This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/HcEAU5cTqPJEmLXMwiGNr_6wihI.asa
File:                     HcEAU5cTqPJEmLXMwiGNr_6wihI.asa (raw, json)
Hash identifier:          hixTyZBN/gcUdJ8bLTNx8oz23BaOir6Y8uTZeOcv6W4=
Subject key identifier:   1D:C1:00:53:97:13:A8:F2:44:98:B5:CC:C2:21:8D:AF:FE:B0:8A:12
Certificate issuer:       /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial:       019AE4EBC307AF075A413E6FEB22F6B80B00
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/HcEAU5cTqPJEmLXMwiGNr_6wihI.asa
Signing time:             Wed 03 Dec 2025 15:54:07 +0000
ASPA not before:          Wed 03 Dec 2025 15:54:07 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            206271
Providers:                AS: 60707
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e4:eb:c3:07:af:07:5a:41:3e:6f:eb:22:f6:b8:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
        Validity
            Not Before: Dec  3 15:54:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1dc100539713a8f24498b5ccc2218daffeb08a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:40:ce:6d:c4:1e:e3:4c:e6:fc:7c:69:77:
                    08:43:26:19:83:92:c3:0c:2c:21:0b:7c:0a:62:d7:
                    51:51:3e:91:54:6d:b5:d7:6c:43:89:07:b1:a3:ee:
                    9c:3c:b6:da:c5:9b:52:3d:fc:e3:c0:62:4e:49:2c:
                    19:73:86:36:d3:45:5f:30:70:ed:6d:a3:99:f3:bc:
                    ca:da:9a:83:71:fd:70:d4:74:14:a6:23:c3:cb:42:
                    c3:08:8e:6b:87:8b:4b:aa:f7:83:8a:6f:f0:a4:b9:
                    08:ee:98:e8:2e:6e:6a:4d:84:59:3c:f6:85:e0:08:
                    b0:a5:83:6f:ed:da:c1:87:60:56:48:62:22:8b:e5:
                    dc:2e:52:a0:b6:fd:1e:ac:8e:71:f1:a6:27:a3:06:
                    c3:2e:8f:9a:3d:00:16:ce:d4:77:c7:28:21:e1:f3:
                    90:ca:f1:61:f3:3a:93:a2:88:48:ca:88:97:2e:bc:
                    bc:25:e3:85:f2:c7:c3:97:22:42:53:38:e6:89:ee:
                    7e:ec:ff:7e:2b:7b:ba:e5:eb:f8:4b:65:cc:d2:73:
                    2c:7b:2a:b5:b9:ef:21:66:d3:87:80:01:b4:a1:37:
                    e3:ac:2f:22:ad:aa:00:c8:d4:95:cb:45:f4:7a:61:
                    aa:b9:db:9a:97:dd:67:15:8b:aa:94:28:8d:bc:e5:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C1:00:53:97:13:A8:F2:44:98:B5:CC:C2:21:8D:AF:FE:B0:8A:12
            X509v3 Authority Key Identifier:
                keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/HcEAU5cTqPJEmLXMwiGNr_6wihI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206271

    Signature Algorithm: sha256WithRSAEncryption
         04:85:1c:86:41:fe:23:0b:9b:1c:6c:a5:ae:6b:db:0c:c3:76:
         28:77:b0:c6:08:9c:5a:48:03:f9:48:3b:b8:e6:87:20:84:ce:
         08:fc:aa:66:0a:9d:c6:6c:92:74:47:5a:bc:d7:58:3a:19:cb:
         89:53:37:16:82:09:a2:c2:55:83:f0:aa:e7:41:55:fe:5c:c5:
         39:18:99:ba:14:ae:50:d2:bd:d4:69:fd:62:61:14:09:fc:a0:
         44:35:68:33:cf:17:01:47:7a:e7:cd:66:13:69:07:6f:f7:1e:
         0d:8d:62:95:1a:50:33:aa:43:a9:f5:a8:2c:a0:b5:88:5f:0d:
         95:28:fd:2d:5e:5b:f2:be:38:74:01:b7:40:b4:af:bf:ee:65:
         c7:e5:57:b0:eb:37:b6:c7:39:26:89:73:8c:0e:ac:64:fb:f7:
         02:8b:0a:c4:b8:a4:82:de:30:ec:43:2f:9e:da:53:5b:c8:a2:
         f7:6e:59:03:6c:95:77:e2:bc:40:84:9a:6f:f0:89:3e:3f:d3:
         99:a3:bb:46:c0:e4:64:d5:ad:44:ee:0f:64:43:7e:59:8f:a1:
         72:eb:87:bd:b6:2b:f0:36:4c:1d:d4:c1:8c:80:65:5a:cb:8d:
         ee:37:1d:df:c1:55:9b:ad:f0:b8:72:db:09:1c:0c:fd:b4:35:
         07:53:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:22 2025 by rpki-client