This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/Sje7jsEY6Q5QZ-9f7bnaO9an76Y.asa
File:                     Sje7jsEY6Q5QZ-9f7bnaO9an76Y.asa (raw, json)
Hash identifier:          O4SIoTXA4q+P1Mi3ahhyNTxM+UaORubTrEPP+a97Z0c=
Subject key identifier:   4A:37:BB:8E:C1:18:E9:0E:50:67:EF:5F:ED:B9:DA:3B:D6:A7:EF:A6
Certificate issuer:       /CN=daca83eb1faf9773d350c7dce612ca281484e7fc
Certificate serial:       019B171C9C7C1DB2B971807BA653768C3EDB
Authority key identifier: DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/Sje7jsEY6Q5QZ-9f7bnaO9an76Y.asa
Signing time:             Sat 13 Dec 2025 09:48:29 +0000
ASPA not before:          Sat 13 Dec 2025 09:48:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            204150
Providers:                AS: 215353
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:17:1c:9c:7c:1d:b2:b9:71:80:7b:a6:53:76:8c:3e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daca83eb1faf9773d350c7dce612ca281484e7fc
        Validity
            Not Before: Dec 13 09:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a37bb8ec118e90e5067ef5fedb9da3bd6a7efa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:b8:bb:94:be:fa:2d:38:63:8f:9c:d9:15:
                    89:fd:3f:f3:65:b0:58:e0:bc:64:5d:27:4f:a1:8f:
                    01:cc:90:c6:87:14:5c:33:c3:da:a6:78:47:1f:f1:
                    27:8d:cb:7a:33:00:5a:77:ae:ac:b0:9c:50:86:83:
                    9e:89:3d:90:67:0c:9c:47:f8:90:97:93:c9:ff:09:
                    da:6d:73:9f:8f:6b:5d:c6:08:32:7f:5e:9f:9c:a9:
                    1a:48:c8:84:9c:87:8a:c7:2b:48:66:cd:fd:08:fe:
                    c7:7d:1a:46:37:2c:00:50:d2:a4:8f:ae:9b:2e:65:
                    47:3e:fd:91:f3:51:18:d1:a0:56:ee:2a:bc:16:2b:
                    3b:41:09:a0:c2:c4:4a:c7:ef:6c:f5:de:ab:26:29:
                    93:35:2b:5e:8d:81:5e:72:1d:d3:a0:e3:7b:0a:9e:
                    34:42:e6:63:c9:e8:52:8e:ec:23:1f:89:35:19:71:
                    22:ca:09:c8:2f:eb:90:47:88:83:c3:1c:1d:5b:ea:
                    76:ac:d1:28:ea:05:4a:33:bd:d8:39:9f:47:c0:53:
                    06:dc:4e:82:fa:58:13:b3:da:80:8d:a2:4a:a2:3b:
                    70:cc:c6:44:e7:c5:dd:8a:40:fd:f2:f9:50:35:49:
                    fe:8d:40:c6:0a:39:af:12:fe:09:5e:d5:d8:14:17:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:37:BB:8E:C1:18:E9:0E:50:67:EF:5F:ED:B9:DA:3B:D6:A7:EF:A6
            X509v3 Authority Key Identifier:
                keyid:DA:CA:83:EB:1F:AF:97:73:D3:50:C7:DC:E6:12:CA:28:14:84:E7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sqD6x-vl3PTUMfc5hLKKBSE5_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/Sje7jsEY6Q5QZ-9f7bnaO9an76Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/af2e22-6e8e-4905-9e65-b5eb4c6b7ea8/1/2sqD6x-vl3PTUMfc5hLKKBSE5_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204150

    Signature Algorithm: sha256WithRSAEncryption
         16:66:f1:e6:a8:11:ca:c4:9e:71:8f:69:1f:d3:e6:91:5b:9a:
         34:99:f4:f4:13:7e:40:ae:98:5e:87:a2:76:d2:f9:38:b5:9b:
         e6:16:07:23:0a:bf:78:02:b4:20:59:ac:03:36:03:a9:bf:4c:
         1e:9d:82:dc:a2:28:e7:10:5c:d2:9e:44:88:ec:c7:e2:28:a9:
         e1:9b:7d:84:c6:c0:40:99:3f:59:cc:30:b8:f8:d3:62:e6:e6:
         2f:f3:84:e0:29:a7:6c:a6:9d:95:4b:6c:8d:a8:26:fd:34:f9:
         3c:be:51:ea:07:dc:b9:92:32:42:07:ac:af:68:7e:53:90:67:
         12:60:01:64:67:61:6e:a8:8f:da:53:f2:3f:de:b7:fc:fc:54:
         15:47:76:4e:53:14:21:40:52:e1:dc:22:fd:03:14:17:02:74:
         b4:6a:70:2e:fb:7b:b6:f9:c3:03:e7:f1:7e:cf:7f:3d:a6:24:
         a6:0d:89:fb:cc:14:6c:89:b0:5f:a0:fe:52:fa:a4:15:8a:9a:
         2b:7f:3b:33:1d:09:df:cb:e4:47:0c:42:fb:c1:fc:c6:10:54:
         7e:a4:ba:85:25:ab:57:3f:2e:16:62:76:f0:d2:52:d3:a5:08:
         57:61:22:61:fd:f6:56:5c:e7:b1:67:1d:61:3c:8d:fb:d0:a4:
         81:93:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:43 2025 by rpki-client