This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/T4qruvGZFs_aXMb97g2-jFZUYXE.asa
File:                     T4qruvGZFs_aXMb97g2-jFZUYXE.asa (raw, json)
Hash identifier:          mtheudfewBlecebzdDrT6Ithx8eec3qH3GXNnYLbTlg=
Subject key identifier:   4F:8A:AB:BA:F1:99:16:CF:DA:5C:C6:FD:EE:0D:BE:8C:56:54:61:71
Certificate issuer:       /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial:       019B032AB6EDAD501CCB5673220F03004FAE
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/T4qruvGZFs_aXMb97g2-jFZUYXE.asa
Signing time:             Tue 09 Dec 2025 12:51:29 +0000
ASPA not before:          Tue 09 Dec 2025 12:51:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            208702
Providers:                AS: 6939
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:03:2a:b6:ed:ad:50:1c:cb:56:73:22:0f:03:00:4f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
        Validity
            Not Before: Dec  9 12:51:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f8aabbaf19916cfda5cc6fdee0dbe8c56546171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:e3:3e:f0:47:52:b3:f6:af:97:a4:40:68:
                    8d:11:6c:34:86:17:1a:7f:2f:62:4f:67:59:14:b8:
                    82:5c:a3:8d:88:ec:56:6a:80:3d:32:3a:89:63:2d:
                    9f:13:ee:d5:91:88:1f:23:57:9b:74:1c:93:f8:fc:
                    49:9b:c4:b1:35:6d:be:89:8f:4e:12:c6:63:94:fe:
                    2a:5b:ef:e9:36:76:ed:87:8d:2d:a2:4e:e0:7c:ce:
                    97:e2:f1:99:03:00:e8:c6:e4:ae:54:96:22:c8:87:
                    f7:b5:a7:f7:c5:51:3d:41:fb:a5:0f:1f:fa:08:cd:
                    23:9a:98:ba:b0:b7:c5:b4:3c:2f:8c:b4:26:69:7f:
                    f2:a3:f5:39:a9:b8:7b:ac:8e:3a:29:14:76:88:0d:
                    62:98:81:31:91:d4:e4:11:b3:85:82:4a:2f:c6:b5:
                    63:1b:4e:00:5f:d5:63:56:c4:90:78:b9:99:38:30:
                    9a:16:b7:db:2c:dc:9d:ec:c2:b9:df:72:bb:b0:05:
                    5e:12:c5:e0:31:54:f7:11:e9:03:b0:bb:d8:ab:5f:
                    b3:9c:2a:ce:2a:74:19:a9:7b:5a:b1:b9:c6:17:af:
                    88:a3:ba:9a:ea:85:a7:fd:e6:d1:2a:7e:b7:a4:bd:
                    b7:07:1e:2a:18:97:4e:a2:02:09:19:e8:bc:ff:77:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8A:AB:BA:F1:99:16:CF:DA:5C:C6:FD:EE:0D:BE:8C:56:54:61:71
            X509v3 Authority Key Identifier:
                keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/T4qruvGZFs_aXMb97g2-jFZUYXE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208702

    Signature Algorithm: sha256WithRSAEncryption
         6e:2e:d9:20:3c:0e:b8:11:3f:58:28:ba:eb:01:5f:3d:88:55:
         2b:f2:4c:6a:3a:34:86:31:85:6a:de:7d:1b:f5:17:48:76:11:
         9c:1a:0d:ce:b3:b4:92:eb:42:15:33:78:9e:c5:e1:d2:47:9b:
         0b:38:cf:88:93:73:e3:8c:16:90:a7:19:61:8a:f6:63:3f:f1:
         b6:d2:89:cd:1f:fd:5a:04:2c:87:4b:1c:1b:7f:a5:51:89:52:
         70:83:48:a3:60:35:0c:23:47:93:dc:4d:f2:67:3d:61:8f:4e:
         f8:f7:cc:ae:78:84:b0:3a:9f:a2:23:46:b7:ab:3c:c2:ac:c8:
         be:5e:dc:92:51:9a:5a:2e:c9:61:aa:e9:07:d8:e6:58:ff:9c:
         ce:04:f6:83:54:9a:6a:ef:1d:89:fe:34:eb:1e:3c:cb:be:ad:
         45:d3:1a:9c:f0:86:57:8d:06:c9:f9:90:ee:aa:63:d9:12:e7:
         d5:f4:52:53:76:8c:23:18:ba:d4:40:2e:91:52:6f:e2:92:e1:
         58:b1:e2:db:2c:2e:c8:e5:85:11:d4:a4:c5:99:c1:bf:41:db:
         4f:33:f6:23:fb:58:df:47:22:f7:63:7d:43:f5:56:f1:ed:17:
         1a:10:f3:9b:96:2a:ca:25:60:b0:4f:ba:33:b9:94:9e:72:66:
         3f:21:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:36 2025 by rpki-client