This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/Ev84dzr99BkEprLlsKv-9iCyhPY.asa
File:                     Ev84dzr99BkEprLlsKv-9iCyhPY.asa (raw, json)
Hash identifier:          A4Hylllyzq6B6OAjJOwRb/t7tAR+6RCdPmT8bW5GCjg=
Subject key identifier:   12:FF:38:77:3A:FD:F4:19:04:A6:B2:E5:B0:AB:FE:F6:20:B2:84:F6
Certificate issuer:       /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial:       019B0D05E86B6D13828C1067EF212DA5EC1D
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/Ev84dzr99BkEprLlsKv-9iCyhPY.asa
Signing time:             Thu 11 Dec 2025 10:47:29 +0000
ASPA not before:          Thu 11 Dec 2025 10:47:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            204003
Providers:                AS: 6939
                          AS: 8283
                          AS: 29632
                          AS: 34549
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:05:e8:6b:6d:13:82:8c:10:67:ef:21:2d:a5:ec:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
        Validity
            Not Before: Dec 11 10:47:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=12ff38773afdf41904a6b2e5b0abfef620b284f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:82:f2:d2:f3:37:28:6e:55:44:3d:6d:33:
                    a1:c1:30:a7:0c:f5:83:8a:e1:93:71:9b:4a:c5:be:
                    f4:9c:8c:10:d8:28:bd:71:ba:7c:ff:24:9c:7b:03:
                    1c:c8:d9:a7:4b:7e:c2:28:a0:6b:82:d3:a5:5e:d5:
                    37:4c:23:c0:45:be:5a:5a:3e:f0:4c:ed:d5:5a:5c:
                    6c:7b:15:26:16:d4:6c:94:ee:bf:a7:5b:88:2c:9a:
                    79:d6:f4:6f:d6:7f:f4:22:c7:47:c1:92:3e:54:2e:
                    6a:50:b9:33:7c:9c:f1:a1:1d:81:9d:bf:91:fd:70:
                    74:67:c4:39:73:f7:ed:91:5e:ad:91:85:6a:31:ae:
                    f4:9b:81:0d:9c:34:5c:98:59:d5:98:8c:64:89:2b:
                    5e:1d:86:3c:39:93:39:85:a2:ac:77:78:e4:7f:c8:
                    23:9f:6b:1d:fe:b2:ad:5d:85:d5:05:09:21:31:70:
                    88:4f:fb:ff:63:7a:ff:b3:d5:90:4d:75:5f:8e:cd:
                    f9:8f:d5:14:7d:b1:9f:d4:c9:4b:2b:b9:1e:52:56:
                    b1:2c:a5:2b:39:6a:db:69:e2:60:31:8a:d4:6e:4a:
                    39:6b:62:e6:89:7e:92:07:ad:b1:a0:83:d1:cb:74:
                    ae:63:d5:c6:57:e4:63:63:00:da:0a:dc:5c:c5:64:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FF:38:77:3A:FD:F4:19:04:A6:B2:E5:B0:AB:FE:F6:20:B2:84:F6
            X509v3 Authority Key Identifier:
                keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/Ev84dzr99BkEprLlsKv-9iCyhPY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204003

    Signature Algorithm: sha256WithRSAEncryption
         84:48:7d:dd:ca:5e:78:94:93:94:e5:f6:74:28:31:1e:46:96:
         41:80:98:45:31:26:b8:37:55:b5:0f:83:70:53:82:93:bc:5b:
         a1:c9:44:1e:34:59:94:b5:b8:a4:65:94:25:80:25:00:e4:cb:
         fe:ce:1e:b4:00:79:e6:4d:16:84:a0:01:7f:aa:13:bc:cc:a1:
         b7:b0:34:0d:2a:e7:a9:48:84:47:78:f5:59:20:08:02:a5:e0:
         14:62:89:eb:cb:99:13:e6:78:33:71:a9:c3:1e:0e:ff:6e:be:
         fa:e0:38:48:0a:47:4b:68:78:e0:b3:37:08:b0:5e:a2:a3:4f:
         5f:42:9f:e0:a8:c4:13:8a:97:c5:31:72:7c:44:c6:93:0d:5e:
         52:b3:2f:9b:34:25:b2:5a:eb:92:af:69:51:96:db:02:59:97:
         f8:c0:e2:d9:32:60:16:98:fe:82:d4:5b:9f:22:20:9a:8c:9c:
         1a:cb:05:3a:50:eb:f5:85:1d:84:0f:94:a4:01:db:ed:dd:04:
         89:85:17:79:6a:f2:85:bd:d5:f0:8c:04:aa:2c:a1:99:a6:d7:
         bc:78:c1:3e:ac:27:58:cf:79:7d:a5:0e:e4:63:78:a8:5a:99:
         27:25:4b:3b:7e:3b:c8:6d:21:c4:4e:12:89:fa:3a:e2:b8:fd:
         93:00:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:40 2025 by rpki-client