This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/5duSWp-R4sHUDIWHsiSMyzmiMjM.asa
File:                     5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (raw, json)
Hash identifier:          I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=
Subject key identifier:   E5:DB:92:5A:9F:91:E2:C1:D4:0C:85:87:B2:24:8C:CB:39:A2:32:33
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       019AEE106FC2F1A99167B7DA40CB31B9D76A
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/5duSWp-R4sHUDIWHsiSMyzmiMjM.asa
Signing time:             Fri 05 Dec 2025 10:30:45 +0000
ASPA not before:          Fri 05 Dec 2025 10:30:45 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            2605
Providers:                AS: 2852
                          AS: 6762
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ee:10:6f:c2:f1:a9:91:67:b7:da:40:cb:31:b9:d7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Dec  5 10:30:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5db925a9f91e2c1d40c8587b2248ccb39a23233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:a8:4f:87:1e:67:e3:90:7c:d2:7a:77:50:
                    0b:86:cf:8a:c3:22:f3:8e:02:45:b6:0b:6b:c7:1d:
                    43:6e:42:cb:2a:d2:86:ca:66:9b:a0:cc:07:e4:20:
                    84:ce:c3:63:6f:a5:2d:f8:e2:07:10:21:62:73:b7:
                    ed:f5:16:80:2e:5e:44:19:cd:36:ab:55:73:07:96:
                    9a:bc:ae:b4:1b:2e:f0:ab:51:77:0a:d6:3c:8e:f6:
                    49:33:b0:03:8f:c1:07:cc:5f:9d:04:d0:e2:c9:9d:
                    be:d1:f6:26:3e:43:5d:d8:3c:e4:6c:85:db:00:62:
                    55:c4:0e:a2:45:9b:69:91:64:48:ee:53:da:4b:2a:
                    a6:50:eb:2d:a2:33:1a:54:87:06:c2:7e:76:ec:88:
                    d1:18:f7:3a:53:da:ae:3f:ff:24:66:a0:69:f4:ee:
                    4c:3b:25:ac:56:c4:9d:78:d0:ea:a2:9b:33:e7:33:
                    ef:cf:3e:73:b7:f0:47:9b:a0:01:e9:9d:20:6c:77:
                    db:3d:e9:fc:a4:e0:0f:35:69:2c:74:95:92:de:42:
                    e9:8b:bb:6d:1c:4a:a8:ce:12:9b:6d:c7:62:ec:bd:
                    a2:fb:b6:ec:f1:c2:93:d6:ea:74:cd:dd:09:f9:5c:
                    4c:02:9a:2d:d2:f4:cc:83:5c:4c:5e:11:fa:99:ce:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DB:92:5A:9F:91:E2:C1:D4:0C:85:87:B2:24:8C:CB:39:A2:32:33
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/5duSWp-R4sHUDIWHsiSMyzmiMjM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2605

    Signature Algorithm: sha256WithRSAEncryption
         73:96:fd:e9:96:36:11:40:2a:7d:cc:e5:0c:77:20:88:f3:e5:
         9a:16:b4:85:6c:01:1e:b6:df:02:0f:58:69:1a:c2:94:b5:1d:
         47:7a:2d:03:ee:c0:1b:1b:7c:33:80:c1:e5:4c:9b:0f:89:5b:
         19:59:bb:fd:c8:a8:0b:9d:56:2a:cd:f1:bc:e6:d1:9f:72:21:
         7f:4a:f6:8a:0f:28:c1:8e:56:f6:87:81:86:e3:92:7c:94:9e:
         3f:08:53:cc:f5:9d:2b:c9:58:32:13:bf:84:da:2a:46:b4:84:
         3b:de:e0:5e:ed:af:a5:ea:c8:ff:0a:3f:ab:f6:c4:9f:46:44:
         34:ff:59:6f:e8:23:b3:53:c7:2b:ae:49:66:8f:64:2c:c5:12:
         1f:2d:0f:c0:e5:c0:9f:51:f9:4c:d1:eb:85:49:6f:0f:25:27:
         ad:41:b1:1f:53:b5:51:2a:b8:28:27:55:85:7a:cf:d2:af:5d:
         fe:bc:22:36:ae:8c:36:b2:19:ed:60:ac:5c:04:fc:57:5f:b9:
         f0:b9:c2:a6:4e:53:f7:e4:b8:af:fd:d0:64:47:d5:28:19:35:
         c5:79:7a:7b:f8:dd:64:67:75:7b:42:aa:0b:e4:2d:ae:4b:5c:
         21:f0:fd:74:88:ba:aa:23:7c:1c:df:ec:cb:f7:a5:33:47:ff:
         ac:25:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:11:40 2025 by rpki-client