This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/wc35MgYGPiVoITK8dBRVt7Icluk.asa
File:                     wc35MgYGPiVoITK8dBRVt7Icluk.asa (raw, json)
Hash identifier:          A16HGxaZ77Lcix1Lc05fm2biWcgZ/EQMJRjj60DKa2U=
Subject key identifier:   C1:CD:F9:32:06:06:3E:25:68:21:32:BC:74:14:55:B7:B2:1C:96:E9
Certificate issuer:       /CN=b56b5b54decf43e964f4be6d304e480a386cb794
Certificate serial:       019B1298728D586C314F69E6CB1DC51A4C5E
Authority key identifier: B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/wc35MgYGPiVoITK8dBRVt7Icluk.asa
Signing time:             Fri 12 Dec 2025 12:45:39 +0000
ASPA not before:          Fri 12 Dec 2025 12:45:39 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            203913
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:98:72:8d:58:6c:31:4f:69:e6:cb:1d:c5:1a:4c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56b5b54decf43e964f4be6d304e480a386cb794
        Validity
            Not Before: Dec 12 12:45:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c1cdf93206063e25682132bc741455b7b21c96e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:e1:6d:26:18:3b:0b:7d:93:b2:80:14:f0:
                    62:af:69:1c:ff:1d:b0:27:ac:82:d2:15:3c:ff:0b:
                    90:d6:79:42:b6:01:d2:7c:9e:2b:69:13:07:12:f4:
                    37:37:64:a2:0c:2a:31:ef:f9:19:15:fc:4e:44:c8:
                    bd:94:35:f8:e1:88:66:4d:9f:5f:ef:ad:8a:a5:0e:
                    d0:22:d6:3b:00:d2:b7:2b:35:3d:48:86:31:bc:43:
                    14:5f:c5:d2:f8:8d:34:ba:7a:90:f1:eb:bd:6e:4b:
                    77:2d:05:8e:71:73:88:fd:90:e9:6d:76:85:40:c9:
                    38:37:d5:05:94:44:d0:db:cf:b7:25:7d:5f:33:e2:
                    0c:ed:b8:2f:4e:20:e0:26:6d:fc:74:50:ad:5d:2a:
                    68:ce:b9:34:13:c7:4c:9c:dd:27:42:31:f5:cb:51:
                    77:33:d4:55:8a:14:97:18:8b:f3:cf:d0:41:77:df:
                    47:d0:cb:df:09:dd:e8:c4:9d:55:da:d7:6e:79:8e:
                    c7:d0:d2:9c:f1:b8:44:76:ab:c8:8a:ab:23:bb:b3:
                    a1:9a:0f:ab:e0:5e:16:e9:30:12:da:39:9b:70:15:
                    22:b3:47:3e:97:e8:77:e7:d6:5b:11:23:3d:90:86:
                    c8:6b:9f:30:77:54:c8:d2:70:6b:2a:71:3e:2d:32:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CD:F9:32:06:06:3E:25:68:21:32:BC:74:14:55:B7:B2:1C:96:E9
            X509v3 Authority Key Identifier:
                keyid:B5:6B:5B:54:DE:CF:43:E9:64:F4:BE:6D:30:4E:48:0A:38:6C:B7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWtbVN7PQ-lk9L5tME5ICjhst5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/wc35MgYGPiVoITK8dBRVt7Icluk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/874e8a-3a16-4f5b-8f19-37ad0eebe19b/1/tWtbVN7PQ-lk9L5tME5ICjhst5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203913

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:42:4c:36:d6:26:53:67:56:d2:e3:0d:0d:84:c5:6d:88:
         ad:22:fa:e9:a9:74:fe:2c:66:5e:b1:56:42:db:6b:62:00:71:
         20:07:3a:b8:d4:44:38:0e:c2:2d:43:f9:f5:c4:6a:40:0b:41:
         12:df:0d:dc:b7:16:38:8f:2a:50:7a:d0:da:36:9f:09:58:12:
         e7:83:85:e6:f7:8e:de:c2:8d:e8:07:13:df:6d:cb:0c:9c:d1:
         c6:5b:50:e5:97:b1:ef:18:d2:c0:38:6d:04:50:89:81:9c:10:
         35:c1:12:ba:63:68:4d:72:81:f4:07:d3:7d:0a:bd:62:66:92:
         ab:20:a6:9a:63:8c:16:1f:40:07:07:98:49:50:49:aa:bc:16:
         48:0c:39:90:9e:34:65:a6:22:29:0b:ba:6f:44:95:dd:cf:ec:
         e5:d9:a5:2a:c3:e5:d6:c8:f6:5d:d9:60:94:a8:b5:51:2e:40:
         ec:1e:3a:02:d5:5d:c3:03:74:12:05:a7:48:7c:1d:fe:a3:a4:
         ad:0c:9c:8e:0c:53:3d:98:05:07:6e:d4:ce:05:48:d6:79:e9:
         f4:47:43:a0:1f:d3:db:69:a1:4a:f6:17:63:2f:a4:89:60:88:
         eb:4f:a5:5c:e0:f7:a2:74:25:d4:b9:61:9f:0b:c8:2d:ba:4b:
         15:90:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:44 2025 by rpki-client