This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/5MAPK6EjPFvP--_1_whI7tG2qbo.asa
File:                     5MAPK6EjPFvP--_1_whI7tG2qbo.asa (raw, json)
Hash identifier:          FwLbZWiuPVr7vbVsggf9jzbAmnmCltkY5rFT85LSnkQ=
Subject key identifier:   E4:C0:0F:2B:A1:23:3C:5B:CF:FB:EF:F5:FF:08:48:EE:D1:B6:A9:BA
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       019AFDCF40C712BBBA229FA7C55860D42A36
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/5MAPK6EjPFvP--_1_whI7tG2qbo.asa
Signing time:             Mon 08 Dec 2025 11:53:29 +0000
ASPA not before:          Mon 08 Dec 2025 11:53:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            215063
Providers:                AS: 1257
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fd:cf:40:c7:12:bb:ba:22:9f:a7:c5:58:60:d4:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Dec  8 11:53:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e4c00f2ba1233c5bcffbeff5ff0848eed1b6a9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:3a:29:85:1a:dc:46:e2:5a:13:57:ae:8a:
                    5c:db:6f:b1:ae:62:85:bc:c2:38:18:25:1d:8f:6e:
                    25:11:47:ab:2e:5d:26:23:76:bd:f6:94:07:7e:1a:
                    94:1c:e6:0b:75:22:85:59:a6:3c:97:6b:b9:00:c6:
                    9e:90:6d:e3:93:46:40:26:35:a8:4f:16:49:e7:f3:
                    cf:c5:ac:85:36:be:1f:9d:37:f6:76:38:76:56:d9:
                    e0:11:04:9b:7a:bc:05:7d:67:e6:17:4d:71:43:9c:
                    b1:c5:65:c0:21:72:45:d0:e1:5b:7b:6d:e8:ac:5c:
                    95:e8:47:2b:ee:87:3c:70:6b:01:7a:e1:b4:fd:f4:
                    85:bc:4a:2d:f6:63:06:99:8e:80:34:a1:03:22:62:
                    09:ae:16:7c:e0:da:49:dc:d6:3a:76:68:16:0d:9c:
                    84:b9:5b:6a:f5:0f:64:8b:05:af:18:1a:5e:59:8d:
                    9b:88:30:dc:ee:12:06:cb:8f:4c:f6:34:14:23:57:
                    da:c7:b9:dd:22:14:47:04:bd:ec:7a:05:66:18:ba:
                    78:ba:42:83:d2:b5:47:25:92:ef:82:8d:14:40:b1:
                    86:2e:89:bf:f0:17:b6:68:37:e4:5a:c0:8b:18:3f:
                    0e:bc:0a:50:e6:34:de:2f:0c:bd:13:de:a5:25:2e:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C0:0F:2B:A1:23:3C:5B:CF:FB:EF:F5:FF:08:48:EE:D1:B6:A9:BA
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/5MAPK6EjPFvP--_1_whI7tG2qbo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215063

    Signature Algorithm: sha256WithRSAEncryption
         01:11:ec:fd:ca:67:51:6e:88:8b:d0:48:a6:d5:b9:bc:a2:7f:
         50:1c:9c:62:71:d4:9b:90:4e:c5:4b:7c:86:d6:95:54:3f:c0:
         8e:38:f2:18:26:e9:f3:86:ce:2c:70:d4:58:da:c5:10:24:14:
         49:fd:06:52:ab:03:87:dd:88:81:3c:63:fb:c4:b6:15:f3:81:
         c1:ff:35:88:1b:c7:d7:4a:36:6d:73:2f:c5:d8:5d:ee:19:09:
         0c:57:76:c3:1a:99:6f:8c:4d:f4:ea:77:33:8b:10:23:ee:16:
         3c:8a:f6:da:0a:41:d3:7a:25:5d:99:e5:ab:67:61:ed:80:60:
         a2:08:df:f2:30:ca:43:02:9f:98:e2:6d:d7:67:ab:0a:48:d5:
         c9:b8:e6:9a:2f:df:79:d4:ff:1b:8d:ba:10:db:ae:bc:eb:13:
         0d:61:3e:f1:06:ef:c1:5f:90:68:72:51:f3:9f:35:88:a6:74:
         41:9e:63:a7:a4:99:e1:5f:dd:7c:84:76:44:46:c5:2c:6e:7c:
         05:1c:b4:0a:ce:41:c5:21:c4:0e:3c:96:4c:b4:5d:85:21:95:
         6f:50:55:7c:28:4a:b2:2a:a8:a9:a0:21:0d:a6:1f:76:f0:07:
         9a:b6:1c:f7:f8:54:8b:5b:53:f9:5a:1f:df:6b:e7:a3:66:75:
         64:5f:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:02:51 2025 by rpki-client