This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/bXyl61NnJFUqVdpbbyJUbKSLOEk.asa
File:                     bXyl61NnJFUqVdpbbyJUbKSLOEk.asa (raw, json)
Hash identifier:          kvt/aU200bfEnw4rYqKdYW9+xb8+wCfFGl6Rty5GK40=
Subject key identifier:   6D:7C:A5:EB:53:67:24:55:2A:55:DA:5B:6F:22:54:6C:A4:8B:38:49
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019AE3DA0B62C08CA7014793B28C856961F1
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/bXyl61NnJFUqVdpbbyJUbKSLOEk.asa
Signing time:             Wed 03 Dec 2025 10:55:08 +0000
ASPA not before:          Wed 03 Dec 2025 10:55:08 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            196610
Providers:                AS: 51531
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e3:da:0b:62:c0:8c:a7:01:47:93:b2:8c:85:69:61:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Dec  3 10:55:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d7ca5eb536724552a55da5b6f22546ca48b3849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:a2:41:da:85:58:88:0e:1a:36:03:9d:38:
                    e7:53:19:fb:53:3d:4e:73:6e:2d:34:96:8b:38:51:
                    eb:62:3e:62:af:10:88:cd:f4:57:4d:99:8a:f5:aa:
                    92:5d:cb:b9:ec:56:92:09:6f:4e:1b:a3:70:6e:91:
                    3b:de:ac:14:21:20:65:71:46:18:d5:ac:02:e8:a8:
                    a9:85:b1:7c:d2:06:53:76:f9:d2:39:c2:72:5d:90:
                    66:69:ac:12:69:99:1d:7e:46:db:36:4e:04:e8:ae:
                    4a:4c:3a:c6:6d:a4:08:a3:1e:a7:08:4b:bc:47:31:
                    e4:b7:4d:0a:7e:3d:ab:fb:9f:f2:16:4f:6c:ce:87:
                    f1:94:43:9c:3b:17:4a:f5:25:71:c1:79:13:7f:29:
                    f5:f7:b6:e4:3f:fc:b9:d8:2b:5e:cd:d3:28:d1:f6:
                    d8:73:e8:ec:15:2f:c4:be:b1:3a:76:4d:2a:e2:bf:
                    22:8f:f4:4f:2e:72:61:16:9c:ef:17:cb:19:e5:5a:
                    b3:7d:ac:7d:cb:bd:55:14:cd:d4:dd:83:c8:4d:b2:
                    7d:3b:22:2b:26:5c:3b:99:64:12:92:fb:a1:32:e5:
                    b8:1a:ce:2c:c0:f8:10:86:93:8d:26:ef:d5:70:69:
                    be:82:06:04:d6:8f:10:fe:9d:36:aa:df:5d:d8:89:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:A5:EB:53:67:24:55:2A:55:DA:5B:6F:22:54:6C:A4:8B:38:49
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/bXyl61NnJFUqVdpbbyJUbKSLOEk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  196610

    Signature Algorithm: sha256WithRSAEncryption
         c6:69:a9:b4:96:1a:a7:47:0b:3a:bd:aa:4f:10:42:d7:0c:96:
         8f:97:c5:50:25:e3:60:74:21:42:90:0e:ac:1a:3e:56:32:02:
         1d:5d:36:80:ec:fe:22:78:18:55:dc:0a:0d:05:f0:c1:f8:5f:
         96:a2:e3:d6:1c:2e:d5:5b:1a:34:40:93:07:92:11:18:ee:db:
         e0:fb:b5:ad:86:3b:68:c4:8e:0b:39:50:ca:7c:7e:13:28:13:
         fc:67:86:79:30:59:8a:e8:95:61:18:e9:82:0e:db:74:49:97:
         d9:3e:90:ba:1e:f9:3d:93:e4:01:50:a1:0a:92:53:66:4d:10:
         52:57:8e:78:bb:ed:31:2e:41:05:12:4a:0d:bb:7d:e3:79:c4:
         a9:76:92:df:b9:c3:50:41:42:e0:ee:8c:38:83:ed:72:1c:ba:
         ee:fe:af:f6:3b:3e:23:f4:6b:c1:6f:eb:cb:db:2f:51:67:c8:
         ad:b9:62:78:5e:77:9b:8c:29:14:68:ad:c6:1f:15:ee:ed:c3:
         08:0e:3d:7f:70:a5:37:36:25:42:70:bf:29:8f:51:74:24:9d:
         11:68:09:90:a0:32:cd:18:21:c1:a2:2f:8f:be:05:79:24:28:
         dd:6b:5e:f9:e3:d1:7d:9b:42:50:3d:20:72:5e:52:a0:82:c4:
         47:07:66:3c
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZrj2gtiwIynAUeTsoyFaWHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjUxMjAzMTA1NTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDdjYTVlYjUzNjcyNDU1MmE1NWRhNWI2ZjIyNTQ2Y2E0OGIzODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO2iQdqFWIgOGjYDnTjnUxn7Uz1O
c24tNJaLOFHrYj5irxCIzfRXTZmK9aqSXcu57FaSCW9OG6NwbpE73qwUISBlcUYY
1awC6KiphbF80gZTdvnSOcJyXZBmaawSaZkdfkbbNk4E6K5KTDrGbaQIox6nCEu8
RzHkt00Kfj2r+5/yFk9szofxlEOcOxdK9SVxwXkTfyn197bkP/y52CtezdMo0fbY
c+jsFS/EvrE6dk0q4r8ij/RPLnJhFpzvF8sZ5Vqzfax9y71VFM3U3YPITbJ9OyIr
Jlw7mWQSkvuhMuW4Gs4swPgQhpONJu/VcGm+ggYE1o8Q/p02qt9d2InbbQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFG18petTZyRVKlXaW28iVGykizhJMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvYlh5bDYxTm5KRlVxVmRwYmJ5SlViS1NMT0VrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMAAjANBgkqhkiG
9w0BAQsFAAOCAQEAxmmptJYap0cLOr2qTxBC1wyWj5fFUCXjYHQhQpAOrBo+VjIC
HV02gOz+IngYVdwKDQXwwfhflqLj1hwu1VsaNECTB5IRGO7b4Pu1rYY7aMSOCzlQ
ynx+EygT/GeGeTBZiuiVYRjpgg7bdEmX2T6Quh75PZPkAVChCpJTZk0QUleOeLvt
MS5BBRJKDbt943nEqXaS37nDUEFC4O6MOIPtchy67v6v9js+I/RrwW/ry9svUWfI
rblieF53m4wpFGitxh8V7u3DCA49f3ClNzYlQnC/KY9RdCSdEWgJkKAyzRghwaIv
j74FeSQo3Wte+ePRfZtCUD0gcl5SoILERwdmPA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:37 2025 by rpki-client