This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa
File:                     1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa (raw, json)
Hash identifier:          1+NBbcWIg/X+t80cTnY58PEQO1jKIDWahJgetMPmIKo=
Subject key identifier:   D4:BF:00:AA:0F:E4:A9:CD:23:0C:3F:44:36:82:DF:76:0C:50:C2:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       019AC1CE544745DD0401DF0380D703656499
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa
Signing time:             Wed 26 Nov 2025 20:15:15 +0000
ASPA not before:          Wed 26 Nov 2025 20:15:15 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            210715
Providers:                AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c1:ce:54:47:45:dd:04:01:df:03:80:d7:03:65:64:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: Nov 26 20:15:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d4bf00aa0fe4a9cd230c3f443682df760c50c25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:ce:e8:7e:5f:a4:39:0b:08:0d:88:5f:00:
                    a8:d8:3e:1e:37:96:9c:51:40:9a:2a:d1:2b:19:2f:
                    36:31:10:9c:65:10:38:32:e7:9e:e7:d7:ce:46:15:
                    af:50:e6:6d:29:e3:05:b1:6b:e1:2e:f5:8d:95:d2:
                    86:e7:1f:f9:a6:37:a8:3c:95:38:e7:e7:dc:5d:82:
                    3d:b2:03:a7:83:3a:0b:a9:e6:10:73:91:7b:f1:46:
                    79:11:03:19:de:b6:98:26:cc:9f:c9:6d:ad:07:e1:
                    41:bc:d7:81:be:5b:5c:ce:77:d7:a6:f6:c1:f5:5b:
                    7c:b9:28:5b:6a:09:6e:86:0f:60:9d:f7:87:85:14:
                    c5:6b:7f:d8:44:df:31:bf:20:59:c8:d6:b8:78:ee:
                    b9:30:ec:12:7b:71:38:85:42:31:84:24:9b:ce:e8:
                    5b:11:8d:4c:46:a7:9d:cf:d4:3e:b9:33:fe:f2:38:
                    de:b3:e3:89:d6:d2:56:38:81:a9:52:ba:5a:de:b5:
                    f8:50:5e:b5:12:eb:c0:76:f8:3e:0b:a4:e6:26:dd:
                    18:d1:d1:9f:d1:41:e7:84:40:88:d7:f4:c1:d9:11:
                    81:cf:54:e4:38:ec:29:6c:cf:59:5a:cf:7c:13:ab:
                    bf:f2:70:13:cd:75:a4:7d:88:f5:cd:3d:5b:59:b9:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BF:00:AA:0F:E4:A9:CD:23:0C:3F:44:36:82:DF:76:0C:50:C2:5E
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/1L8Aqg_kqc0jDD9ENoLfdgxQwl4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210715

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:d8:78:9b:02:5d:f0:28:1f:60:86:bf:d1:7f:19:9a:39:
         15:2e:99:dc:d9:b6:2f:a8:1f:45:7e:ec:c2:fe:77:07:36:26:
         66:f3:48:91:eb:67:10:08:1e:47:25:48:93:6f:a5:c4:5c:7f:
         ad:89:40:95:4f:cc:03:24:0d:43:4d:57:cc:6a:7c:04:79:19:
         12:1d:60:00:1d:05:fc:1a:10:e5:a0:7d:d6:97:30:94:62:0d:
         1f:73:27:b7:3c:50:43:b7:a4:7b:e7:a4:de:ed:41:40:78:54:
         8e:30:ec:3f:59:79:1a:9e:49:6d:9c:ce:36:76:0d:30:1e:55:
         3f:6d:c5:fd:6a:46:2d:b5:11:d0:27:1f:d8:23:fa:ba:8f:8b:
         3c:7b:95:74:bd:5b:a2:94:6a:25:b3:d0:80:90:0e:bd:38:8c:
         01:48:23:52:d9:14:8b:93:e7:cd:cf:cc:9e:e2:b9:a9:41:60:
         53:e0:08:11:ba:d6:d2:61:1c:56:00:e8:77:11:46:ab:fa:9e:
         72:b0:7e:e1:cc:f4:52:ee:3a:65:dc:16:32:08:dd:01:c3:d9:
         6f:80:81:42:ff:a2:7d:65:2d:fa:6b:7f:d1:dd:5a:bc:4a:2e:
         99:47:5f:45:f7:c9:8e:9d:44:13:4c:45:35:58:64:2b:fb:96:
         86:d5:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:22 2025 by rpki-client