This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/1-iqnIyKfffTeip77QQglSkGC66k.asa
File:                     1-iqnIyKfffTeip77QQglSkGC66k.asa (raw, json)
Hash identifier:          tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=
Subject key identifier:   FA:2A:A7:23:22:9F:7D:F4:DE:8A:9E:FB:41:08:25:4A:41:82:EB:A9
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019B08426C7850CD8787B77BC2DB425AED65
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/1-iqnIyKfffTeip77QQglSkGC66k.asa
Signing time:             Wed 10 Dec 2025 12:35:29 +0000
ASPA not before:          Wed 10 Dec 2025 12:35:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            205154
Providers:                AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:08:42:6c:78:50:cd:87:87:b7:7b:c2:db:42:5a:ed:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Dec 10 12:35:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa2aa723229f7df4de8a9efb4108254a4182eba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:df:17:56:ca:8d:74:b2:8e:9a:7a:74:d2:
                    4f:3f:57:c5:1e:d8:de:82:d9:38:19:06:8c:80:0b:
                    3c:4a:da:06:8e:76:de:d4:e4:89:54:70:6a:94:4b:
                    1e:50:61:25:74:ca:01:b5:e9:b9:58:0a:e3:d0:a0:
                    c0:69:fa:6e:7a:eb:15:a5:f0:6d:92:f0:79:d2:5c:
                    e4:f4:3e:b5:50:fb:f8:24:89:3d:cd:29:4f:21:47:
                    e7:7e:f6:42:18:f0:b9:e8:82:32:33:72:ec:be:16:
                    b8:89:3a:12:47:cb:e6:b0:7e:bd:53:26:a4:b7:da:
                    9c:df:56:a0:30:e8:ce:03:fc:31:78:ea:6d:07:8d:
                    50:19:4c:88:c8:a5:dc:b7:4b:42:51:3a:c8:7d:5e:
                    78:98:f2:b2:ee:15:a2:ef:14:4b:4a:51:70:f2:95:
                    4d:3c:82:47:d6:61:e1:e8:c4:6a:0b:c1:86:69:5f:
                    33:28:0d:d4:56:5f:b5:29:9a:ad:67:a0:e8:17:26:
                    68:46:94:5e:52:83:40:36:80:65:6e:41:9e:5a:76:
                    15:8b:63:29:0c:f3:6e:10:d7:2b:d6:56:40:17:29:
                    2e:d8:d2:5d:fc:e4:60:20:85:eb:49:4d:6c:09:35:
                    11:10:4d:38:ad:dd:a7:63:5b:50:30:af:8a:19:bc:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2A:A7:23:22:9F:7D:F4:DE:8A:9E:FB:41:08:25:4A:41:82:EB:A9
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/1-iqnIyKfffTeip77QQglSkGC66k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205154

    Signature Algorithm: sha256WithRSAEncryption
         d6:13:2e:3e:56:1b:06:16:2a:63:e9:7f:30:9f:eb:0c:02:11:
         0b:5a:e1:de:75:a9:db:08:ca:b6:6a:78:31:85:26:b6:96:8e:
         01:26:fc:63:f9:b0:f1:f7:01:04:9a:46:94:61:a8:cd:46:58:
         e2:9b:67:7a:bd:47:70:06:44:1b:b3:85:01:2c:ac:b6:b2:e1:
         c0:51:1b:26:81:1d:4b:1e:34:77:26:43:6c:20:96:6e:78:95:
         4f:65:40:fe:45:df:9f:63:4d:38:5f:74:37:23:3a:fc:8f:3e:
         bd:b1:28:59:c1:f5:14:18:6b:d0:79:90:f2:a8:91:3f:9c:41:
         36:cb:62:87:48:8f:b0:93:cb:b8:5f:1d:0e:c7:06:a6:7f:78:
         6d:82:62:2a:9e:27:c9:69:a3:9d:76:51:f7:1d:d6:57:ed:ea:
         10:d4:87:1a:5e:18:3b:a1:8f:b2:43:5a:f0:2c:53:3c:31:e0:
         d4:77:50:02:16:6d:90:66:e7:a3:1b:85:64:5d:86:11:b1:ab:
         91:0c:35:f9:02:1e:55:5e:e1:5a:87:50:dd:f7:6f:3e:dd:0c:
         56:15:be:43:d4:5c:b8:0c:e2:e5:57:56:c6:83:ae:47:ae:97:
         0e:72:43:89:62:56:8b:f1:5c:8a:af:f6:dc:5e:66:94:ac:29:
         6f:f6:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:44 2025 by rpki-client