This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/w_c3ITOoCkFf0DnaSmtgq6Rn678.asa
File:                     w_c3ITOoCkFf0DnaSmtgq6Rn678.asa (raw, json)
Hash identifier:          J6tFhX6N1Hura0xZcR4F7V51t3AR4eoZPi1JRBlD4q4=
Subject key identifier:   C3:F7:37:21:33:A8:0A:41:5F:D0:39:DA:4A:6B:60:AB:A4:67:EB:BF
Certificate issuer:       /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
Certificate serial:       019ACADCEFD796D6FCB538E79152E88C8D33
Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/w_c3ITOoCkFf0DnaSmtgq6Rn678.asa
Signing time:             Fri 28 Nov 2025 14:27:48 +0000
ASPA not before:          Fri 28 Nov 2025 14:27:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            216426
Providers:                AS: 206276
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:dc:ef:d7:96:d6:fc:b5:38:e7:91:52:e8:8c:8d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9
        Validity
            Not Before: Nov 28 14:27:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3f7372133a80a415fd039da4a6b60aba467ebbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:46:64:03:38:91:f9:29:8f:ff:e0:6e:0d:
                    5a:76:38:c2:1a:54:2a:e3:7c:a8:63:14:2e:7c:c4:
                    1d:d5:fc:ca:a9:f7:e9:be:60:09:40:65:10:0f:f9:
                    8b:7b:e1:a8:59:b1:64:9d:d0:6b:80:0a:36:aa:3c:
                    57:66:84:04:13:e1:86:0e:09:2c:7f:e7:13:f1:06:
                    6e:d3:52:b0:c4:e1:67:56:7d:01:f6:f6:fe:5f:04:
                    9e:bf:7a:ea:a9:a8:7a:79:6c:d7:d2:ea:80:66:51:
                    e4:00:7d:88:f7:e4:6a:ff:a1:9f:c4:0a:fa:17:23:
                    09:dd:67:1a:d7:b5:20:83:62:83:63:db:fd:53:e5:
                    85:f0:8a:05:42:c6:38:ee:98:e7:8a:0b:4d:77:f0:
                    f8:4c:ef:c7:a1:fc:10:63:dc:b2:14:ec:67:fc:a7:
                    3e:1a:c2:6b:04:f9:81:93:3e:37:25:43:4f:3f:b3:
                    2e:af:e6:12:9f:ea:31:40:56:8a:88:4e:3c:f2:cd:
                    2f:c5:62:27:86:1f:cb:96:df:95:15:3e:c5:29:d3:
                    8a:d0:30:fe:7a:7f:fa:69:77:67:72:3c:b7:32:d5:
                    3b:72:7b:9e:19:4c:86:32:7a:61:5a:8c:18:a8:d4:
                    af:3a:ae:dd:a9:3c:ef:8e:75:30:8f:3e:62:fd:cc:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:37:21:33:A8:0A:41:5F:D0:39:DA:4A:6B:60:AB:A4:67:EB:BF
            X509v3 Authority Key Identifier:
                keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/w_c3ITOoCkFf0DnaSmtgq6Rn678.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216426

    Signature Algorithm: sha256WithRSAEncryption
         65:24:76:85:bd:65:4d:cd:25:da:85:bd:8d:55:7c:3b:89:d9:
         0c:0b:64:7a:62:bf:3b:51:18:d8:01:a8:0b:b1:01:08:59:df:
         04:ad:9e:ae:4d:0f:f9:ad:ea:21:a5:5b:43:f6:17:00:c3:c5:
         d4:67:63:10:6b:1a:4d:19:ca:bf:8c:98:df:66:d7:32:7d:a2:
         5c:c5:4e:05:da:eb:d3:5c:1d:ea:f9:2d:fd:3e:6e:fa:35:12:
         2a:02:84:70:e9:0c:c4:42:25:aa:40:fa:4e:a0:4a:87:cd:90:
         35:3d:eb:8a:9d:1f:7c:25:a6:9d:41:19:73:f2:bd:b7:03:6c:
         4c:16:b5:2c:e7:ee:97:4b:41:41:e9:1e:50:3b:3f:b1:82:cc:
         fb:f7:dc:1f:81:04:1b:9f:28:31:86:f4:6c:67:b3:51:8d:e3:
         78:d1:9a:bd:9e:32:88:91:0a:f1:3d:0b:cf:fc:03:3b:a4:13:
         7a:30:de:eb:ec:24:0c:9e:b0:92:73:c1:0f:26:5e:fe:a8:4d:
         a4:0e:f6:a9:f2:7e:ea:f4:c5:92:f8:11:ab:de:c6:90:5c:3b:
         a8:2a:15:9a:06:b4:2b:4b:a5:53:6e:0e:82:43:ac:85:5e:12:
         5b:92:66:28:bc:69:06:b6:05:26:20:74:d2:d5:de:69:1a:74:
         40:f6:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:37 2025 by rpki-client