This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/d476BYeaJLqNSnr-4TzLtIvX_-4.asa
File:                     d476BYeaJLqNSnr-4TzLtIvX_-4.asa (raw, json)
Hash identifier:          DGmo0q0ksnUeOLLpbyw3uKqXcWfdPN/1LjZwfME/+Cs=
Subject key identifier:   77:8E:FA:05:87:9A:24:BA:8D:4A:7A:FE:E1:3C:CB:B4:8B:D7:FF:EE
Certificate issuer:       /CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
Certificate serial:       019AC03363C742ECD8AFB9D5FECB252D4194
Authority key identifier: 8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/d476BYeaJLqNSnr-4TzLtIvX_-4.asa
Signing time:             Wed 26 Nov 2025 12:46:24 +0000
ASPA not before:          Wed 26 Nov 2025 12:46:24 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            212855
Providers:                AS: 8283
                          AS: 8298
                          AS: 41051
                          AS: 50869
                          AS: 200132
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c0:33:63:c7:42:ec:d8:af:b9:d5:fe:cb:25:2d:41:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9d05e2a321aecba4ecc4abec0f78eacde55b0
        Validity
            Not Before: Nov 26 12:46:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=778efa05879a24ba8d4a7afee13ccbb48bd7ffee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:0f:30:16:82:1b:d7:32:ec:47:53:fc:4c:
                    ef:56:bb:c4:a6:cd:84:48:b8:a9:13:1f:8c:72:e3:
                    ed:ae:18:3e:2e:66:a9:24:3c:3a:f1:94:82:71:33:
                    75:30:fb:26:32:ac:83:3a:cb:86:31:74:58:f0:fe:
                    7d:99:f2:3b:c0:a7:56:d5:1e:73:0d:c1:19:ba:b3:
                    5b:1a:e5:1e:0f:8d:96:e5:fe:97:08:3d:26:14:13:
                    b6:9d:06:c4:88:72:54:f9:38:ab:d1:2f:e6:66:ad:
                    f2:03:68:33:67:32:42:ce:16:9d:0e:03:a5:17:b0:
                    f1:57:b2:9f:21:ee:72:7f:fa:a6:ba:45:b6:a4:b6:
                    70:c4:f1:df:a8:a1:5e:e8:d8:e8:9d:02:99:de:7a:
                    ac:69:09:fb:ec:5e:fb:e1:83:25:a3:9f:00:2c:ea:
                    b5:82:c8:a4:d5:0f:6a:bc:11:55:58:33:c6:09:e3:
                    2f:f8:8f:8f:bc:1f:32:88:0c:6c:b8:08:7a:f4:ef:
                    e3:0e:49:1f:f2:e0:8c:86:50:76:8b:20:2a:a1:c4:
                    87:a7:1a:f2:2c:b8:cc:6a:cb:4b:64:cd:11:29:90:
                    48:b6:bc:b9:29:4e:5f:91:f9:f4:66:82:fe:73:b9:
                    11:ec:88:42:48:96:4c:13:46:e8:46:de:b1:89:70:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:FA:05:87:9A:24:BA:8D:4A:7A:FE:E1:3C:CB:B4:8B:D7:FF:EE
            X509v3 Authority Key Identifier:
                keyid:8F:A9:D0:5E:2A:32:1A:EC:BA:4E:CC:4A:BE:C0:F7:8E:AC:DE:55:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6nQXioyGuy6TsxKvsD3jqzeVbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/d476BYeaJLqNSnr-4TzLtIvX_-4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3abdc7-16a2-444b-9cef-83fbd8666994/1/j6nQXioyGuy6TsxKvsD3jqzeVbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212855

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:50:0f:18:68:db:1c:32:b9:d0:59:08:3d:c5:ab:03:f4:
         d0:58:f9:2c:bb:0b:89:f5:db:23:91:bf:76:6f:0c:ae:3e:f5:
         0b:b8:2e:b6:2f:b5:31:90:4b:11:0e:d3:40:79:b8:9e:f7:cc:
         f1:30:de:1a:81:e3:f4:93:a2:2d:c7:51:7a:d0:f9:47:ee:38:
         21:ae:32:ef:09:29:02:af:b0:73:f0:6f:48:de:c4:67:11:08:
         78:6c:3c:31:10:0d:c5:bd:7d:64:6d:6c:d7:54:e6:4c:1a:20:
         e8:97:5e:1e:4b:47:6e:9d:39:bc:c3:ff:3c:c4:63:53:bb:3e:
         6c:5e:77:d7:07:5d:b4:f7:21:15:20:dd:40:69:5a:d6:d4:98:
         66:29:85:ac:8b:59:41:90:92:ae:1d:dd:c3:33:5e:4c:d1:95:
         e0:ed:80:86:60:58:20:5e:2c:e8:2d:5a:d2:de:1e:82:35:a4:
         bc:30:4e:6b:6f:c9:ba:3e:22:b6:c4:b0:1f:f0:66:89:3b:bf:
         4f:83:2b:ce:ab:fb:70:86:ab:44:f1:58:c9:e6:dd:31:77:3e:
         02:b5:de:38:2a:c5:22:aa:c4:45:a5:5c:c2:5e:1e:03:6c:21:
         c6:c4:3d:36:95:53:51:9a:03:d5:f0:54:15:d4:e0:93:95:62:
         1f:d8:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:25 2025 by rpki-client