This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa
File:                     qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa (raw, json)
Hash identifier:          Pe+G1o42QcpD2g0wE/O5joEX35Ku4HHh+kf6CsJnEYo=
Subject key identifier:   A9:39:E3:FF:2F:D6:77:8F:70:B0:05:C4:DF:DB:3C:75:9D:02:42:F0
Certificate issuer:       /CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
Certificate serial:       019AC49C1A208D86C8AC36E9C70F3ECA0961
Authority key identifier: 8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa
Signing time:             Thu 27 Nov 2025 09:19:15 +0000
ASPA not before:          Thu 27 Nov 2025 09:19:15 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            207995
Providers:                AS: 3257
                          AS: 3356
                          AS: 8676
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c4:9c:1a:20:8d:86:c8:ac:36:e9:c7:0f:3e:ca:09:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb44b078522da9c31062b9c7ef7f51727e73e5e
        Validity
            Not Before: Nov 27 09:19:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a939e3ff2fd6778f70b005c4dfdb3c759d0242f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:13:40:45:ce:c2:a5:d1:0d:a2:b0:d9:9f:
                    fa:70:d5:be:8a:fd:78:3c:f7:57:45:dc:e4:f5:f4:
                    d7:d2:69:b9:04:fa:90:e4:34:f1:b8:1d:7c:50:35:
                    b1:6e:16:ef:7c:84:f4:be:49:37:75:60:2f:89:44:
                    3b:b8:04:8c:a7:e3:fb:db:a7:89:90:de:4d:fb:cc:
                    1d:16:04:55:82:a0:46:e7:03:0c:75:c3:27:31:0a:
                    48:b1:a7:df:21:83:aa:53:c6:6c:c9:a1:ac:f7:1b:
                    53:ea:c4:67:d9:7d:07:c2:c6:b6:27:af:d1:81:a6:
                    01:4c:8b:87:5d:73:5a:1e:d7:1f:77:c6:da:57:4b:
                    d3:fe:58:fb:2f:65:1e:ba:ca:47:f1:e1:00:ca:8b:
                    20:c0:06:11:3e:56:14:de:6e:91:b7:a5:5c:b3:b2:
                    e3:d5:61:3d:40:db:67:46:04:37:f4:e6:c8:fd:8b:
                    bd:ef:42:c0:49:f3:3c:a1:82:92:ce:f1:12:0e:8d:
                    66:4b:98:20:8d:11:8e:ee:a4:7f:53:17:4c:20:13:
                    0e:c9:b9:01:12:ab:be:01:72:79:bc:bc:41:17:6e:
                    84:d5:93:63:88:e2:55:20:ac:5e:e6:d7:b6:64:b8:
                    a0:97:0a:99:8c:36:4b:0a:77:d7:9b:3c:c3:5b:db:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:E3:FF:2F:D6:77:8F:70:B0:05:C4:DF:DB:3C:75:9D:02:42:F0
            X509v3 Authority Key Identifier:
                keyid:8E:B4:4B:07:85:22:DA:9C:31:06:2B:9C:7E:F7:F5:17:27:E7:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRLB4Ui2pwxBiucfvf1FyfnPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/qTnj_y_Wd49wsAXE39s8dZ0CQvA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5792e0-6a3a-4527-90fc-67ff5a0ce1a5/1/jrRLB4Ui2pwxBiucfvf1FyfnPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207995

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:6b:73:90:15:da:ba:a6:2e:c5:c4:f8:8e:43:16:3a:9d:
         33:0e:60:bb:ac:c4:40:8b:cd:97:66:70:9c:ed:00:03:59:8b:
         d1:0a:93:67:46:ee:06:fe:e9:92:0b:2f:08:6e:ac:17:0d:e0:
         ae:b5:57:69:72:5a:4c:e9:3c:8a:99:3e:a9:1c:8d:92:aa:7c:
         bf:3e:04:a3:3f:1b:10:50:4d:38:40:ca:3a:1a:e4:55:c5:93:
         87:66:4d:60:23:b5:a3:1c:e1:d5:85:40:11:e2:1d:f2:0d:e3:
         7b:a7:94:2e:ae:2e:62:93:44:3b:e2:ad:0f:eb:47:58:08:c3:
         c4:8b:2e:af:07:90:c4:db:7a:67:0a:4a:bf:3b:7f:76:4d:a2:
         4e:9f:7b:15:e9:d7:a4:dc:03:cb:8d:25:a0:6a:b4:46:14:ea:
         62:d2:80:d6:29:72:8a:39:10:9b:8c:28:ad:a8:cb:20:fd:b7:
         c8:00:48:b7:0d:aa:ec:98:4d:38:cb:3d:f3:95:cb:34:b3:26:
         e2:a0:28:20:08:3e:54:94:d9:c1:b3:9a:41:f6:5f:f6:52:98:
         9f:8c:3b:ee:56:95:21:8b:4e:37:e1:c0:a8:32:00:39:d5:74:
         77:6f:05:cc:01:78:47:02:dc:82:cc:27:46:a2:0f:05:84:4e:
         a3:09:44:b7
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZrEnBogjYbIrDbpxw8+yglhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYjQ0YjA3ODUyMmRhOWMzMTA2MmI5YzdlZjdmNTE3Mjdl
NzNlNWUwHhcNMjUxMTI3MDkxOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM5ZTNmZjJmZDY3NzhmNzBiMDA1YzRkZmRiM2M3NTlkMDI0MmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UkTQEXOwqXRDaKw2Z/6cNW+iv14
PPdXRdzk9fTX0mm5BPqQ5DTxuB18UDWxbhbvfIT0vkk3dWAviUQ7uASMp+P726eJ
kN5N+8wdFgRVgqBG5wMMdcMnMQpIsaffIYOqU8ZsyaGs9xtT6sRn2X0Hwsa2J6/R
gaYBTIuHXXNaHtcfd8baV0vT/lj7L2UeuspH8eEAyosgwAYRPlYU3m6Rt6Vcs7Lj
1WE9QNtnRgQ39ObI/Yu970LASfM8oYKSzvESDo1mS5ggjRGO7qR/UxdMIBMOybkB
Equ+AXJ5vLxBF26E1ZNjiOJVIKxe5te2ZLiglwqZjDZLCnfXmzzDW9t+WQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFKk54/8v1nePcLAFxN/bPHWdAkLwMB8GA1UdIwQY
MBaAFI60SweFItqcMQYrnH739Rcn5z5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMt
NjdmZjVhMGNlMWE1LzEvcVRual95X1dkNDl3c0FYRTM5czhkWjBDUXZBLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NzkyZTAtNmEzYS00NTI3LTkwZmMtNjdmZjVhMGNlMWE1
LzEvanJSTEI0VWkycHd4Qml1Y2Z2ZjFGeWZuUGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsezANBgkqhkiG
9w0BAQsFAAOCAQEAH6Rrc5AV2rqmLsXE+I5DFjqdMw5gu6zEQIvNl2ZwnO0AA1mL
0QqTZ0buBv7pkgsvCG6sFw3grrVXaXJaTOk8ipk+qRyNkqp8vz4Eoz8bEFBNOEDK
OhrkVcWTh2ZNYCO1oxzh1YVAEeId8g3je6eULq4uYpNEO+KtD+tHWAjDxIsurweQ
xNt6ZwpKvzt/dk2iTp97FenXpNwDy40loGq0RhTqYtKA1ilyijkQm4worajLIP23
yABItw2q7JhNOMs985XLNLMm4qAoIAg+VJTZwbOaQfZf9lKYn4w77laVIYtON+HA
qDIAOdV0d28FzAF4RwLcgswnRqIPBYROowlEtw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:25 2025 by rpki-client