This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/3GSfCOp1qnomvR3CmYO9EsBhC7o.asa
File:                     3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (raw, json)
Hash identifier:          xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=
Subject key identifier:   DC:64:9F:08:EA:75:AA:7A:26:BD:1D:C2:99:83:BD:12:C0:61:0B:BA
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       019B1270EED41626DD7BEC17A70A5B22F0F4
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/3GSfCOp1qnomvR3CmYO9EsBhC7o.asa
Signing time:             Fri 12 Dec 2025 12:02:29 +0000
ASPA not before:          Fri 12 Dec 2025 12:02:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            211540
Providers:                AS: 559
                          AS: 6730
                          AS: 13030
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:70:ee:d4:16:26:dd:7b:ec:17:a7:0a:5b:22:f0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Dec 12 12:02:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dc649f08ea75aa7a26bd1dc29983bd12c0610bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:9c:d6:9f:0e:f6:74:b1:5c:ac:90:a3:f2:
                    5c:09:34:99:ea:fc:a9:22:6d:29:b3:c4:46:a9:99:
                    9e:91:cf:0c:88:23:92:36:29:dd:53:9b:9e:53:0c:
                    4b:02:24:1f:b8:e4:dc:a7:c7:d2:d3:7d:f2:88:6a:
                    3a:bf:52:68:11:d9:71:b4:27:b8:5e:17:34:92:48:
                    b0:c0:3d:89:47:71:79:40:b0:df:16:51:7b:98:f2:
                    7d:9e:0a:49:c9:64:58:b6:6b:52:9c:48:20:80:01:
                    6d:1b:3c:21:5a:0e:b0:9f:68:b0:9d:7b:fd:e2:37:
                    c3:86:e0:f8:16:70:25:61:74:21:43:2f:48:e6:20:
                    6b:be:87:d7:2c:fd:5d:b0:a6:1e:4d:86:7f:97:ba:
                    02:b6:c9:31:fa:0c:b0:65:68:57:b2:17:1c:42:da:
                    7b:e7:11:e4:67:6e:29:23:67:83:3d:d2:11:93:aa:
                    03:8f:bc:56:42:63:d8:12:65:c3:86:76:94:62:29:
                    48:13:7c:ed:bc:d7:c8:4e:d4:ec:4b:b8:36:90:c9:
                    e2:69:49:e8:03:76:6a:f9:89:43:96:34:2f:96:1f:
                    e4:45:4b:d2:fb:90:fe:fa:d4:35:b8:62:55:3b:3f:
                    e2:b6:38:05:b2:e2:8d:e8:4b:0a:11:96:ec:44:33:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:9F:08:EA:75:AA:7A:26:BD:1D:C2:99:83:BD:12:C0:61:0B:BA
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/3GSfCOp1qnomvR3CmYO9EsBhC7o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211540

    Signature Algorithm: sha256WithRSAEncryption
         d2:46:d5:47:ef:81:e8:1f:6c:51:c9:99:60:7e:5e:6b:b8:36:
         dc:01:16:36:ea:b9:6a:66:19:81:66:3a:f3:4f:e3:07:95:2a:
         83:dc:9b:0c:e4:6b:e7:fd:01:7b:82:7b:a7:57:10:44:c4:36:
         a0:4a:f9:0e:d6:cf:92:d3:df:2b:02:0d:16:61:4a:fd:15:5d:
         d0:d4:ce:e0:f9:d7:b3:93:3e:4a:5c:19:5c:8d:db:aa:69:9e:
         a7:cd:59:9b:78:95:a5:40:34:01:9c:bb:db:b6:22:f4:6e:60:
         d0:e9:f0:c2:c7:64:58:31:70:49:7b:2f:c0:6e:1d:7c:51:a2:
         52:8f:78:60:3c:2a:be:ce:ed:98:49:9e:39:4c:09:33:42:43:
         09:8f:54:23:7e:f9:83:89:c3:b4:e6:c0:13:c1:a7:23:92:72:
         b9:9b:65:ae:04:ef:7d:01:40:83:62:fe:74:a4:45:bd:ca:2c:
         b0:48:b2:58:d7:58:f0:a9:a4:5d:e3:05:df:be:1d:ef:80:8a:
         43:b7:a9:5b:b0:7f:2c:68:b1:b3:8c:9d:b3:1e:74:1f:49:9e:
         3e:49:4c:67:6d:6b:db:4f:b5:3b:72:bb:3a:60:ab:7f:a0:e8:
         5d:9d:12:18:8f:7d:80:3b:d9:17:55:36:e3:0a:44:97:71:67:
         95:4a:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:54 2025 by rpki-client