This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/snjhD4ZbdnCjhHGNejLaziB-EQw.asa
File:                     snjhD4ZbdnCjhHGNejLaziB-EQw.asa (raw, json)
Hash identifier:          k4YrVwNF0xC0R0c1Vt2SsaD9GQCIRybl7XtCYC8QQBE=
Subject key identifier:   B2:78:E1:0F:86:5B:76:70:A3:84:71:8D:7A:32:DA:CE:20:7E:11:0C
Certificate issuer:       /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial:       019ADA418D8A48D6A8D40BB0D37AA1514D1D
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/snjhD4ZbdnCjhHGNejLaziB-EQw.asa
Signing time:             Mon 01 Dec 2025 14:12:00 +0000
ASPA not before:          Mon 01 Dec 2025 14:12:00 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            199036
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:da:41:8d:8a:48:d6:a8:d4:0b:b0:d3:7a:a1:51:4d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
        Validity
            Not Before: Dec  1 14:12:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b278e10f865b7670a384718d7a32dace207e110c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8e:0a:b5:f9:c3:56:d6:b6:1c:d7:51:e5:5f:
                    3c:cc:62:0a:30:5e:f4:9d:60:a9:4c:34:7b:a5:4b:
                    a9:9d:d4:4e:1c:2d:df:52:80:fe:59:a5:38:6e:d3:
                    05:6e:06:df:1c:d8:5a:8e:4d:a1:5d:3b:ed:b6:f2:
                    98:63:5e:9c:7c:12:9b:db:71:5e:02:34:ef:bc:4f:
                    0e:09:d6:c4:ce:62:21:64:07:4b:6c:12:5b:d9:a8:
                    e8:0e:9c:c1:00:e8:21:de:30:28:80:92:5e:d1:bd:
                    44:7b:6f:ba:45:53:a3:08:6b:44:08:67:13:24:e4:
                    54:db:16:0f:9d:e3:fa:71:4c:87:79:5a:12:ac:75:
                    50:69:7d:b9:82:c1:fb:b8:66:ab:a3:13:06:b4:2e:
                    84:40:d5:86:76:d3:4b:a9:4c:2b:54:05:e6:1a:ef:
                    0e:d6:24:5d:6e:8b:0a:04:c9:9f:ed:81:b7:32:1f:
                    3f:02:e3:3b:ed:35:b8:13:80:3e:f5:50:1e:fb:94:
                    32:48:02:d3:73:d7:6b:b9:9c:6a:a0:05:cf:14:e4:
                    3d:ab:18:e2:8e:d4:86:6a:22:3f:d3:87:17:17:1c:
                    be:4d:c0:34:92:5e:70:2a:0a:fa:33:de:80:e6:6e:
                    cb:c2:20:0f:89:7a:40:e2:ca:21:e4:07:88:60:b3:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:78:E1:0F:86:5B:76:70:A3:84:71:8D:7A:32:DA:CE:20:7E:11:0C
            X509v3 Authority Key Identifier:
                keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/snjhD4ZbdnCjhHGNejLaziB-EQw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199036

    Signature Algorithm: sha256WithRSAEncryption
         a6:b0:a8:d3:ce:ae:a0:50:b3:74:0c:12:45:2d:5e:72:30:d8:
         75:72:43:29:e7:94:43:fb:73:64:89:5d:cc:76:d2:15:7e:3a:
         4c:ba:24:de:3a:05:2c:bb:6b:de:78:9f:14:a7:e7:2b:ad:48:
         3e:6c:45:48:ce:e8:f7:ba:7a:12:52:13:30:56:f3:75:10:91:
         a8:4b:b8:50:22:8a:fe:53:a5:5c:4d:b4:72:cb:1b:80:9c:1f:
         a4:49:b5:18:b5:06:dd:51:5e:32:0b:d3:69:b3:d0:18:c0:fe:
         8d:46:5e:e4:c9:10:fc:8e:6b:e6:fa:2a:29:cc:97:2b:5b:42:
         94:45:91:6c:40:66:b7:c9:2b:20:50:05:a9:e2:18:88:56:95:
         ae:3b:dd:85:c3:30:31:c6:56:37:3b:64:4e:52:31:4b:c6:b2:
         28:25:f4:12:8d:da:dd:01:15:24:f5:6a:de:33:31:6e:24:cc:
         e0:24:6d:89:5d:9a:1e:51:85:86:bb:41:4e:a8:7f:18:f0:70:
         c7:dc:75:18:f4:7a:4e:a9:c5:e0:2e:ef:93:b2:47:77:34:7e:
         30:a0:25:03:49:ab:b5:ef:28:25:f9:42:3f:bc:9a:0c:f7:d7:
         a2:2c:17:3d:4d:1d:ec:6f:2a:b8:9a:b9:53:81:a1:4c:f3:c6:
         eb:20:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:40 2025 by rpki-client