This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/fScugB5JXQAioLuHQ_l8vSs_TBk.asa
File:                     fScugB5JXQAioLuHQ_l8vSs_TBk.asa (raw, json)
Hash identifier:          gOi3z3VxhGRetLAWgtZKWsOK7pO5qIAmzhI/+alUIvY=
Subject key identifier:   7D:27:2E:80:1E:49:5D:00:22:A0:BB:87:43:F9:7C:BD:2B:3F:4C:19
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       019AFE0AC46F37BD261978088512B788C0BD
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/fScugB5JXQAioLuHQ_l8vSs_TBk.asa
Signing time:             Mon 08 Dec 2025 12:58:29 +0000
ASPA not before:          Mon 08 Dec 2025 12:58:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            199422
Providers:                AS: 174
                          AS: 39801
                          AS: 57734
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fe:0a:c4:6f:37:bd:26:19:78:08:85:12:b7:88:c0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: Dec  8 12:58:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7d272e801e495d0022a0bb8743f97cbd2b3f4c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:0f:46:38:d4:7e:3a:68:4c:d8:36:4c:8c:
                    75:83:9b:c0:07:8b:26:25:3f:2d:57:f7:cd:7c:e7:
                    a2:a4:12:39:d7:f9:e2:0f:b7:7f:cb:63:c7:9c:67:
                    25:60:49:9d:35:17:cc:72:ab:39:38:f1:78:32:03:
                    bd:5b:dd:cd:45:f3:af:fa:28:74:e9:a7:8d:ae:be:
                    c9:40:d8:e0:3f:49:fc:a8:45:1f:c7:fd:41:bd:49:
                    ef:fa:04:49:a9:09:4d:6c:50:33:b9:19:ab:13:4c:
                    84:b8:e4:f8:e9:70:c3:d9:ef:0d:91:bc:c9:1c:02:
                    d2:b6:77:63:a6:f0:29:b6:c8:fa:9a:9a:25:87:5b:
                    f0:fe:f3:06:87:98:c0:04:2f:91:a1:f8:58:64:6c:
                    73:e4:94:e1:72:22:09:fc:50:ee:87:49:1b:ee:ab:
                    5f:39:f9:d4:9d:45:68:9b:da:65:9f:ea:21:11:e5:
                    14:be:3d:de:1e:d8:5f:f2:f1:65:d8:e1:53:be:5b:
                    0a:0b:51:f4:05:53:53:14:70:60:e8:2e:4b:c2:3c:
                    68:82:47:28:2b:ea:9e:39:d8:0d:61:53:62:76:07:
                    05:14:30:20:ee:1b:c0:38:be:a5:f1:9c:63:fe:19:
                    de:a7:5b:b8:eb:fe:57:4c:21:0c:41:50:7d:4d:b5:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:27:2E:80:1E:49:5D:00:22:A0:BB:87:43:F9:7C:BD:2B:3F:4C:19
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/fScugB5JXQAioLuHQ_l8vSs_TBk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199422

    Signature Algorithm: sha256WithRSAEncryption
         cb:e4:d9:60:06:6a:0f:2a:81:6d:6f:c6:d0:bb:f1:37:ab:ac:
         d3:68:e1:1b:98:b9:01:9c:a7:e5:cd:2a:96:7a:ce:30:39:a0:
         9d:46:fe:1c:f6:39:36:6b:9d:9e:2e:61:95:0c:3b:8c:43:4e:
         82:f5:9b:56:34:91:51:71:7d:e8:c1:ae:54:34:d4:d4:c7:e0:
         d4:f6:a2:b1:44:79:ae:ea:c8:63:c8:48:8f:42:69:b2:84:02:
         2e:10:fc:71:2a:ea:b4:a7:5a:d9:e3:3b:4f:8f:fb:57:f2:37:
         91:2b:26:3c:42:26:09:95:fb:80:91:4c:0b:f7:09:5b:a8:30:
         2d:ac:20:b5:1e:6d:40:ec:2b:70:fe:58:34:58:19:b2:b3:84:
         4e:46:87:24:5e:d4:90:d2:8b:6c:7a:a5:ee:c4:d3:a0:11:c4:
         09:4d:46:66:79:18:97:73:e0:4b:4a:b4:cf:fd:aa:ce:19:85:
         e2:69:9f:ee:29:38:fa:20:77:4a:36:0e:ad:c1:1b:81:cf:d2:
         96:d8:c4:54:91:ed:f4:74:94:78:54:e6:28:ec:eb:92:ef:8e:
         80:e2:d8:e5:93:36:51:59:40:b5:4b:50:00:6a:bd:cd:f9:38:
         11:f7:70:4e:b1:9d:26:98:54:f6:86:a5:1d:ba:01:39:2a:b7:
         f4:e6:9e:27
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZr+CsRvN70mGXgIhRK3iMC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjUxMjA4MTI1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDI3MmU4MDFlNDk1ZDAwMjJhMGJiODc0M2Y5N2NiZDJiM2Y0YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv60PRjjUfjpoTNg2TIx1g5vAB4sm
JT8tV/fNfOeipBI51/niD7d/y2PHnGclYEmdNRfMcqs5OPF4MgO9W93NRfOv+ih0
6aeNrr7JQNjgP0n8qEUfx/1BvUnv+gRJqQlNbFAzuRmrE0yEuOT46XDD2e8NkbzJ
HALStndjpvAptsj6mpolh1vw/vMGh5jABC+RofhYZGxz5JThciIJ/FDuh0kb7qtf
OfnUnUVom9pln+ohEeUUvj3eHthf8vFl2OFTvlsKC1H0BVNTFHBg6C5Lwjxogkco
K+qeOdgNYVNidgcFFDAg7hvAOL6l8Zxj/hnep1u46/5XTCEMQVB9TbVBAQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFH0nLoAeSV0AIqC7h0P5fL0rP0wZMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvZlNjdWdCNUpYUUFpb0x1SFFfbDh2U3NfVEJrLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMK/jANBgkqhkiG
9w0BAQsFAAOCAQEAy+TZYAZqDyqBbW/G0LvxN6us02jhG5i5AZyn5c0qlnrOMDmg
nUb+HPY5Nmudni5hlQw7jENOgvWbVjSRUXF96MGuVDTU1Mfg1PaisUR5rurIY8hI
j0JpsoQCLhD8cSrqtKda2eM7T4/7V/I3kSsmPEImCZX7gJFMC/cJW6gwLawgtR5t
QOwrcP5YNFgZsrOETkaHJF7UkNKLbHql7sTToBHECU1GZnkYl3PgS0q0z/2qzhmF
4mmf7ik4+iB3SjYOrcEbgc/SltjEVJHt9HSUeFTmKOzrku+OgOLY5ZM2UVlAtUtQ
AGq9zfk4EfdwTrGdJphU9oalHboBOSq39OaeJw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:53 2025 by rpki-client