This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/90AKDFsTQP1aQZWkwmcUiohlwPA.asa
File:                     90AKDFsTQP1aQZWkwmcUiohlwPA.asa (raw, json)
Hash identifier:          4NiLTh3/niTL3AzhTxVb5ThZ/BzvIYRQ/A2bQ2ouE3I=
Subject key identifier:   F7:40:0A:0C:5B:13:40:FD:5A:41:95:A4:C2:67:14:8A:88:65:C0:F0
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019B2BEC11F5F807D45B22CDE58CF9980C12
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/90AKDFsTQP1aQZWkwmcUiohlwPA.asa
Signing time:             Wed 17 Dec 2025 10:47:29 +0000
ASPA not before:          Wed 17 Dec 2025 10:47:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            47482
Providers:                AS: 38930
                          AS: 49127
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2b:ec:11:f5:f8:07:d4:5b:22:cd:e5:8c:f9:98:0c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Dec 17 10:47:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f7400a0c5b1340fd5a4195a4c267148a8865c0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:cb:fb:fd:20:41:d3:80:fc:a9:5e:6a:6f:
                    5f:ac:0c:4e:7e:87:7f:67:d6:c4:84:f2:40:dc:50:
                    72:00:db:c4:3e:74:18:03:e0:8d:8a:55:6f:81:ff:
                    bb:0d:be:b9:5c:82:92:71:35:92:e1:1a:b3:6d:0a:
                    1f:19:43:49:92:fa:c4:ec:63:cf:7a:68:06:60:77:
                    99:f6:15:7e:b2:ea:69:d9:33:4b:75:54:ab:a2:a5:
                    1d:37:76:5c:62:eb:47:59:e0:b4:7b:62:04:91:09:
                    22:d3:25:d2:42:c8:47:fa:a2:9e:56:99:38:b1:f8:
                    da:94:4f:79:98:91:b4:ad:49:cc:4e:16:85:e2:40:
                    3b:18:b0:e6:d1:0f:5d:63:10:e9:91:54:f1:d7:dc:
                    c3:3c:53:4d:2c:4a:ca:6d:16:66:b1:57:8e:6f:a3:
                    d3:07:24:bb:c9:33:9b:db:ff:0d:1c:e6:0f:59:4e:
                    dd:19:6b:bb:9c:e4:44:8f:91:88:3e:75:56:e9:99:
                    26:37:ee:24:2b:af:43:ad:61:40:ca:ab:d4:cf:22:
                    02:3a:75:7c:19:4f:d2:d4:0d:c7:b4:b3:33:58:7e:
                    b3:c0:8f:3b:33:39:54:bb:3e:79:89:f9:43:6f:cf:
                    3e:d8:c1:51:48:ec:cb:e6:3f:90:20:29:bd:e1:77:
                    eb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:0A:0C:5B:13:40:FD:5A:41:95:A4:C2:67:14:8A:88:65:C0:F0
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/90AKDFsTQP1aQZWkwmcUiohlwPA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47482

    Signature Algorithm: sha256WithRSAEncryption
         28:04:30:50:a3:f6:cf:2a:18:3b:cb:e6:bd:91:96:f6:37:c0:
         da:5d:5b:10:61:f6:f5:64:8d:06:2c:1b:63:f1:dd:4c:c4:31:
         ac:a3:d9:8f:66:2b:90:aa:c4:06:2e:cd:6c:2f:31:e0:63:4f:
         5b:5a:4d:41:54:cd:08:e0:7d:dd:25:8b:6c:9d:fd:dd:57:ad:
         75:79:f7:0e:b8:e7:8c:fb:ba:17:9a:4a:a4:54:b0:ee:fc:6a:
         04:60:09:cd:6e:cc:2b:84:94:b7:21:9d:08:54:c8:49:f5:a3:
         14:91:90:ff:18:04:14:d4:cc:69:f2:e6:f2:d0:ec:b9:ea:d7:
         1b:ef:bb:d5:e0:fb:b5:c9:c2:66:b1:d0:9e:4d:0d:31:ac:84:
         f0:16:8d:c8:a8:90:32:32:4c:f1:bd:6c:3a:50:59:91:a4:0f:
         87:c8:5e:b4:36:bd:ce:34:b4:5c:3c:93:51:2b:d6:6a:30:e0:
         80:a5:c7:b4:f4:72:d8:64:cf:19:64:6e:65:31:53:10:3e:e7:
         a2:48:50:45:5c:6f:ec:d8:5b:07:ec:f0:47:df:03:63:68:16:
         19:8c:94:a2:2e:fd:43:e1:f5:65:19:3d:d2:e5:ce:96:48:38:
         c9:17:1e:65:06:16:ca:20:38:52:1e:5e:61:d8:43:e4:67:09:
         30:db:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:32 2026 by rpki-client