This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/iaTyWoYRTwRbH-8Asj0TijaPuO4.asa
File:                     iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (raw, json)
Hash identifier:          Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=
Subject key identifier:   89:A4:F2:5A:86:11:4F:04:5B:1F:EF:00:B2:3D:13:8A:36:8F:B8:EE
Certificate issuer:       /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial:       019B2124AA0D973968825A1A7FFBAC178563
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/iaTyWoYRTwRbH-8Asj0TijaPuO4.asa
Signing time:             Mon 15 Dec 2025 08:33:29 +0000
ASPA not before:          Mon 15 Dec 2025 08:33:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            210213
Providers:                AS: 8194
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:21:24:aa:0d:97:39:68:82:5a:1a:7f:fb:ac:17:85:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
        Validity
            Not Before: Dec 15 08:33:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89a4f25a86114f045b1fef00b23d138a368fb8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:28:f0:90:af:01:35:70:e9:ef:5e:1c:6b:
                    b7:62:13:c3:75:44:a0:01:05:a2:32:bf:20:8f:39:
                    54:c5:e7:5f:30:06:da:3c:89:41:2b:23:d6:23:36:
                    91:7d:59:16:f1:46:28:0b:ee:15:3b:7e:5d:a2:d8:
                    24:82:6c:de:d1:f7:7b:31:a6:69:a6:87:81:0a:70:
                    ec:5d:1a:9a:4b:a2:a1:fe:de:10:ea:d0:d7:8c:98:
                    d9:32:0a:99:1d:6c:bb:b4:94:8c:a1:f4:1d:56:45:
                    90:91:b4:50:af:af:b1:44:94:b6:38:64:4b:f8:7b:
                    6b:e8:80:60:e9:dd:84:97:14:97:90:22:38:30:77:
                    90:8d:49:d4:58:af:c8:fe:02:8c:d1:a3:5a:9e:2b:
                    75:22:55:c8:6f:ca:b5:f3:b7:ac:3e:52:84:24:64:
                    e2:89:a6:95:61:df:81:a8:93:bc:0a:2b:6b:16:70:
                    fe:d6:aa:7f:21:f5:4e:99:a8:98:b1:8c:ac:c9:31:
                    c8:6a:b1:39:30:c9:4c:0c:f9:35:aa:0b:53:c8:3d:
                    e8:7d:e4:73:2d:9a:6b:03:13:5b:98:df:28:95:ee:
                    a4:38:98:b9:3a:95:1f:2b:ce:05:dc:30:8c:bd:98:
                    c2:2d:cd:ae:c9:00:92:29:92:53:d8:ce:ce:8e:95:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:F2:5A:86:11:4F:04:5B:1F:EF:00:B2:3D:13:8A:36:8F:B8:EE
            X509v3 Authority Key Identifier:
                keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/iaTyWoYRTwRbH-8Asj0TijaPuO4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210213

    Signature Algorithm: sha256WithRSAEncryption
         21:67:da:08:85:ed:c0:42:6f:34:f5:63:09:1f:33:19:30:a5:
         af:72:84:03:35:5b:6a:9d:2d:11:9b:96:9b:cc:55:ba:40:72:
         61:57:56:8f:2c:2f:18:9e:e6:5e:2f:65:70:22:e8:72:da:f3:
         34:0c:5a:40:c2:1b:07:4d:b1:c7:fb:23:75:43:6c:02:87:f3:
         8d:0d:59:82:30:55:74:df:72:5b:95:09:ae:0f:06:dd:c5:30:
         3c:58:70:3d:83:3e:7d:14:49:5f:4d:de:bb:4b:f4:c0:72:41:
         83:a5:69:83:4f:2d:04:46:17:6f:91:51:54:5e:4b:a2:47:fb:
         e0:14:d3:e5:01:71:a2:bb:01:67:9c:4a:6c:9a:de:e6:42:10:
         ff:57:7d:b0:58:88:b2:e6:a0:c9:8f:9e:32:db:d0:9d:7b:10:
         28:49:d4:69:96:32:b6:87:93:a1:66:92:13:ce:1a:6f:15:79:
         02:7f:f4:5e:44:95:66:b5:7a:35:db:a1:75:73:ef:e9:ec:53:
         da:d8:51:66:37:a9:29:c6:04:01:4f:34:7a:14:65:a9:23:ef:
         04:58:ce:10:f1:56:b2:fc:7e:f9:4a:62:2f:6f:03:74:e7:5d:
         90:74:03:f7:8e:d1:90:91:fd:7d:0b:91:4a:e0:05:a6:c8:f0:
         78:7e:ea:a9
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZshJKoNlzlogloaf/usF4VjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2
NjQxZDkwHhcNMjUxMjE1MDgzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWE0ZjI1YTg2MTE0ZjA0NWIxZmVmMDBiMjNkMTM4YTM2OGZiOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBMo8JCvATVw6e9eHGu3YhPDdUSg
AQWiMr8gjzlUxedfMAbaPIlBKyPWIzaRfVkW8UYoC+4VO35dotgkgmze0fd7MaZp
poeBCnDsXRqaS6Kh/t4Q6tDXjJjZMgqZHWy7tJSMofQdVkWQkbRQr6+xRJS2OGRL
+Htr6IBg6d2ElxSXkCI4MHeQjUnUWK/I/gKM0aNanit1IlXIb8q187esPlKEJGTi
iaaVYd+BqJO8CitrFnD+1qp/IfVOmaiYsYysyTHIarE5MMlMDPk1qgtTyD3ofeRz
LZprAxNbmN8ole6kOJi5OpUfK84F3DCMvZjCLc2uyQCSKZJT2M7OjpUrrQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFImk8lqGEU8EWx/vALI9E4o2j7juMB8GA1UdIwQY
MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt
NTdjZDY4ZDljYjRlLzEvaWFUeVdvWVJUd1JiSC04QXNqMFRpamFQdU80LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl
LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1JTANBgkqhkiG
9w0BAQsFAAOCAQEAIWfaCIXtwEJvNPVjCR8zGTClr3KEAzVbap0tEZuWm8xVukBy
YVdWjywvGJ7mXi9lcCLoctrzNAxaQMIbB02xx/sjdUNsAofzjQ1ZgjBVdN9yW5UJ
rg8G3cUwPFhwPYM+fRRJX03eu0v0wHJBg6Vpg08tBEYXb5FRVF5Lokf74BTT5QFx
orsBZ5xKbJre5kIQ/1d9sFiIsuagyY+eMtvQnXsQKEnUaZYytoeToWaSE84abxV5
An/0XkSVZrV6NduhdXPv6exT2thRZjepKcYEAU80ehRlqSPvBFjOEPFWsvx++Upi
L28DdOddkHQD947RkJH9fQuRSuAFpsjweH7qqQ==
-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:51 2025 by rpki-client