This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/8NckC_oseoG1c4-4ea0CrcpBLdM.asa
File:                     8NckC_oseoG1c4-4ea0CrcpBLdM.asa (raw, json)
Hash identifier:          8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=
Subject key identifier:   F0:D7:24:0B:FA:2C:7A:81:B5:73:8F:B8:79:AD:02:AD:CA:41:2D:D3
Certificate issuer:       /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial:       019ABFF5EA8A6ACB17C45EF7838BE0BCA621
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/8NckC_oseoG1c4-4ea0CrcpBLdM.asa
Signing time:             Wed 26 Nov 2025 11:39:15 +0000
ASPA not before:          Wed 26 Nov 2025 11:39:15 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            205619
Providers:                AS: 16019
                          AS: 28725
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:bf:f5:ea:8a:6a:cb:17:c4:5e:f7:83:8b:e0:bc:a6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
        Validity
            Not Before: Nov 26 11:39:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f0d7240bfa2c7a81b5738fb879ad02adca412dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:4b:4d:37:f4:ed:6a:70:5c:d0:da:72:db:
                    93:b6:5c:78:df:e3:b0:2a:bd:35:af:6b:68:a8:5f:
                    76:cd:95:e1:41:19:ed:0c:32:0f:c1:a3:ff:9e:72:
                    29:85:b2:f3:ff:71:57:1a:7a:6b:6f:12:b4:fc:99:
                    1b:7e:d6:6c:19:3b:04:24:5e:e1:c2:52:2b:99:50:
                    84:0c:47:c8:5b:23:11:ce:6a:6a:db:4c:c1:a5:2a:
                    fd:8c:63:bb:b3:f6:3d:c2:c3:b2:b8:d0:04:e9:22:
                    e1:3d:96:75:ab:0d:47:9f:48:30:0f:7c:44:b0:af:
                    39:11:5f:90:51:d2:dc:42:4a:a6:b8:3a:a9:a8:c1:
                    18:93:b2:7a:04:e8:de:58:d8:d4:e3:b3:da:d8:f9:
                    d3:09:ef:26:04:21:ce:17:f6:b7:f9:8e:2d:d3:35:
                    06:57:81:e4:dd:75:2f:7b:06:53:e9:24:55:5c:62:
                    81:95:4e:c7:dd:9b:04:d4:52:2a:5c:ef:d0:4c:be:
                    0e:46:a7:52:45:8e:3e:59:d0:eb:e5:22:f6:90:8a:
                    15:c3:63:de:33:50:c9:fa:ac:ab:d3:b0:bd:fa:7c:
                    b9:33:fd:b4:5b:8f:6f:17:a1:b0:d9:dd:dc:32:97:
                    4a:7b:57:b0:7d:d4:f5:5b:a8:bd:1a:55:f5:2b:26:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:24:0B:FA:2C:7A:81:B5:73:8F:B8:79:AD:02:AD:CA:41:2D:D3
            X509v3 Authority Key Identifier:
                keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/8NckC_oseoG1c4-4ea0CrcpBLdM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205619

    Signature Algorithm: sha256WithRSAEncryption
         ae:61:92:8e:a6:25:15:55:70:73:17:a3:2b:df:cd:b4:39:ab:
         6f:c6:87:88:88:7b:f6:e4:de:2e:0e:4a:c1:71:75:99:45:62:
         8d:81:f3:e2:1f:bc:5a:60:bd:31:9e:ed:af:bf:9f:40:c2:0b:
         29:68:06:0d:c3:bd:38:06:94:e1:bb:8a:f7:82:46:34:d6:5c:
         70:34:6f:ae:b1:c3:50:76:83:a9:f4:5f:a2:12:68:77:71:28:
         d6:fb:8d:bf:5d:f3:19:b6:66:18:e9:3e:7a:e0:ff:29:9e:93:
         2d:30:6b:96:fb:6a:f2:8a:f7:e6:82:1e:cb:b6:6c:74:dc:52:
         ae:aa:f9:d6:0d:24:27:9a:0c:ae:48:4d:98:7f:69:53:50:64:
         7c:ed:3e:c6:7b:81:8a:03:92:c6:ad:10:85:e7:02:e1:da:b8:
         23:f4:bc:5f:9c:47:64:da:a2:01:2b:a7:df:40:6d:b9:aa:96:
         fb:45:04:1f:65:73:c8:74:9a:69:aa:6e:c5:dc:94:59:75:72:
         4a:a8:43:46:90:45:41:21:df:a2:9b:18:15:c6:25:80:b9:fe:
         b5:b1:f0:bc:ba:e2:ec:58:7f:22:7d:d8:8c:67:3f:17:1f:0f:
         87:aa:e0:27:a4:3d:51:3e:8e:81:c8:02:2d:ae:d3:3d:7a:38:
         5f:29:6e:22
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZq/9eqKassXxF73g4vgvKYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjUxMTI2MTEzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGQ3MjQwYmZhMmM3YTgxYjU3MzhmYjg3OWFkMDJhZGNhNDEyZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7tLTTf07WpwXNDactuTtlx43+Ow
Kr01r2toqF92zZXhQRntDDIPwaP/nnIphbLz/3FXGnprbxK0/JkbftZsGTsEJF7h
wlIrmVCEDEfIWyMRzmpq20zBpSr9jGO7s/Y9wsOyuNAE6SLhPZZ1qw1Hn0gwD3xE
sK85EV+QUdLcQkqmuDqpqMEYk7J6BOjeWNjU47Pa2PnTCe8mBCHOF/a3+Y4t0zUG
V4Hk3XUvewZT6SRVXGKBlU7H3ZsE1FIqXO/QTL4ORqdSRY4+WdDr5SL2kIoVw2Pe
M1DJ+qyr07C9+ny5M/20W49vF6Gw2d3cMpdKe1ewfdT1W6i9GlX1KybtLwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFPDXJAv6LHqBtXOPuHmtAq3KQS3TMB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvOE5ja0Nfb3Nlb0cxYzQtNGVhMENyY3BCTGRNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMjMzANBgkqhkiG
9w0BAQsFAAOCAQEArmGSjqYlFVVwcxejK9/NtDmrb8aHiIh79uTeLg5KwXF1mUVi
jYHz4h+8WmC9MZ7tr7+fQMILKWgGDcO9OAaU4buK94JGNNZccDRvrrHDUHaDqfRf
ohJod3Eo1vuNv13zGbZmGOk+euD/KZ6TLTBrlvtq8or35oIey7ZsdNxSrqr51g0k
J5oMrkhNmH9pU1BkfO0+xnuBigOSxq0QhecC4dq4I/S8X5xHZNqiASun30BtuaqW
+0UEH2VzyHSaaapuxdyUWXVySqhDRpBFQSHfopsYFcYlgLn+tbHwvLri7Fh/In3Y
jGc/Fx8Ph6rgJ6Q9UT6OgcgCLa7TPXo4XyluIg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:43 2025 by rpki-client