This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/k-KxVntGfZQqdYlvvADf0vCCShs.asa
File:                     k-KxVntGfZQqdYlvvADf0vCCShs.asa (raw, json)
Hash identifier:          tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=
Subject key identifier:   93:E2:B1:56:7B:46:7D:94:2A:75:89:6F:BC:00:DF:D2:F0:82:4A:1B
Certificate issuer:       /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial:       019ADB66553A4897938FDFDDB7DF8F23254B
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/k-KxVntGfZQqdYlvvADf0vCCShs.asa
Signing time:             Mon 01 Dec 2025 19:31:48 +0000
ASPA not before:          Mon 01 Dec 2025 19:31:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            211453
Providers:                AS: 1257
                          AS: 12552
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:db:66:55:3a:48:97:93:8f:df:dd:b7:df:8f:23:25:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
        Validity
            Not Before: Dec  1 19:31:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93e2b1567b467d942a75896fbc00dfd2f0824a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:dc:8b:d7:bd:51:51:bb:8d:fe:cf:bc:52:
                    5a:f8:21:75:cf:48:92:07:be:e1:74:18:a3:9f:ff:
                    d6:d1:e3:c2:fa:9d:75:86:e4:18:57:1e:ca:77:00:
                    ac:98:be:54:8e:d6:b4:2f:95:2f:cd:05:59:12:a7:
                    b0:bc:e6:16:39:b6:48:eb:bd:63:88:90:c9:61:b4:
                    7b:4a:4a:49:88:ad:f6:15:7f:e1:75:3f:e9:4f:8c:
                    06:44:66:41:de:7c:d6:0c:e5:40:e2:72:33:2b:e4:
                    cc:91:25:6e:87:20:5f:5a:11:8a:c1:0d:b1:2b:f1:
                    17:9e:2f:79:33:c5:3d:a3:dd:9b:63:cd:7a:ff:10:
                    9c:a4:5b:de:61:9a:bd:33:ae:06:53:3f:2a:a2:69:
                    3f:cc:91:2b:86:18:71:da:e3:eb:01:2a:65:d8:33:
                    e9:46:66:23:ae:08:d9:17:0d:8c:87:e1:00:40:98:
                    3f:b4:9e:8f:2e:01:5f:c9:2b:bd:bc:40:27:65:a6:
                    30:26:24:81:11:09:4c:f8:e4:b7:ff:73:ff:08:01:
                    42:ab:af:a9:70:44:57:f6:a5:a2:80:d4:e9:43:44:
                    db:4f:30:cf:28:75:8b:8b:99:d0:1e:ad:7d:b8:e8:
                    c6:63:ad:d6:39:e4:72:59:c3:bd:6d:bd:13:d1:15:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E2:B1:56:7B:46:7D:94:2A:75:89:6F:BC:00:DF:D2:F0:82:4A:1B
            X509v3 Authority Key Identifier:
                keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/k-KxVntGfZQqdYlvvADf0vCCShs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211453

    Signature Algorithm: sha256WithRSAEncryption
         90:6f:33:07:c9:1e:d7:e3:37:6d:e0:d5:af:a4:b5:b8:09:04:
         4d:c0:29:7f:00:8a:89:6d:9c:a2:14:7d:27:cf:0e:51:95:43:
         9d:89:a4:be:cc:0b:c4:67:c9:54:b1:4f:f6:38:2f:fc:fb:ad:
         74:55:2c:7a:a4:f7:1d:73:7e:b4:e8:09:0a:06:4a:d6:69:3e:
         80:78:67:1b:a1:e5:f8:c0:cb:18:c3:22:7e:0b:1d:7b:45:55:
         94:f9:bb:62:c7:5c:2b:fc:76:52:b9:e1:70:6f:65:1c:78:27:
         1e:0e:51:d9:34:c1:9f:c0:e6:5b:2d:ee:f5:2d:52:b3:3a:88:
         98:2e:86:2b:31:db:81:37:cc:76:e2:d0:4e:1d:df:36:cb:b1:
         c5:09:39:26:ac:ce:be:7e:4e:a2:51:75:0f:8f:1f:e6:d8:ab:
         af:70:28:85:5e:7d:2c:ac:9b:60:f8:d3:be:c2:37:87:64:a8:
         54:c2:a4:70:92:1f:39:70:29:6a:bb:9a:90:a7:96:57:eb:2e:
         96:04:c6:01:54:47:8b:e2:ea:50:a8:13:5a:32:21:1a:59:a4:
         2d:a6:c9:00:1f:4a:c1:78:fd:b5:81:48:86:16:3f:db:41:ce:
         1b:f4:3d:05:cb:a4:21:ab:bd:8c:b8:81:78:bf:27:ce:32:f1:
         ac:69:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:39 2025 by rpki-client