This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/_foadMbZdx4Kyy6kAY35bfy57Ew.asa
File:                     _foadMbZdx4Kyy6kAY35bfy57Ew.asa (raw, json)
Hash identifier:          f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=
Subject key identifier:   FD:FA:1A:74:C6:D9:77:1E:0A:CB:2E:A4:01:8D:F9:6D:FC:B9:EC:4C
Certificate issuer:       /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial:       019ACA9DC349F3A8AA9DADAF9AC364A47AD3
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/_foadMbZdx4Kyy6kAY35bfy57Ew.asa
Signing time:             Fri 28 Nov 2025 13:18:48 +0000
ASPA not before:          Fri 28 Nov 2025 13:18:48 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            51345
Providers:                AS: 6939
                          AS: 8283
                          AS: 8298
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ca:9d:c3:49:f3:a8:aa:9d:ad:af:9a:c3:64:a4:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
        Validity
            Not Before: Nov 28 13:18:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fdfa1a74c6d9771e0acb2ea4018df96dfcb9ec4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:e0:9b:d5:b8:e8:52:3b:e6:e9:70:e6:47:
                    f2:13:53:ca:03:d7:ef:11:b6:23:65:33:f2:5a:8f:
                    c0:d7:ed:92:6d:cc:06:9d:ce:3d:57:b7:d8:a1:e7:
                    5e:46:c4:15:2a:13:a9:aa:f9:79:a6:02:64:c6:ae:
                    b4:90:b5:bb:fd:8a:81:8c:4d:eb:5d:56:10:1e:f9:
                    97:e5:d9:40:7a:b1:13:a9:ca:c4:a5:a9:71:ed:a2:
                    7a:68:65:5c:7f:31:f8:5a:ec:e3:a8:fe:09:bb:7a:
                    77:38:0b:ab:85:80:b6:85:0a:a1:41:66:c1:c2:f1:
                    57:5c:6d:77:8b:c2:72:c2:dd:bb:87:c6:2d:c6:b4:
                    4a:6c:46:1d:5d:82:e8:56:31:1d:9a:8d:a6:8e:75:
                    d7:ad:92:2a:7b:83:03:1c:df:6f:02:58:46:79:2d:
                    ec:da:9c:02:8f:6c:eb:1f:6e:0d:88:90:ee:78:3b:
                    85:44:95:7c:69:9a:34:31:be:35:5e:97:b1:16:ca:
                    4c:8b:c5:67:0d:4d:62:e1:86:f4:ee:b9:bc:7b:f0:
                    98:7e:89:6f:86:bd:bc:25:fe:52:4f:76:6b:d3:0f:
                    85:c7:2f:20:3b:89:f5:e3:53:3e:25:f2:b3:e8:f2:
                    40:6b:17:2e:81:f3:29:e3:fe:14:e5:b3:9f:32:35:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:1A:74:C6:D9:77:1E:0A:CB:2E:A4:01:8D:F9:6D:FC:B9:EC:4C
            X509v3 Authority Key Identifier:
                keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/_foadMbZdx4Kyy6kAY35bfy57Ew.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51345

    Signature Algorithm: sha256WithRSAEncryption
         83:4d:97:1f:30:cf:54:10:00:40:d1:e2:bf:76:06:91:b6:4e:
         c1:49:a8:21:5d:ea:bd:03:29:33:21:38:ef:00:be:bf:31:96:
         f3:c2:2e:e4:79:e9:1b:1d:bf:e3:ba:31:fc:83:87:d5:dd:41:
         6c:26:12:28:6f:e3:10:00:fb:8d:a4:23:96:0e:74:d6:88:ba:
         c8:32:b2:38:a9:b2:da:0d:21:f6:05:97:ae:1b:89:60:22:10:
         1d:b3:b0:e8:7e:7c:30:e6:af:d7:c5:84:ff:23:24:2e:21:4b:
         d7:be:86:29:b5:8b:fb:8b:08:79:ac:89:c1:be:76:0e:6b:03:
         6b:71:c5:6d:b1:41:94:11:bb:3d:b9:be:7a:51:7b:ff:41:36:
         ed:57:db:bb:83:5e:de:0b:4a:8a:79:8e:97:43:f5:28:9f:de:
         88:a6:bb:79:e8:c7:14:a9:78:19:b8:df:44:07:30:9b:bb:d3:
         a3:ce:bf:4d:54:12:3c:aa:4a:44:f3:50:48:ee:44:d1:f8:73:
         fd:a6:41:36:42:0a:98:87:84:9e:1a:bf:6b:b9:a6:ae:c7:ac:
         ec:b6:ee:26:83:0f:3d:68:59:3d:11:06:2f:79:52:15:b6:3e:
         35:79:02:e4:17:a4:d7:b4:22:8f:5f:6a:30:d5:da:c4:92:2c:
         64:3b:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:30 2025 by rpki-client