiYmYtNmNkZC00OWI3LThjMjEtODgzYjkwY2QxMzRh
LzEvVE85NENDd0hLU3FxNGtEMjdQMDZfYnA0dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNFbDANBgkqhkiG
9w0BAQsFAAOCAQEAFLJcb2iRn8zklnX1/V6bxkP0uLjYfLXxhPwke4sE5YRt235i
NumyDMUgCSEaMBXXkJkwG7i3VKQn6WijevHpQoQafylMLaSrTeQ4IdNiMMv0WCPo
8PW/EPrglLFRjzLFetKljFsD2SsrpyXRqIW6rdMrY7oxK2+CH+d8nr18bzWBGutd
mu1TIXP334F0DQDM/f3uVDBIrAYKcLgrhUgVIIVlx0RmWuv9mYi3hFs82G43Jcli
BfcOyckSzFvyFNp+vLUoKtNdh504+YmosC05Qr6sJ1x2lHR1ELkKZTmFAmhiS75Q
svNbpoNCiz6kQK1vDrVD7/bMWbwcex5PAV4v/w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:29 2025 by rpki-client