This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/84INDcZjTBlWx7iXLOUNmppVBRE.asa
File:                     84INDcZjTBlWx7iXLOUNmppVBRE.asa (raw, json)
Hash identifier:          uOzVHo8Ev2RYxavQU1/DtqqtcYQmVGn8KRMz2l/ludA=
Subject key identifier:   F3:82:0D:0D:C6:63:4C:19:56:C7:B8:97:2C:E5:0D:9A:9A:55:05:11
Certificate issuer:       /CN=4f6c171b4c75d650a8af176886d0235a34e59df0
Certificate serial:       019AE7428B8744F1589E3E06493141C2369A
Authority key identifier: 4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/84INDcZjTBlWx7iXLOUNmppVBRE.asa
Signing time:             Thu 04 Dec 2025 02:48:08 +0000
ASPA not before:          Thu 04 Dec 2025 02:48:08 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            47311
Providers:                AS: 6939
                          AS: 24198
                          AS: 45735
                          AS: 133210
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e7:42:8b:87:44:f1:58:9e:3e:06:49:31:41:c2:36:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6c171b4c75d650a8af176886d0235a34e59df0
        Validity
            Not Before: Dec  4 02:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f3820d0dc6634c1956c7b8972ce50d9a9a550511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:17:8d:7a:85:3b:a7:36:17:c3:29:47:64:
                    82:62:96:58:45:47:d8:90:f3:bb:a2:07:5f:4e:37:
                    c1:fe:94:3a:19:61:95:a4:fa:5f:1b:3b:1a:89:08:
                    79:2c:ca:36:dd:f3:f3:0e:0b:fd:b9:59:ec:5e:4a:
                    85:13:e6:ae:d6:a1:d2:64:4e:06:a9:90:34:bc:82:
                    d4:36:40:18:0e:19:46:95:7b:e7:dc:53:71:dc:11:
                    06:f7:85:65:a2:ff:54:6a:39:03:dd:09:b1:ef:f2:
                    34:c4:93:7e:3f:ab:6b:26:b1:ce:47:c4:ef:ac:1d:
                    fd:4d:88:3f:89:01:7b:c5:aa:3b:ae:e6:bd:3e:b4:
                    d8:65:ec:8b:f9:91:e5:2f:41:fa:de:1c:58:24:6e:
                    e6:3a:a5:5b:a9:d3:2b:47:75:4e:99:3b:79:ff:f0:
                    ab:02:4a:79:8b:f7:15:c0:96:d6:b2:6b:09:44:e7:
                    69:09:b1:a3:f8:e1:06:ea:51:60:b1:90:55:42:e9:
                    bd:54:40:92:30:45:fa:63:0c:9d:fe:56:2f:f2:d4:
                    61:74:cb:9f:61:9d:4e:ef:e3:c9:37:ee:e8:ea:48:
                    4a:96:e1:7d:5b:c6:bb:32:2c:d8:ee:8a:d8:68:c0:
                    9e:57:e0:5e:48:2a:54:81:a3:82:db:94:c3:4f:48:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:0D:0D:C6:63:4C:19:56:C7:B8:97:2C:E5:0D:9A:9A:55:05:11
            X509v3 Authority Key Identifier:
                keyid:4F:6C:17:1B:4C:75:D6:50:A8:AF:17:68:86:D0:23:5A:34:E5:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2wXG0x11lCorxdohtAjWjTlnfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/84INDcZjTBlWx7iXLOUNmppVBRE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dcf969-3859-4dca-acf4-e2fedab3cb09/1/T2wXG0x11lCorxdohtAjWjTlnfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47311

    Signature Algorithm: sha256WithRSAEncryption
         33:85:d6:3b:09:a1:2e:bb:b3:92:54:34:73:69:6c:f0:c7:d5:
         2c:b4:f1:38:4e:47:92:bd:96:25:3a:08:0f:5a:b5:9e:f9:ca:
         56:97:59:a8:d3:d5:73:3a:17:e4:a9:58:a9:1b:f1:75:2c:a2:
         02:5e:cd:6b:88:b0:c3:51:fc:97:1d:ef:89:e5:36:67:82:a8:
         cb:72:ae:99:98:af:67:20:d2:03:38:58:2a:65:48:70:85:33:
         a8:0d:6b:b1:dd:20:56:e6:77:f2:e2:ba:28:57:a9:6f:b9:c1:
         52:09:a9:f2:1a:83:80:8d:75:2c:e3:d5:48:3f:22:16:08:25:
         7b:05:3b:b8:72:3e:5c:68:83:70:d7:89:49:27:10:2b:39:b8:
         b7:a1:7f:52:76:73:cd:47:2d:be:c4:59:8a:e4:95:c7:35:51:
         04:34:76:65:f4:08:5b:50:d0:f1:7c:07:b0:f7:9a:18:71:08:
         55:b9:9d:f1:aa:8a:a3:72:a5:0a:54:06:46:5c:81:f3:a2:52:
         89:62:c7:40:b9:14:37:a6:81:f7:8d:9f:ec:34:74:96:63:e7:
         c1:51:50:d3:62:f2:48:2a:a8:bf:3a:bf:4a:15:77:3b:72:13:
         f4:b7:41:bb:78:d1:5b:c7:bf:c6:97:ee:aa:32:d6:d6:99:c9:
         60:4a:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:12:29 2025 by rpki-client